Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/da-QteCmq6lqDb2XEWQeBIFRHWM.roa
File: da-QteCmq6lqDb2XEWQeBIFRHWM.roa (raw, json)
Hash identifier: jdgPfFRTq1Vc3j9diJ0c8/fqk8kEcRY3/nsNCogctY0=
Subject key identifier: 75:AF:90:B5:E0:A6:AB:A9:6A:0D:BD:97:11:64:1E:04:81:51:1D:63
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0133759C
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/da-QteCmq6lqDb2XEWQeBIFRHWM.roa
Signing time: Sat 01 Jan 2022 00:59:54 +0000
ROA not before: Sat 01 Jan 2022 00:59:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210103
IP address blocks: 2a0c:b641:90::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20149660 (0x133759c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75af90b5e0a6aba96a0dbd9711641e0481511d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:4e:8f:06:c7:ba:68:f4:1e:6c:be:19:71:
e5:01:14:46:58:53:32:81:fb:45:bc:eb:aa:f1:06:
43:c9:95:a8:dc:a4:66:4b:fe:43:09:7a:53:a8:3c:
b8:5e:88:2e:5e:03:32:89:b6:22:26:57:e2:58:ae:
36:a5:3d:83:0b:a0:7e:37:d5:fe:43:6e:c3:19:ca:
05:ec:83:95:b7:bf:58:59:2b:91:66:5c:47:e8:c9:
bf:e2:01:ee:62:c1:4d:18:fe:ab:ae:32:60:db:aa:
02:75:26:77:38:ae:25:86:ea:a0:e5:f4:a1:0e:1a:
55:25:26:7e:48:b4:3c:78:0d:6b:e8:c7:42:93:b5:
0d:15:96:c4:1c:e5:12:78:dc:10:f4:54:3b:ed:52:
ad:05:80:1d:37:40:b1:02:15:2a:96:39:4e:2f:92:
93:46:7d:b0:3f:f5:35:ba:f8:17:76:24:8d:43:48:
f6:74:6c:5e:bd:23:ac:54:df:36:6c:9e:df:34:41:
20:ee:1e:f8:19:21:3a:02:8b:d8:03:a5:a8:3b:fb:
e9:01:44:91:cc:c0:a0:a2:be:fd:58:33:ca:c7:70:
15:50:a7:5c:be:10:2b:9c:1d:e8:c7:1d:f2:f2:4e:
05:3a:9c:89:9a:3c:a0:ab:68:fe:2f:e2:32:47:61:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AF:90:B5:E0:A6:AB:A9:6A:0D:BD:97:11:64:1E:04:81:51:1D:63
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/da-QteCmq6lqDb2XEWQeBIFRHWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:90::/44
Signature Algorithm: sha256WithRSAEncryption
97:11:c4:89:a7:22:2b:8b:3b:c3:b1:c4:ef:a0:45:49:9f:70:
c1:12:bd:5d:9b:2e:27:54:ab:79:4b:3b:96:e0:56:1c:c3:a0:
92:af:c1:bf:ce:dd:70:3c:97:67:ea:59:51:17:31:25:38:b1:
41:7a:c7:0d:70:cb:ae:59:08:ff:d6:bb:3a:eb:87:ac:e0:82:
8b:c6:a1:47:1d:2b:fd:9c:43:6d:cc:0f:b5:e6:bc:e3:c9:a0:
23:b0:bd:6c:38:35:0a:d9:c9:b1:1d:3a:33:cf:e6:b8:53:47:
19:95:ae:ac:1e:4a:f8:08:f7:a2:7c:bc:c0:93:40:c0:4a:ab:
88:0c:d1:ec:d1:4b:3a:6a:50:e5:75:c0:8d:81:a8:f0:61:9b:
f6:c7:97:3e:22:38:ec:6c:03:b5:ed:2a:05:80:50:1f:25:25:
5f:9c:9c:33:c2:05:18:ec:dc:e6:f7:49:71:a6:bb:99:ef:f5:
7d:9e:f5:3f:92:a8:b5:22:2d:f7:0e:0b:00:1f:4e:b2:0c:64:
49:f8:18:26:ae:ff:e7:35:e1:39:90:df:03:42:0a:ca:4a:76:
fb:99:93:f0:a7:e8:07:f8:00:e6:b4:47:ab:bb:4a:68:ce:95:
01:a3:e0:aa:4c:45:03:9d:79:47:e9:6f:0b:8d:1f:3c:64:2d:
b0:4f:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:35 2025 by rpki-client