Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kzDqruZp4SVyp5io9ottGRMyp2A.roa
File: kzDqruZp4SVyp5io9ottGRMyp2A.roa (raw, json)
Hash identifier: 6llO7Ig2REueUpPhw4g9mnaj7Hj+1XL+ceDD/RNgPo0=
Subject key identifier: 93:30:EA:AE:E6:69:E1:25:72:A7:98:A8:F6:8B:6D:19:13:32:A7:60
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 010D8E77
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kzDqruZp4SVyp5io9ottGRMyp2A.roa
Signing time: Sat 01 Jan 2022 00:59:33 +0000
ROA not before: Sat 01 Jan 2022 00:59:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60240
IP address blocks: 2a0c:b641:280::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17665655 (0x10d8e77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9330eaaee669e12572a798a8f68b6d191332a760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:58:21:99:2a:32:f7:f7:b1:26:44:67:7e:
1d:b5:6d:b6:9d:6a:68:4e:96:aa:0c:28:b2:c7:5c:
c8:bd:da:eb:1d:7f:5b:7f:0e:2e:f9:53:89:77:83:
29:db:58:dd:dd:8e:ee:fe:bf:58:5f:eb:ad:fd:91:
8a:40:4b:52:8b:f5:4a:6d:11:98:3a:16:fa:55:8d:
6d:8e:89:12:70:d0:7a:e1:a6:50:91:2b:2b:a6:7d:
57:95:ee:3e:c4:e1:ac:56:4c:1e:d0:c5:56:46:f7:
0c:9c:b3:bf:1b:75:03:e4:51:99:da:57:3f:c4:5e:
b1:93:bd:f1:dc:92:ba:dc:ac:70:30:d6:4b:6c:88:
c1:47:13:0e:4f:4c:a0:4d:0e:22:b2:57:33:12:fd:
15:41:4e:c2:40:4f:74:20:41:13:b7:32:18:11:88:
38:7a:99:65:d0:12:04:0e:d8:da:2e:28:d6:91:d5:
d3:e0:4d:ab:8e:00:3e:dd:11:3b:f3:b5:9e:12:72:
1d:0d:b6:8f:de:df:dd:f9:b0:81:2a:8a:22:d3:e9:
0e:e9:87:21:44:20:f3:fe:aa:e0:1b:c9:46:41:46:
62:79:e9:7a:e5:8e:7b:24:2e:84:85:63:83:86:56:
bb:14:f1:da:1e:60:b9:b5:de:46:8e:ee:40:8b:bb:
dd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:30:EA:AE:E6:69:E1:25:72:A7:98:A8:F6:8B:6D:19:13:32:A7:60
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/kzDqruZp4SVyp5io9ottGRMyp2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:280::/44
Signature Algorithm: sha256WithRSAEncryption
0f:17:9a:5f:87:09:20:82:13:cc:b0:3f:05:17:d0:fe:cc:72:
b3:a8:81:0e:92:13:15:6f:1f:26:0c:2f:02:27:37:90:a4:4d:
f2:88:71:81:78:8f:58:4a:e6:05:86:73:98:cc:9d:94:e0:97:
27:8f:9b:d6:af:56:83:da:3f:43:81:be:89:ba:dc:c0:f9:80:
54:4f:65:6a:38:13:43:f3:09:5e:10:4f:4e:33:99:0e:6d:bf:
f6:02:6e:3a:68:72:6b:ef:91:ff:9f:4e:90:e2:ac:39:36:da:
36:e9:47:c9:29:f2:f8:32:cd:2a:ca:01:ae:e8:e7:f2:89:44:
b3:5b:0f:dd:11:1d:62:6d:a3:27:5c:68:ff:8f:e1:76:a4:e1:
b3:89:4c:f2:2b:1d:77:bf:74:0c:b0:02:83:ff:43:bc:3d:99:
17:43:bb:b6:bf:ff:44:89:c3:15:69:e7:da:86:f2:d1:68:c6:
87:32:48:29:e8:48:0a:43:32:2c:19:06:36:33:12:20:36:c9:
07:11:07:e0:4d:dd:d3:71:db:37:ed:34:da:f7:2f:64:47:57:
2f:53:10:3c:93:05:9d:38:08:e6:30:43:22:9b:0f:ce:ae:6d:
df:13:3b:9c:13:be:53:ee:63:05:cd:fa:4b:37:2a:ac:32:de:
5b:8a:4e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:16:39 2025 by rpki-client