Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-zP65Wmx5EL6cFlzDuodLQkhB3I.roa
File: 1-zP65Wmx5EL6cFlzDuodLQkhB3I.roa (raw, json)
Hash identifier: 75hAOoMArWQdufZ1SF2RN9lTYIAa0/z+nTQzDdHIUtw=
Subject key identifier: FB:33:FA:E5:69:B1:E4:42:FA:70:59:73:0E:EA:1D:2D:09:21:07:72
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E8B0D37C3B339629ACCA14A6C55BD
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-zP65Wmx5EL6cFlzDuodLQkhB3I.roa
Signing time: Mon 02 Jan 2023 06:15:04 +0000
ROA not before: Mon 02 Jan 2023 06:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212625
IP address blocks: 2a0c:b641:2b0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:8b:0d:37:c3:b3:39:62:9a:cc:a1:4a:6c:55:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb33fae569b1e442fa7059730eea1d2d09210772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:70:73:a7:2b:ad:af:cb:4d:cd:c9:c9:f3:
29:aa:d2:36:4d:1f:c7:77:dc:00:99:6c:db:b0:1b:
6f:0f:62:64:59:44:6b:e7:b6:7d:b2:db:3a:e1:0b:
16:cd:11:4b:4e:e4:e7:3f:54:b5:ac:c5:59:71:4b:
8a:9d:72:f4:c7:7c:c9:74:a3:b1:c7:57:45:b1:8d:
06:d3:fa:a0:93:73:7b:ce:ea:86:83:fb:5a:20:3b:
de:6b:32:ae:b7:b8:ce:ef:55:6d:39:7d:68:3b:ee:
10:b6:fa:90:51:4e:f9:03:dd:66:44:9c:62:b8:f9:
c2:a3:6c:a1:3f:1d:7c:05:9a:80:e0:04:d4:c1:fd:
bb:be:d8:28:8e:bd:1f:fe:cc:78:e1:ff:5c:9c:e7:
be:1a:d3:49:63:9e:81:4e:43:d7:e1:33:e7:95:07:
7e:be:cb:bc:c1:dc:7c:d2:59:b8:fa:63:71:e8:38:
f8:d8:59:0c:53:3c:53:36:08:c9:a9:9c:44:a1:74:
30:80:9a:ac:bb:01:dd:d7:89:fe:3f:a0:a4:d1:de:
bb:2d:bf:f8:d5:ef:78:f6:68:3f:9d:0f:cd:76:2d:
04:5f:d4:b6:48:fc:c6:a3:a9:ce:5b:f5:19:18:42:
a9:0f:b2:2c:89:38:eb:80:70:42:e3:5b:46:a1:12:
69:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:33:FA:E5:69:B1:E4:42:FA:70:59:73:0E:EA:1D:2D:09:21:07:72
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-zP65Wmx5EL6cFlzDuodLQkhB3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:2b0::/44
Signature Algorithm: sha256WithRSAEncryption
48:56:7c:f0:65:18:24:e7:a6:a1:6d:a7:e4:4b:cb:9b:bb:12:
88:f1:8a:1b:db:8b:91:64:d3:01:87:c3:bb:3a:bf:3a:34:35:
9a:ee:62:7f:9d:f9:6f:54:1c:9b:ab:9f:f0:0e:7f:d5:7b:fd:
b7:27:7d:ef:af:b6:a3:c1:e6:a9:04:a0:e2:f4:23:b3:f8:a1:
c3:d5:78:f1:67:14:a8:54:87:88:ae:8e:85:35:0d:6f:84:76:
5f:1a:a1:54:36:fb:ac:87:8d:af:e6:32:83:34:94:1f:52:b5:
cb:36:28:36:45:24:13:d9:32:ab:67:a5:13:25:18:f6:a0:aa:
2f:72:ba:d8:d7:2e:d3:e5:f3:f1:19:cc:b0:33:61:8e:24:37:
7c:52:16:5d:95:46:44:f9:7f:e1:0a:db:0a:c4:55:d9:d1:61:
53:a6:12:19:15:23:f0:16:68:10:d1:35:41:84:70:40:e9:ea:
21:7d:58:bc:07:e0:99:3c:c0:82:09:fa:50:66:38:a8:a0:5f:
20:b6:57:16:94:87:0f:c4:fd:f2:df:b4:97:45:db:9b:14:66:
76:28:86:ff:74:10:86:79:a1:70:e7:9f:5a:09:5e:b8:de:a6:
a4:da:2f:a2:d6:44:07:47:9b:0a:b7:a8:5d:58:b7:1a:24:2d:
12:10:92:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:28:37 2025 by rpki-client