Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EkdzQEW2fnuiQQeoNqPTlG_UWDk.roa
File: EkdzQEW2fnuiQQeoNqPTlG_UWDk.roa (raw, json)
Hash identifier: PYqXIO7wZbjgTmTEsvueJ8t89Ub7OyGABgJA2TxLwIQ=
Subject key identifier: 12:47:73:40:45:B6:7E:7B:A2:41:07:A8:36:A3:D3:94:6F:D4:58:39
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 012FD2CC
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EkdzQEW2fnuiQQeoNqPTlG_UWDk.roa
Signing time: Sat 01 Jan 2022 00:59:50 +0000
ROA not before: Sat 01 Jan 2022 00:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209645
IP address blocks: 2a0c:b641:230::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19911372 (0x12fd2cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1247734045b67e7ba24107a836a3d3946fd45839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d6:ef:d2:fe:6c:79:4c:92:16:30:6e:7b:03:
91:a2:d9:43:14:e9:44:ec:57:c5:02:ed:61:8f:84:
55:53:50:2e:a0:68:6d:d8:ee:52:a6:6a:1e:f2:09:
8e:17:af:8f:db:2a:85:f7:00:8a:40:36:36:e1:f6:
bf:8d:85:dd:7f:9e:be:9c:7e:59:0d:42:06:ca:84:
e7:c8:f5:21:6b:e2:b3:49:01:02:8b:b2:2c:6f:0d:
57:be:e2:d9:9c:86:a5:cc:be:4a:3c:d4:11:b8:5b:
2c:ab:0e:3e:a0:90:ad:8f:14:ea:c9:ce:d5:a0:76:
36:50:5b:5e:f1:79:c6:e1:75:93:e6:96:58:80:35:
72:43:49:0a:d0:52:56:f5:e3:87:23:81:c6:f7:79:
c3:c4:de:be:6d:0c:38:06:fc:8d:d3:fd:d7:56:18:
d5:99:bb:f0:e1:0c:72:37:a0:42:8b:fc:e3:a1:84:
56:51:44:05:19:fd:46:47:a0:66:17:7b:ea:75:e1:
c6:9d:8e:e1:cb:50:c1:90:27:86:03:5c:f7:ad:47:
d9:b0:6f:6a:c3:a3:b6:57:f5:81:87:d6:53:c2:8c:
3b:42:4f:15:b3:51:1a:87:14:cb:5f:b8:db:85:47:
17:8f:93:1b:7a:24:15:9b:73:15:af:f6:6f:8b:50:
b3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:47:73:40:45:B6:7E:7B:A2:41:07:A8:36:A3:D3:94:6F:D4:58:39
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EkdzQEW2fnuiQQeoNqPTlG_UWDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:230::/44
Signature Algorithm: sha256WithRSAEncryption
4f:2a:76:46:69:c6:d9:9a:40:fd:6f:f6:cd:ec:69:9a:03:b0:
51:5b:70:96:7e:b5:6d:b5:1f:ad:aa:85:42:cd:66:56:64:09:
d2:9a:2c:75:93:81:4e:c6:21:31:5c:a6:3a:9a:f1:bc:5b:72:
e0:6c:fe:b8:22:7a:0a:30:19:2f:99:f7:81:89:79:99:25:94:
60:fa:79:7c:43:c6:68:76:eb:54:5a:3e:92:6e:ec:73:f6:1d:
9f:e8:43:0d:19:f3:03:00:50:13:77:07:f5:5e:32:a1:37:ca:
cb:22:90:c2:fc:f1:fc:91:9e:7d:77:ef:24:d3:7e:ae:ce:46:
73:97:1a:47:da:df:a3:ec:86:0c:1f:ad:90:96:15:52:a4:a2:
86:7c:b0:ad:c6:ea:58:8f:f7:58:40:ed:cf:b2:e8:eb:ff:4c:
f8:1e:f7:2b:22:dc:bd:a9:a6:c1:d1:6d:e4:8a:d2:de:ef:24:
d6:59:a5:da:25:49:98:71:ec:cb:c9:46:3e:b6:59:7a:9e:51:
c5:cd:33:2b:4b:93:21:02:bd:ca:18:14:04:73:9e:86:1b:04:
17:ed:52:bc:e9:3e:2c:9f:88:4d:6c:e0:3b:6f:eb:1b:d7:8a:
e0:2f:a5:f3:0a:5f:4f:4a:18:fc:3d:77:8c:9d:e3:fb:0a:20:
ab:4b:0a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:34 2025 by rpki-client