Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/akK3jmj2XOGUiVFsODRdnHkGc_c.roa
File: akK3jmj2XOGUiVFsODRdnHkGc_c.roa (raw, json)
Hash identifier: iHnATrIUMIpN0DtiaUo3nO6BDGC8312bff84u2t5dzA=
Subject key identifier: 6A:42:B7:8E:68:F6:5C:E1:94:89:51:6C:38:34:5D:9C:79:06:73:F7
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 01841E3FAAADE9AD457E35CEE4D3C51CF113
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/akK3jmj2XOGUiVFsODRdnHkGc_c.roa
Signing time: Fri 28 Oct 2022 10:59:59 +0000
ROA not before: Fri 28 Oct 2022 10:59:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 328543
IP address blocks: 2a0c:640::/29 maxlen: 29
2a0d:2480::/29 maxlen: 29
2a0c:f480::/29 maxlen: 29
2a0c:9380::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:3f:aa:ad:e9:ad:45:7e:35:ce:e4:d3:c5:1c:f1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Oct 28 10:59:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a42b78e68f65ce19489516c38345d9c790673f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ce:c0:20:6a:95:86:70:a8:f5:a3:c5:7a:f4:
d8:4d:63:59:7c:71:aa:21:83:2d:ff:19:94:c6:9a:
c1:30:11:36:2f:c4:76:1e:e0:9d:7f:7f:63:c2:16:
f1:9b:ca:04:7e:ea:d3:db:f9:94:63:87:84:cf:78:
f0:28:f3:5c:b2:b5:5f:30:24:0f:d2:17:14:e5:e7:
75:47:82:fd:12:03:d0:b7:c3:e0:96:35:03:31:58:
8d:be:70:73:23:c7:ce:09:92:e8:0d:bb:5a:1f:bd:
3b:c4:1c:11:91:1e:21:5a:92:30:a2:94:e4:e1:70:
a6:21:27:4e:41:76:4f:de:5e:ce:b1:19:e2:5a:ab:
e5:4c:6b:da:50:3e:7a:a0:c6:31:2e:4f:43:50:e5:
af:4a:5b:0d:b8:f1:ab:ab:8a:d4:20:ee:48:56:8c:
9a:4f:28:89:a1:03:c8:bd:25:9c:dc:23:8d:e3:bb:
ec:c4:8d:65:f6:2a:00:84:c4:d7:0d:18:3e:16:51:
75:a7:ae:c9:2f:57:11:d9:c7:6a:3e:67:fd:8a:64:
c8:08:f2:6d:bc:46:43:33:be:30:4f:32:9b:d3:a0:
a3:92:6f:36:e1:82:6a:d3:ad:34:f4:27:b9:a8:fd:
4b:3d:81:c2:db:7d:23:2b:bb:6d:21:28:80:e2:89:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:42:B7:8E:68:F6:5C:E1:94:89:51:6C:38:34:5D:9C:79:06:73:F7
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/akK3jmj2XOGUiVFsODRdnHkGc_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:640::/29
2a0c:9380::/29
2a0c:f480::/29
2a0d:2480::/29
Signature Algorithm: sha256WithRSAEncryption
25:96:79:bb:69:72:2a:c6:97:53:0a:d4:df:67:30:d2:9c:4a:
f2:ac:d8:0e:26:bd:c7:c5:0c:22:aa:2b:f0:b5:aa:23:f4:0d:
91:3d:3a:37:08:da:e3:67:6b:60:0e:13:0a:97:70:e4:c0:98:
d7:b2:71:1b:93:06:26:b3:4f:5d:01:db:f0:b7:c7:b5:68:65:
31:aa:50:7c:ba:7d:63:d9:96:31:8e:21:2f:52:d3:d4:77:72:
4b:95:ee:42:d5:3d:41:aa:69:66:d9:3c:a3:61:45:df:5b:0d:
b6:f3:db:64:b3:e9:06:d6:ef:ed:55:b9:6e:58:b3:36:7b:51:
be:9c:5b:38:b6:17:63:06:6e:51:d4:a7:52:b5:1b:0e:9c:ba:
9b:da:cb:95:7f:12:95:1a:72:c5:ac:ae:c3:d6:b0:a5:09:3e:
89:fe:00:76:f0:58:72:93:82:25:53:ee:9d:35:46:7e:25:d6:
f9:24:e2:1f:0c:71:57:5c:dd:b2:63:82:fa:7d:6a:7a:a8:73:
af:16:f1:7e:b0:de:bf:35:a5:2c:b9:6e:9e:df:12:3a:c5:9f:
d3:2b:c1:45:d9:63:30:4f:0d:bf:b8:eb:5d:e7:d6:08:e7:73:
a9:65:ca:96:1c:eb:4a:ba:66:8e:8a:91:cd:e0:fa:2f:ac:45:
6d:b5:d4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:32 2025 by rpki-client