Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1vlK85GaqGT5qRKem0eJcKWyfs4.roa
File: 1vlK85GaqGT5qRKem0eJcKWyfs4.roa (raw, json)
Hash identifier: 3j4st+tYuS8dU871BbbekcCiAaXuWPPzZdja3OX6Tuw=
Subject key identifier: D6:F9:4A:F3:91:9A:A8:64:F9:A9:12:9E:9B:47:89:70:A5:B2:7E:CE
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0137FC67
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1vlK85GaqGT5qRKem0eJcKWyfs4.roa
Signing time: Sat 01 Jan 2022 00:59:57 +0000
ROA not before: Sat 01 Jan 2022 00:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210356
IP address blocks: 2a0c:b641:600::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20446311 (0x137fc67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6f94af3919aa864f9a9129e9b478970a5b27ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:23:97:60:14:e4:c6:a7:59:60:13:06:ab:
76:d0:ea:a2:3b:40:0b:c0:c4:2c:d8:ae:4f:b5:f0:
ed:d1:11:e3:d5:83:cf:b8:23:8e:73:ac:21:7a:0d:
1e:73:68:fc:21:ac:96:04:96:1e:83:83:48:3f:fe:
76:12:c0:25:8a:9a:f9:a3:a2:d7:65:0c:64:65:60:
df:2e:2d:c0:0c:06:f3:4e:71:c1:84:52:9a:e5:24:
7c:c8:40:75:0f:86:02:60:da:a6:9a:9a:37:08:50:
0e:90:74:9b:d1:88:4f:a3:62:7f:94:eb:f4:70:76:
90:b1:c5:bf:b4:c8:ba:e0:bd:91:3d:5b:16:1c:e8:
4b:96:92:58:39:45:88:e3:30:75:8a:ea:e9:2a:be:
fa:70:06:ef:69:05:7c:e9:ec:12:a5:7a:a3:59:76:
f2:2b:5c:ce:8f:4e:e4:26:79:ff:5b:66:f6:24:a7:
05:ec:27:85:01:52:cf:f3:fa:4a:8f:5a:5e:3d:0b:
8c:8d:d9:5a:68:c7:c5:63:68:f6:5d:77:8c:2e:b9:
f8:66:1c:c0:48:e8:2e:0b:95:44:57:9f:d4:b5:04:
9b:b5:a9:2b:23:45:9f:22:fe:dc:0e:60:64:26:39:
57:b8:3f:1a:24:49:15:c1:f0:90:4d:0a:0e:fe:45:
ae:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F9:4A:F3:91:9A:A8:64:F9:A9:12:9E:9B:47:89:70:A5:B2:7E:CE
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1vlK85GaqGT5qRKem0eJcKWyfs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:600::/44
Signature Algorithm: sha256WithRSAEncryption
34:c4:1e:4f:b3:42:ea:a9:0b:21:b9:97:9c:d3:74:f6:1d:76:
1f:70:f9:95:d7:86:d1:2b:8b:91:52:87:b8:c0:32:a2:05:22:
90:85:3f:80:22:f5:8d:55:cc:5c:2f:45:67:e6:4a:bf:54:81:
e4:17:6f:7b:f7:05:dc:08:cc:b3:49:16:52:3e:f3:13:00:a4:
a8:aa:52:39:10:af:a8:d8:ed:f8:e5:36:1f:15:ea:c6:27:5a:
d8:16:f8:7e:2a:db:ce:6a:dc:a9:c4:3b:ea:28:a3:b3:58:10:
9b:4f:5b:73:c8:42:db:73:b0:fa:4a:7b:09:0b:cc:05:ef:b4:
d5:1a:ce:2e:33:a5:e4:c1:8c:0e:0c:8f:be:27:0e:12:cd:57:
ef:e1:f3:46:03:e9:c7:f8:8d:cf:a6:65:4a:98:c9:ba:38:83:
f7:ec:10:39:f1:ab:ca:5e:86:44:68:84:9f:39:2c:e1:42:bb:
5a:35:3a:5b:4c:70:57:28:50:f2:15:83:1a:9a:2f:a9:c3:0b:
2d:25:e8:c2:ea:3d:68:eb:bf:08:68:0a:26:a9:4d:1c:d0:b3:
dd:14:11:2a:a2:fe:92:98:c9:11:50:40:ac:3d:7f:11:d3:4a:
09:d2:0d:5c:1f:23:11:f5:f6:dc:ff:e8:8e:08:55:38:07:1c:
d1:cc:9a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:29 2025 by rpki-client