Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/QpvCk5wAaSRkoh6WMrIhIL1MD98.roa
File: QpvCk5wAaSRkoh6WMrIhIL1MD98.roa (raw, json)
Hash identifier: VSxAUJluvnTg92pDijBgjfyB0dfFS8fHg/8R7z5xGgk=
Subject key identifier: 42:9B:C2:93:9C:00:69:24:64:A2:1E:96:32:B2:21:20:BD:4C:0F:DF
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E8D49BADFA8B851471C4058CD953F
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/QpvCk5wAaSRkoh6WMrIhIL1MD98.roa
Signing time: Mon 02 Jan 2023 06:15:05 +0000
ROA not before: Mon 02 Jan 2023 06:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212715
IP address blocks: 2a0c:b641:4e0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:8d:49:ba:df:a8:b8:51:47:1c:40:58:cd:95:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=429bc2939c00692464a21e9632b22120bd4c0fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:d7:21:83:30:49:23:43:f3:60:11:16:1e:
13:2d:30:61:5c:9d:23:ea:ab:03:7f:42:6b:89:74:
12:91:40:e4:77:b3:9a:d3:23:4c:e5:c8:6a:6a:2d:
46:a8:91:86:ad:02:75:2a:3e:95:eb:70:cf:a5:7e:
2f:dd:a9:0a:e7:86:a3:b2:c1:ab:09:c2:4b:df:7b:
11:a2:89:2a:75:8b:fe:ae:ea:cf:06:21:66:df:16:
e4:83:cd:1d:54:e6:1f:cc:7f:34:a9:b4:d2:de:e9:
2d:e0:4e:55:42:35:ce:a3:e2:31:7f:23:bd:51:83:
ad:48:37:25:a4:dc:50:b1:8d:df:1f:38:7a:08:70:
29:19:d6:33:9e:2a:32:2c:88:6d:d6:fc:34:8b:3c:
86:a3:c2:3e:e6:c0:4d:7d:a0:02:64:2c:e1:a7:fd:
fc:c6:96:79:01:19:55:00:34:4b:98:1b:e5:2c:e4:
b5:e3:05:0d:9c:1b:a8:8a:5a:c7:f0:5c:89:88:4b:
4d:aa:21:a3:a0:c7:f4:84:34:cc:52:4c:73:0f:e2:
0d:cd:85:d5:60:1b:e7:8b:b4:d8:e7:8a:e1:56:1c:
79:9d:23:bc:07:d9:5a:55:6a:96:a8:af:26:74:8c:
2b:70:76:a6:92:ef:d6:55:68:2b:57:59:ba:52:6a:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9B:C2:93:9C:00:69:24:64:A2:1E:96:32:B2:21:20:BD:4C:0F:DF
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/QpvCk5wAaSRkoh6WMrIhIL1MD98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:4e0::/44
Signature Algorithm: sha256WithRSAEncryption
2b:87:ba:f6:b0:c6:b7:cd:a0:2a:6d:92:6d:d7:d6:d2:5f:b0:
81:ae:5d:b9:28:5b:3b:21:4e:26:dc:b5:3b:9a:8a:f0:f3:f2:
a4:62:96:38:c4:f0:e6:5e:3a:df:d9:fb:fa:e5:46:d4:bb:07:
c8:99:da:9a:8b:70:3a:db:7c:44:96:9f:9f:6b:c3:13:18:0b:
03:94:7d:9b:0f:15:4e:cf:12:87:7a:66:63:29:7a:ec:10:9d:
8a:90:b9:ba:b4:88:60:ef:72:6a:db:7e:15:54:79:7e:f5:78:
ec:3b:19:5c:c3:70:2f:63:84:c9:be:05:53:be:d6:2b:58:0d:
79:98:3a:6b:01:24:27:1e:c4:4c:17:d9:9c:dd:61:2d:23:8a:
81:4b:c2:f7:11:85:c7:ee:92:db:49:fa:67:69:83:e2:2d:ed:
9a:c6:e6:0f:94:47:4a:44:f1:98:c2:98:94:87:ca:12:39:c3:
6d:ab:03:0b:71:01:d9:65:6b:a6:70:1f:a2:f1:2a:b8:51:1b:
a7:81:8c:4e:db:ba:41:b6:40:97:87:1c:71:ea:5b:fb:ba:f9:
29:53:a6:87:39:4b:d1:16:88:b9:a9:4d:cb:73:72:d0:ec:4b:
2f:dc:87:12:48:5c:f1:6d:c2:25:cd:5a:74:56:d4:7e:f9:e1:
8a:ab:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:05 2025 by rpki-client