Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/7Al69Isal31YilgBHi9z1P8vCvY.roa
File: 7Al69Isal31YilgBHi9z1P8vCvY.roa (raw, json)
Hash identifier: Xo4bQfJFEts+R9pj1oLK0vbTCN5MeS5gHpcGkMrKY/Y=
Subject key identifier: EC:09:7A:F4:8B:1A:97:7D:58:8A:58:01:1E:2F:73:D4:FF:2F:0A:F6
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 010BDD16
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/7Al69Isal31YilgBHi9z1P8vCvY.roa
Signing time: Sat 01 Jan 2022 00:59:32 +0000
ROA not before: Sat 01 Jan 2022 00:59:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58305
IP address blocks: 2a0c:b642:1a0d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17554710 (0x10bdd16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec097af48b1a977d588a58011e2f73d4ff2f0af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:f3:58:f6:d1:fb:e2:0f:d9:3f:50:27:76:
52:e5:a6:06:ef:b7:fe:fa:ff:8d:b8:02:85:7b:4d:
ca:80:13:9c:9d:6d:a4:dd:fe:6d:aa:d5:30:bd:7d:
d9:ba:c3:f4:37:c9:3a:b1:78:b6:f2:7f:2b:c0:4f:
f0:4b:f5:10:86:b4:64:54:47:9c:e4:3d:76:31:ac:
60:5c:ba:97:ef:d5:b5:08:3f:14:35:fd:22:e0:0b:
1b:fa:2d:ff:8f:77:10:51:90:49:67:59:21:1d:36:
92:f1:28:51:76:ab:48:78:a4:de:45:e6:5e:8f:1d:
1c:d1:06:4e:49:4f:d1:bd:02:cf:d8:ef:76:c3:57:
ce:ef:ed:43:b8:37:2d:62:4b:d0:5b:56:ed:91:da:
53:24:bd:94:b7:bf:f8:23:fb:09:29:97:4e:0d:30:
c8:75:c0:7c:76:f3:65:9c:1f:ce:69:af:d0:6c:af:
f8:83:96:4c:69:5e:d1:14:07:cb:c6:66:dc:68:59:
ca:f0:6b:44:33:2b:92:5e:62:b9:80:1e:2a:b7:37:
bc:b3:5b:f1:1a:14:7f:c8:56:c3:2f:90:87:d6:c7:
ff:dd:c6:94:1f:bd:04:ff:95:16:fa:c5:22:e9:22:
a3:9e:0e:e8:34:85:a9:62:c4:b9:51:dc:3c:24:f3:
9d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:09:7A:F4:8B:1A:97:7D:58:8A:58:01:1E:2F:73:D4:FF:2F:0A:F6
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/7Al69Isal31YilgBHi9z1P8vCvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a0d::/48
Signature Algorithm: sha256WithRSAEncryption
1b:a0:c0:5b:dc:79:85:e9:16:76:ac:7a:ba:7d:8d:40:28:dd:
97:59:dd:5e:94:b9:78:e3:91:74:df:d4:dc:99:3f:60:72:cc:
6a:d9:8e:2c:36:e2:75:e3:10:b9:2e:f5:d0:37:94:9e:7f:ad:
1b:eb:9e:78:af:8e:78:f4:2a:ba:7e:25:54:63:4a:dc:d3:03:
22:d7:11:f0:f8:08:17:02:64:f9:1c:04:9e:d6:e6:c1:15:4c:
51:33:2c:59:29:c9:0c:b3:b9:3c:d1:39:5f:32:4a:f5:2a:95:
bb:06:5f:22:84:02:78:10:00:de:8b:75:89:4e:c9:00:8d:b7:
2a:c1:6d:11:59:4f:d1:a8:85:0d:8a:f4:32:25:61:3a:a2:ce:
b3:1b:6b:77:89:81:37:43:5a:a6:b4:06:de:0e:cf:ea:9b:a4:
49:a8:36:51:b1:c4:c4:78:22:63:fa:f5:26:4c:8f:b3:36:d5:
94:7d:df:43:4c:00:33:15:44:62:f6:83:53:3d:34:43:a5:48:
11:0e:ce:0b:13:95:a1:de:c2:ec:1f:b5:6c:3f:00:31:1f:96:
92:3b:16:59:64:c4:ca:6a:12:ca:52:ef:c7:ba:d5:a4:56:ca:
0c:15:8b:41:e4:35:11:62:a5:2a:98:1c:c7:6c:07:c1:af:15:
a8:c6:ad:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:41 2025 by rpki-client