Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/FaYj0sDbYOxSgUNTQyaXKrDOIoc.roa
File: FaYj0sDbYOxSgUNTQyaXKrDOIoc.roa (raw, json)
Hash identifier: 3DKOdYx3mjS0hp4dRPc131oUpzl3KfLNDcBDWa/L3/k=
Subject key identifier: 15:A6:23:D2:C0:DB:60:EC:52:81:43:53:43:26:97:2A:B0:CE:22:87
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01874DD36E5D4F825694270B94CB8EE4AF08
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/FaYj0sDbYOxSgUNTQyaXKrDOIoc.roa
Signing time: Tue 04 Apr 2023 19:51:54 +0000
ROA not before: Tue 04 Apr 2023 19:51:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 2a0c:b641:6d0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4d:d3:6e:5d:4f:82:56:94:27:0b:94:cb:8e:e4:af:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Apr 4 19:51:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15a623d2c0db60ec528143534326972ab0ce2287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:55:60:ec:7b:aa:99:43:07:2f:1f:de:42:04:
7a:74:c3:04:7b:c0:81:6d:09:91:b0:92:0a:88:9e:
89:cb:2d:8c:f8:79:4f:a9:70:c1:b0:66:91:41:09:
fc:15:48:92:55:19:42:f9:2a:ae:8b:3a:58:88:76:
1c:7e:d6:40:9a:cc:a7:e1:e6:e3:c1:70:3d:c4:72:
14:e1:ba:29:71:2f:8d:bb:1a:95:1d:2a:82:b7:11:
d1:e3:84:8e:57:b5:48:b7:df:5f:b7:7b:dd:68:ff:
d5:35:1f:f1:3b:bb:9e:98:85:fc:87:d7:c0:01:13:
11:c5:57:0a:00:0d:53:3c:c3:54:25:c9:d0:51:07:
2d:69:3a:2b:a9:38:c1:b8:a3:29:0b:dd:54:ab:05:
36:0b:12:a3:f2:70:25:e2:46:c6:34:97:be:2b:9d:
94:5d:ee:69:aa:34:2a:23:43:92:df:f6:b2:24:a1:
1c:04:c3:34:e6:ad:2b:a8:16:85:d3:4b:20:77:81:
5e:8e:e1:13:89:8c:48:11:89:8f:2f:54:81:4e:c0:
94:c6:58:4d:d7:4d:20:2a:f9:c1:20:c0:62:2f:37:
05:d6:85:32:28:27:ca:12:6c:d2:68:18:df:f6:aa:
4a:52:78:70:a2:8e:88:59:47:d3:4f:1b:c8:1b:c6:
ea:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A6:23:D2:C0:DB:60:EC:52:81:43:53:43:26:97:2A:B0:CE:22:87
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/FaYj0sDbYOxSgUNTQyaXKrDOIoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:6d0::/44
Signature Algorithm: sha256WithRSAEncryption
1c:5d:6e:0b:0b:11:e7:b8:66:bd:32:9b:98:11:d5:01:65:9b:
e2:58:75:03:a5:c8:c6:5e:41:b9:e7:2b:25:c4:16:a5:59:ce:
74:3f:61:b9:79:d9:0e:95:71:bc:01:e9:8b:2c:9a:b4:86:68:
d5:3b:dd:c0:c3:c0:04:1d:32:f8:c7:92:2b:2c:e8:3f:09:50:
53:f5:c7:5c:ed:4c:62:5c:96:46:7a:88:42:c6:12:f8:38:ad:
fb:bc:f3:6b:68:7a:0e:9b:30:f7:21:16:4f:44:e9:4a:34:6a:
8b:c0:df:a8:65:c7:81:87:87:1c:81:31:09:2d:bd:0e:1b:55:
76:1a:8e:1f:ab:cd:24:57:3d:1a:f5:ab:45:60:da:c2:06:4e:
aa:fc:9d:a8:87:92:7f:a3:cd:ff:87:68:e6:53:55:5c:81:d6:
53:94:95:1a:5f:b2:1e:27:a0:13:80:13:0d:a5:dc:28:3a:d4:
7b:cc:0f:6c:00:d7:27:5f:3f:49:2e:0f:de:d6:f3:4d:31:f9:
06:38:ab:bb:02:9a:1c:03:6e:01:18:c7:06:3c:32:6a:b6:05:
fc:99:27:1b:07:aa:73:f9:e2:7e:60:17:a4:a7:19:93:5f:44:
5c:25:ea:64:d9:f7:49:83:01:b1:e3:99:09:6e:b5:4a:4c:68:
e8:42:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:43 2025 by rpki-client