Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/58O9V5_fsBDtXkW7zH-FWO_G5aI.roa
File: 58O9V5_fsBDtXkW7zH-FWO_G5aI.roa (raw, json)
Hash identifier: sO7W8Od31W8z9+NkRdSZsRnkuUiWhtOE40LsSAD+qbU=
Subject key identifier: E7:C3:BD:57:9F:DF:B0:10:ED:5E:45:BB:CC:7F:85:58:EF:C6:E5:A2
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E88491FE81280F996C4EE4BD974AE
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/58O9V5_fsBDtXkW7zH-FWO_G5aI.roa
Signing time: Mon 02 Jan 2023 06:15:04 +0000
ROA not before: Mon 02 Jan 2023 06:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212299
IP address blocks: 2a0c:b641:a0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:88:49:1f:e8:12:80:f9:96:c4:ee:4b:d9:74:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7c3bd579fdfb010ed5e45bbcc7f8558efc6e5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fb:a1:4d:28:d9:92:3d:a2:81:20:c3:b1:7f:
4d:ae:2a:09:06:5c:c5:93:e7:15:5b:7a:61:1f:29:
4e:e7:91:06:45:cb:8e:af:58:6d:7a:7e:1d:88:d7:
70:87:a8:71:c0:68:dc:db:78:90:75:2a:56:9b:51:
c2:d8:24:5c:be:9d:59:bb:9e:97:61:09:58:e7:6f:
60:e0:9b:6c:7b:81:2b:50:f3:9d:92:90:2b:b5:b0:
fe:ff:76:be:ec:fe:b2:99:60:9c:67:ba:44:3d:66:
f5:f0:16:8e:14:d5:3f:49:a1:b8:d4:11:7c:97:39:
b0:29:22:5f:82:95:92:29:bf:07:63:c7:6b:e3:1f:
7d:57:72:5d:2f:81:70:b9:ef:83:e1:23:50:64:82:
c7:bb:88:9e:22:d3:da:fd:f3:f3:28:93:33:6a:0e:
e5:9e:a2:74:e8:42:14:46:5b:1d:14:50:c6:80:5c:
50:22:21:61:a2:78:1a:95:85:c9:b8:ef:89:10:83:
eb:0a:19:be:0b:71:32:a1:ad:e4:e5:4a:ba:77:42:
ef:f0:e2:0b:0f:e4:22:10:67:f2:4b:18:c4:56:c9:
8a:a6:20:0a:45:1d:0e:b4:01:cc:04:81:fa:d6:d0:
0f:ca:c7:e9:e5:39:85:74:69:95:d9:63:cc:93:bb:
41:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C3:BD:57:9F:DF:B0:10:ED:5E:45:BB:CC:7F:85:58:EF:C6:E5:A2
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/58O9V5_fsBDtXkW7zH-FWO_G5aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:a0::/44
Signature Algorithm: sha256WithRSAEncryption
17:ce:a2:97:09:32:dd:0f:3f:09:68:cc:31:b5:bb:12:c2:7d:
1c:85:dd:ba:48:9a:cf:7c:0e:60:de:ac:8e:18:0e:b9:68:03:
18:8e:c4:7a:c3:4d:67:71:e9:40:e0:e9:f3:c3:b9:b2:56:51:
18:d8:a3:c8:da:03:1b:0a:b1:8c:9c:d3:af:98:63:5f:52:41:
b6:24:5c:56:0b:80:91:48:1b:64:97:ab:18:81:0c:ba:69:c9:
1b:ab:b7:33:7f:e9:03:50:34:45:15:2c:5f:6b:90:95:0a:a8:
2f:42:66:2c:82:a1:9c:ef:c1:9f:33:3f:1b:08:54:b9:59:e7:
70:58:e5:8e:64:44:db:3c:3e:a1:9f:3f:b3:c8:d3:02:20:ba:
40:ff:ab:19:b8:61:cf:bf:dc:45:c2:3e:fe:b5:c8:0e:8d:fc:
3d:b7:cb:8a:0a:cb:dd:c0:98:ba:b4:0a:44:b4:99:81:68:48:
d8:3e:fe:15:39:6b:4f:58:84:24:16:fd:52:27:57:3f:91:a4:
41:6b:2b:2e:28:fa:7c:e7:e5:61:50:b2:76:6c:19:9e:d2:59:
b0:ef:b7:89:d5:f5:04:1d:3d:55:6a:2e:79:0f:3e:ca:8b:76:
2e:3a:a7:8c:70:a1:d1:af:4d:8c:0a:7d:28:40:da:fa:cc:2f:
9c:6f:ed:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:14 2025 by rpki-client