Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/pDoIDfcedvE9kzRvz_-APvkvDJE.roa
File: pDoIDfcedvE9kzRvz_-APvkvDJE.roa (raw, json)
Hash identifier: jeraVw15U9LB5BT0u/Dfj8T9XzdE2JCOHIevN5x2JHs=
Subject key identifier: A4:3A:08:0D:F7:1E:76:F1:3D:93:34:6F:CF:FF:80:3E:F9:2F:0C:91
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E5E1D63E00F99606734D2E7D6B702
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/pDoIDfcedvE9kzRvz_-APvkvDJE.roa
Signing time: Mon 02 Jan 2023 06:14:53 +0000
ROA not before: Mon 02 Jan 2023 06:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207292
IP address blocks: 2a0c:b641:760::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:5e:1d:63:e0:0f:99:60:67:34:d2:e7:d6:b7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a43a080df71e76f13d93346fcfff803ef92f0c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:59:3a:df:11:da:b9:43:b9:e3:dd:49:61:eb:
c9:99:33:fc:34:06:80:20:e4:d4:a9:18:40:55:96:
86:8d:05:ae:6d:50:71:2e:21:4c:e7:d2:49:30:cf:
fe:e4:7a:05:3e:9b:ba:c9:7c:47:95:a0:14:6b:59:
bf:6a:1f:35:a3:67:74:88:62:fa:15:77:de:5e:5e:
18:2f:93:27:37:0b:4d:00:13:0a:f8:d3:17:03:d4:
20:6f:f2:63:64:55:40:ca:d2:49:b6:b2:c4:55:a6:
db:f0:53:c9:e7:c3:4a:2b:25:4a:3d:2d:9c:09:11:
ea:9b:9b:27:ce:b8:1c:2c:02:31:8f:be:47:de:db:
99:6d:d1:4a:05:85:fe:06:cd:1a:59:db:73:d4:4d:
4c:1d:69:bb:2f:f7:bb:ca:63:db:1e:05:f7:0d:a0:
ee:8c:c5:04:27:12:08:7a:e9:1a:eb:b2:62:10:83:
3d:dd:3a:c7:8f:87:e2:21:f3:a0:52:f0:ff:79:a9:
d7:50:91:7d:0a:60:3e:fc:ac:62:4f:04:07:c3:79:
82:0a:af:76:47:62:77:6a:25:b7:52:4d:29:e1:5a:
51:44:d0:83:81:77:c1:54:03:28:7c:67:32:ab:0e:
33:ab:fd:8e:b4:89:1c:d5:99:af:52:c6:f7:6c:00:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3A:08:0D:F7:1E:76:F1:3D:93:34:6F:CF:FF:80:3E:F9:2F:0C:91
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/pDoIDfcedvE9kzRvz_-APvkvDJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:760::/44
Signature Algorithm: sha256WithRSAEncryption
76:94:a8:f9:ba:9b:42:c9:ab:50:1a:7b:ef:d9:1f:35:5d:09:
01:cb:9b:2c:1d:59:63:96:c0:58:99:8d:b8:ee:4c:fa:d2:12:
8e:f0:4a:b4:91:1e:99:61:be:4d:07:9d:89:f9:42:9e:15:79:
36:20:b6:2b:29:59:48:9c:6a:3f:89:b4:61:60:46:6e:d5:3f:
fe:bf:bc:45:d8:ec:b3:16:01:4a:fd:7a:9d:ff:fb:8c:52:2f:
27:17:a7:07:f3:7b:91:7c:0e:78:68:81:d9:46:01:49:e2:25:
3a:a7:d2:db:e3:6b:43:f7:05:e4:45:00:87:4c:09:b8:0a:0b:
90:93:6f:1e:24:a9:95:96:72:c1:d5:60:cb:25:d5:e4:d6:8a:
44:17:85:fe:24:51:b0:f6:ad:91:5f:d0:e4:26:77:45:55:46:
f2:bf:14:cd:da:fe:46:a1:a7:fe:27:2b:b3:69:5b:5d:7a:90:
87:a7:17:47:99:0a:f8:a8:25:39:46:f0:20:e7:4e:f4:87:78:
67:63:9a:a2:bd:d6:9b:20:10:9a:d8:52:13:4b:0c:49:d3:78:
02:11:ad:2a:f7:9b:bf:b9:c8:9e:e1:3c:90:dd:9e:74:ed:57:
bb:8c:9f:22:16:51:71:c6:ef:e0:25:f5:52:f8:21:07:57:00:
48:2b:9c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:01 2025 by rpki-client