Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/4_-9dIh5mJEKmBViJtIpsRWUu58.roa
File: 4_-9dIh5mJEKmBViJtIpsRWUu58.roa (raw, json)
Hash identifier: s1hBS71lJYKU6a5bi1y+ZRIAuDbEW0iceT7wWk9RZO0=
Subject key identifier: E3:FF:BD:74:88:79:98:91:0A:98:15:62:26:D2:29:B1:15:94:BB:9F
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01F51F1B
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/4_-9dIh5mJEKmBViJtIpsRWUu58.roa
Signing time: Wed 02 Mar 2022 15:50:23 +0000
ROA not before: Wed 02 Mar 2022 15:50:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213091
IP address blocks: 2a0c:b641:100::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32841499 (0x1f51f1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Mar 2 15:50:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3ffbd74887998910a98156226d229b11594bb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:9f:2c:a9:30:30:8b:3b:68:51:9d:4f:83:
c1:ee:2c:9a:e5:9c:42:e3:3a:73:a9:d2:cd:cf:7c:
5b:7f:f6:ea:70:38:3f:52:a1:5b:a4:6c:c9:a7:31:
44:95:82:05:56:40:f4:62:af:f1:3d:02:be:20:6d:
8f:02:13:e7:07:18:19:2f:c8:e1:51:25:64:4a:d8:
ea:6f:c2:ae:6f:2b:b0:86:65:a7:e2:02:1c:93:d4:
71:f6:75:e0:40:7d:98:ea:8a:1a:4c:7e:9e:08:b4:
eb:9e:ba:aa:a1:f0:fe:67:06:29:2e:50:e5:22:f3:
23:65:f9:02:9e:cd:e0:92:c0:f5:88:dd:29:5c:e8:
88:c5:49:76:de:e8:f0:9d:97:77:db:c0:49:5f:ae:
c7:d4:d0:e6:af:51:5d:3e:72:04:64:52:ed:14:f7:
9b:a2:8a:e0:13:d4:a6:1b:7b:74:18:08:36:9b:05:
5b:11:e9:89:84:2e:b8:9a:9c:90:73:3b:37:51:da:
4d:6b:c6:7d:f4:6d:92:9b:28:3c:a9:58:eb:40:01:
02:81:0f:67:70:60:b2:13:75:32:a6:43:64:41:d2:
a9:6d:24:eb:95:41:50:6c:97:04:ac:be:53:60:ed:
65:c7:01:e8:d2:ff:b0:74:a9:96:02:2a:22:b3:9a:
07:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FF:BD:74:88:79:98:91:0A:98:15:62:26:D2:29:B1:15:94:BB:9F
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/4_-9dIh5mJEKmBViJtIpsRWUu58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:100::/44
Signature Algorithm: sha256WithRSAEncryption
98:bc:99:88:4c:61:f4:5a:48:11:68:4b:ca:e3:af:f1:20:8d:
5c:c4:30:11:e7:2f:d4:6a:50:4d:11:e2:62:25:9d:06:c9:32:
ff:35:5b:fb:2f:f0:3f:0e:e2:01:f8:2f:cd:43:29:16:b4:fc:
87:1e:e0:fb:5b:66:1b:42:4a:59:a6:b0:81:2d:a0:26:a2:62:
09:bd:b7:72:b1:11:51:c9:ae:a1:09:95:c6:23:d1:7b:2d:63:
32:9a:5f:3c:c7:2a:d0:3d:ef:e7:cf:49:68:ea:67:a5:fe:8c:
04:b6:bd:1c:bf:e4:6f:86:3a:82:54:d6:f3:38:4c:fb:9a:63:
aa:58:d5:7d:0f:a7:a2:bf:ff:73:65:e2:fb:07:b6:f7:60:bd:
69:b5:b6:cd:8a:9b:19:31:ed:96:66:b7:c5:17:e1:19:0c:7e:
7f:2a:f3:57:af:85:73:4f:87:4b:8e:e9:fe:94:03:38:59:03:
2f:8f:19:d7:b0:32:8f:65:4d:43:f2:1f:fb:35:d1:35:82:a1:
18:4b:cb:e6:c1:4c:48:a2:f0:eb:29:74:10:df:69:72:03:77:
d2:25:01:b6:97:f1:87:41:98:12:44:67:5d:67:e1:77:11:1f:
d6:98:18:b2:9d:fe:6c:56:03:d3:36:5b:41:3f:0d:60:fe:a5:
14:cb:42:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:23 2025 by rpki-client