Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kPgsSQUeeCOVFzQL66PQZxxSAQ8.roa
File: kPgsSQUeeCOVFzQL66PQZxxSAQ8.roa (raw, json)
Hash identifier: 2T4LBSK4z6rqwnZ7x272F854apPeWBGj77p18wVTYw4=
Subject key identifier: 90:F8:2C:49:05:1E:78:23:95:17:34:0B:EB:A3:D0:67:1C:52:01:0F
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E6C01EE9D344055EE09A031DAC2F0
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kPgsSQUeeCOVFzQL66PQZxxSAQ8.roa
Signing time: Mon 02 Jan 2023 06:14:57 +0000
ROA not before: Mon 02 Jan 2023 06:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209642
IP address blocks: 2a0c:b641:740::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:6c:01:ee:9d:34:40:55:ee:09:a0:31:da:c2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90f82c49051e78239517340beba3d0671c52010f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:cd:4b:2d:ba:a8:49:ee:4e:e4:8e:cd:8c:
60:eb:f7:b6:d8:ea:cc:78:38:24:83:36:ed:87:7d:
af:08:9b:40:e1:0e:c8:5c:3f:4d:78:27:9d:84:f1:
f7:e2:e8:a8:d0:32:e0:20:8e:b6:9a:6f:f1:74:b0:
c5:05:15:f3:84:7c:28:92:89:cf:4f:c7:8f:2c:e1:
e7:52:26:66:8f:02:fe:fb:c8:98:39:1c:c8:b1:53:
7e:fa:f7:40:01:33:94:58:1c:7a:84:8f:1c:e8:5d:
e6:73:59:38:86:31:5e:46:e0:1a:f3:5c:26:4e:62:
0b:07:e9:2e:23:49:00:97:93:31:9b:7b:fb:1d:03:
ca:da:03:97:aa:47:79:15:14:ca:7b:50:21:b0:7d:
12:55:8e:09:ff:86:e8:bf:82:99:86:85:b5:1c:7e:
3f:2d:5e:42:da:26:0f:ab:34:9c:11:57:4f:45:e9:
f0:15:ee:ed:42:bb:74:ed:b0:48:b9:42:f3:ac:17:
61:4d:d5:4b:aa:4b:43:ff:2c:ea:ed:2c:43:77:43:
0a:c8:51:c8:cc:d2:da:4b:28:ab:a7:5d:19:31:e4:
4d:46:59:b3:31:8c:38:cd:c8:fb:ce:fc:87:9d:83:
20:fb:dd:c6:1a:87:06:86:e0:82:b9:bb:fc:01:f9:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F8:2C:49:05:1E:78:23:95:17:34:0B:EB:A3:D0:67:1C:52:01:0F
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kPgsSQUeeCOVFzQL66PQZxxSAQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:740::/44
Signature Algorithm: sha256WithRSAEncryption
11:f6:62:46:ee:ee:5e:0e:e7:77:4f:9f:e4:6f:09:8a:15:87:
92:e9:7b:5d:a7:95:2a:61:a8:21:c4:07:be:27:00:34:ca:bf:
26:5e:6c:8e:29:82:60:fe:ec:28:72:74:b6:89:71:22:ed:cb:
9b:a5:ce:7a:7d:14:3b:12:57:00:13:b7:80:9d:b3:3d:5b:70:
46:e9:a0:79:ce:21:e8:f6:40:62:43:06:8c:2a:32:e6:ad:fb:
dc:a8:ef:e8:89:cc:74:e1:a2:42:d6:67:43:1b:16:bc:54:97:
00:e4:c9:d2:fe:a8:c2:1a:4d:97:cb:96:f8:2d:24:db:e3:c9:
e2:18:79:dd:d2:04:9e:c3:82:1d:7a:8a:fa:1b:ff:70:87:7c:
e8:15:8b:bd:ac:4b:16:05:c4:42:93:ce:61:1f:3a:99:d9:e7:
1c:5e:50:ce:01:28:df:39:63:55:57:57:a9:c7:c2:e0:1c:cc:
d2:7a:ad:e7:b5:83:46:9e:93:79:16:bb:01:6b:0a:68:8e:30:
84:d3:a1:ea:00:0d:db:e0:7b:f7:91:07:9f:e7:02:df:01:7f:
87:83:b4:fb:14:64:f5:1e:2e:be:fa:36:ed:4e:23:91:c3:aa:
83:7d:08:55:f1:cc:0c:04:2e:f7:ad:26:68:16:e9:3a:18:92:
3c:ed:b3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:02:34 2025 by rpki-client