Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Vywen74fkQH3czsf8cP_ubdn4Dk.roa
File: Vywen74fkQH3czsf8cP_ubdn4Dk.roa (raw, json)
Hash identifier: /UDvqI22wEpXzo2eJxMjddAEOXIoG2Jno1xi3H0qADA=
Subject key identifier: 57:2C:1E:9F:BE:1F:91:01:F7:73:3B:1F:F1:C3:FF:B9:B7:67:E0:39
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0112C4F4
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Vywen74fkQH3czsf8cP_ubdn4Dk.roa
Signing time: Sat 01 Jan 2022 00:59:37 +0000
ROA not before: Sat 01 Jan 2022 00:59:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142438
IP address blocks: 2a0c:b641:130::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18007284 (0x112c4f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=572c1e9fbe1f9101f7733b1ff1c3ffb9b767e039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:40:c8:21:39:47:20:16:5f:84:da:33:ea:
c5:d5:46:a9:57:87:d0:a2:b7:81:17:77:ae:ca:8b:
e8:78:88:1c:6e:4e:eb:23:49:d7:ea:b0:07:32:7e:
a7:bc:28:6b:45:d5:16:19:e2:a5:68:54:7b:ea:ff:
db:90:b5:a0:7c:3f:48:19:9b:81:41:17:ce:93:16:
41:bf:dd:4d:4c:0c:1a:69:3a:4f:9d:ae:6b:24:51:
23:32:bb:7c:14:2f:7b:7a:f9:6b:50:7f:f5:8d:e5:
97:2d:60:9f:7e:16:a7:d8:f0:f0:6e:22:5f:fd:12:
1f:52:85:1b:8e:b2:28:77:a6:81:bf:95:69:ec:ef:
f6:0c:c5:40:59:16:e2:20:f2:85:0a:c7:ef:43:17:
2f:01:39:25:a7:83:5a:6d:6f:79:d6:26:a9:60:2e:
5f:c8:fc:03:fe:f9:54:7b:d0:11:f0:51:ec:31:6c:
4d:a9:8c:f0:93:99:83:9a:19:58:53:f0:c7:cb:76:
a0:95:be:60:16:da:c7:74:a7:cc:97:3f:7b:89:ab:
90:f7:b3:e4:27:8c:aa:97:f6:dd:a1:c9:34:62:96:
c5:37:38:b5:4b:1f:82:0d:9b:8b:21:04:ae:ab:6a:
ea:38:40:ac:56:24:d9:08:88:29:4d:7f:75:90:54:
33:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2C:1E:9F:BE:1F:91:01:F7:73:3B:1F:F1:C3:FF:B9:B7:67:E0:39
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Vywen74fkQH3czsf8cP_ubdn4Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:130::/44
Signature Algorithm: sha256WithRSAEncryption
4b:00:d9:cf:a6:63:92:b2:3f:ba:66:f0:72:ee:5d:a5:52:92:
ea:e6:a5:35:0c:72:d2:7c:e5:87:a6:4d:41:64:e2:f5:ef:4d:
0a:42:ec:69:1a:95:67:41:ca:c8:d3:b4:a6:63:d3:2f:d1:95:
55:10:d7:29:7a:93:64:05:74:5e:e8:28:0f:34:71:21:52:75:
8f:6e:70:34:e2:b6:a6:e3:94:e9:2e:d8:5a:0a:cc:ee:ed:be:
e3:9d:f9:13:f3:27:18:cb:fd:79:a8:c3:e7:73:0e:d1:3c:17:
f4:cb:65:a8:46:2c:9d:82:0d:1d:14:f6:ab:92:1b:3e:6c:a3:
47:8b:8b:3d:97:36:d1:7d:41:17:ee:78:d7:87:3b:13:94:b7:
ad:b0:59:6b:dc:db:c8:c1:2b:bb:96:f3:b1:6f:fc:a5:70:fa:
43:15:0a:50:d5:fb:10:bb:89:eb:2f:eb:45:29:fe:5c:d8:da:
00:bd:25:75:c8:5d:2e:7d:be:a3:98:8d:fe:08:96:e8:1e:8f:
b8:30:5c:e1:b0:8c:f8:d2:ca:2d:70:5d:c8:5e:c1:22:c8:fe:
74:12:2d:ca:f9:84:7f:b3:d6:69:65:01:9b:15:55:e7:31:b3:
f5:55:85:eb:52:e8:31:ea:59:70:52:5e:c8:03:1a:9d:5b:b8:
94:91:d8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:35 2025 by rpki-client