Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MqGta39vScXg66ogmXBdV_hwn5Q.roa
File: MqGta39vScXg66ogmXBdV_hwn5Q.roa (raw, json)
Hash identifier: tyJaqpdLirS1Nr/FW7Fx/AJRp1matzkde8lVSNsm/xI=
Subject key identifier: 32:A1:AD:6B:7F:6F:49:C5:E0:EB:AA:20:99:70:5D:57:F8:70:9F:94
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E5330420B347A597F55FDAAC83D64
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MqGta39vScXg66ogmXBdV_hwn5Q.roa
Signing time: Mon 02 Jan 2023 06:14:50 +0000
ROA not before: Mon 02 Jan 2023 06:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204765
IP address blocks: 2a0c:b641:8b0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:53:30:42:0b:34:7a:59:7f:55:fd:aa:c8:3d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32a1ad6b7f6f49c5e0ebaa2099705d57f8709f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:59:32:77:7d:10:92:ca:b0:57:9a:5b:c9:
f8:6e:31:56:a4:a1:2d:4e:80:c4:9c:23:99:e8:fc:
71:9b:87:1e:3c:20:99:25:e2:ec:cf:75:e9:12:a3:
84:4e:97:c2:4f:79:d2:4e:47:f6:76:b9:f2:ed:dd:
fb:0c:46:09:05:77:b2:b1:cf:27:0e:13:51:fb:43:
40:27:e5:ec:ec:68:7a:83:1c:65:83:82:96:88:ba:
49:97:6a:04:36:72:de:2f:5e:78:e5:18:6c:b3:83:
03:ca:e9:3a:d4:b1:b7:c4:4a:91:fb:99:48:d5:d1:
9f:c4:27:a6:44:db:62:e3:6f:a2:4e:0a:aa:66:c4:
03:f6:a7:ed:81:94:56:0b:b6:c4:50:bc:f7:08:9f:
ab:a2:5a:43:28:8c:1b:ef:69:88:ee:c1:24:37:c5:
3d:c0:d8:ff:97:67:2d:4b:f8:31:9b:65:aa:3a:65:
ed:41:45:1f:0a:77:e0:98:37:72:c1:77:a4:44:20:
a7:fd:bd:00:80:90:0c:2a:fb:22:90:bc:d3:cc:33:
8b:8a:f5:5c:70:6d:c7:65:f8:26:e8:9b:90:e7:a9:
00:3f:b6:5b:0e:b2:db:f5:87:27:6c:ba:ee:21:28:
80:0c:91:fb:e9:e5:ef:e2:18:71:ac:60:c4:10:fe:
fd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A1:AD:6B:7F:6F:49:C5:E0:EB:AA:20:99:70:5D:57:F8:70:9F:94
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MqGta39vScXg66ogmXBdV_hwn5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:8b0::/44
Signature Algorithm: sha256WithRSAEncryption
3c:93:f7:2d:3e:41:1d:70:e4:2d:89:c4:23:c1:b7:07:57:22:
8d:3b:f3:fa:a3:49:a6:a9:ff:7c:38:c7:10:69:7c:86:d7:84:
a4:40:8f:9f:56:58:e7:15:5b:27:39:ad:6d:f8:95:0c:94:0c:
91:67:40:d1:73:b5:39:02:67:38:ae:93:4c:2b:9a:73:f0:91:
90:2b:ff:58:af:c8:8f:d7:58:74:06:c1:7e:3f:03:25:ed:13:
95:45:99:93:50:a0:97:28:40:ea:76:9e:5e:b6:04:41:7c:2d:
80:d3:2f:4a:97:ee:63:1d:3c:c0:f8:95:aa:7d:fe:fa:a8:f4:
77:a6:45:2c:dc:5f:a5:f6:fe:d7:07:92:c2:45:ef:28:2b:37:
e5:15:6d:69:fe:c5:78:31:8e:12:b0:b9:0c:64:65:dd:a8:cc:
09:6c:19:3f:b2:2c:fb:a8:e2:38:0b:d8:da:b0:a1:1f:42:29:
25:53:d0:ce:bb:5c:a7:17:14:a7:14:ad:e0:5d:67:b6:f0:4b:
68:8b:2e:6b:a2:d4:43:d3:4f:98:02:64:ef:66:25:f0:82:ea:
e2:60:6a:16:46:02:54:b1:a8:b2:16:2c:07:0e:1b:d0:c3:93:
89:c0:6e:b1:7d:8a:6c:71:97:22:14:7c:12:c6:75:f2:1c:95:
04:17:e1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:05 2025 by rpki-client