Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/cfTXp9ls05kwdUfb9tGkDlC5LiI.roa
File: cfTXp9ls05kwdUfb9tGkDlC5LiI.roa (raw, json)
Hash identifier: 1jFCO+8l5AvqEc3yiOVanGydyGcDlMLi8O9O3dW+Wn0=
Subject key identifier: 71:F4:D7:A7:D9:6C:D3:99:30:75:47:DB:F6:D1:A4:0E:50:B9:2E:22
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E664D84CA7F0C1A1938F8C3048491
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/cfTXp9ls05kwdUfb9tGkDlC5LiI.roa
Signing time: Mon 02 Jan 2023 06:14:55 +0000
ROA not before: Mon 02 Jan 2023 06:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208505
IP address blocks: 2a0c:b641:610::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:66:4d:84:ca:7f:0c:1a:19:38:f8:c3:04:84:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71f4d7a7d96cd399307547dbf6d1a40e50b92e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:e0:fc:06:02:ee:e6:e9:61:a2:31:0a:eb:
6a:1d:ef:f7:59:d0:4b:63:36:e4:31:a4:b8:9d:fb:
3f:8f:45:20:3f:02:eb:c7:f4:13:90:35:f8:90:ed:
a7:3e:ef:ca:64:6d:58:db:dc:4c:b1:ac:af:af:49:
cc:97:86:d9:42:4c:54:25:44:0d:0c:73:8f:72:2d:
17:f4:91:0d:90:bc:57:51:c6:79:de:eb:10:fc:cf:
67:62:8c:47:a9:a5:76:c2:a6:5c:21:8e:e5:9d:cc:
a1:c8:c0:43:2d:eb:88:2e:14:19:2b:32:3e:cb:03:
6f:ef:7b:0c:b8:4c:17:7a:64:cc:03:e8:96:93:56:
0e:4e:cb:a8:12:be:71:fb:75:14:42:20:fd:2f:57:
28:2f:59:02:d8:43:b3:c0:ed:b8:30:3b:5a:4c:41:
ff:ba:be:d4:1f:50:48:26:b6:94:e7:ce:33:73:4e:
df:6a:cd:a1:bd:ec:2f:7d:b8:7f:ee:03:b3:41:4d:
d2:3f:9c:14:45:24:60:6e:fa:11:26:9b:0c:75:69:
0e:30:a5:fc:56:e5:36:75:c7:f6:fd:e2:f2:0b:38:
73:a3:3d:de:3f:5c:b2:d6:6c:b0:99:6a:92:37:88:
52:11:80:a8:3f:2c:c2:dd:69:3f:34:1c:0b:b2:eb:
06:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F4:D7:A7:D9:6C:D3:99:30:75:47:DB:F6:D1:A4:0E:50:B9:2E:22
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/cfTXp9ls05kwdUfb9tGkDlC5LiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:610::/44
Signature Algorithm: sha256WithRSAEncryption
7a:98:70:1b:20:6f:30:e1:e3:c2:f2:5e:d0:df:62:48:93:2f:
ec:96:ab:cb:98:00:ce:31:1a:a9:68:1a:f0:b7:0e:37:f0:e9:
89:38:76:09:6d:38:8d:8a:98:f8:a9:30:ec:5e:c8:26:c3:5d:
4d:2b:dd:26:e5:98:33:9c:15:94:6f:4f:d7:8c:38:19:40:5f:
24:6e:94:46:f3:1b:c3:cd:1c:6c:a8:4f:8c:06:8c:2d:0f:ec:
41:17:6b:42:fd:90:fe:70:c1:f8:16:7b:07:6a:59:3e:f1:8e:
76:85:17:c0:d7:61:15:82:e2:3b:a5:5c:d0:d5:ce:c0:18:ab:
3f:aa:25:0e:50:d6:d6:36:d5:bc:c4:6c:fe:59:7c:61:96:8f:
3e:2e:1b:79:95:db:66:9f:71:fd:b7:72:a9:f7:f4:3c:ea:d6:
80:ee:2b:46:09:88:17:e2:0d:96:a9:07:6d:3e:49:1c:c8:13:
e2:ad:54:3f:ec:ab:81:11:48:ee:10:cb:6f:72:38:cc:26:47:
f3:95:eb:01:8c:fb:85:6f:e1:c8:87:85:67:1f:35:bd:1b:18:
83:89:d2:80:f9:fd:f2:9c:a3:27:74:81:fc:e4:3a:db:fd:7b:
11:9a:6a:9a:3c:c0:04:23:a4:c4:ec:06:7b:b8:31:d2:33:e7:
b0:6c:c5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:23 2025 by rpki-client