Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/pSKueVnv_2mZgE4SAI6-xCc6aoU.roa
File: pSKueVnv_2mZgE4SAI6-xCc6aoU.roa (raw, json)
Hash identifier: 61WqbmnrYKgr+Gimnq2Ngdec1agHCCkIfMuCofXs83k=
Subject key identifier: A5:22:AE:79:59:EF:FF:69:99:80:4E:12:00:8E:BE:C4:27:3A:6A:85
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01613E7F
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/pSKueVnv_2mZgE4SAI6-xCc6aoU.roa
Signing time: Sat 01 Jan 2022 01:00:33 +0000
ROA not before: Sat 01 Jan 2022 01:00:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213344
IP address blocks: 2a0c:b641:7d0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23150207 (0x1613e7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 01:00:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a522ae7959efff6999804e12008ebec4273a6a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:34:2f:25:86:2a:b8:97:b7:43:fd:4f:1f:f5:
4e:18:dc:24:9a:50:0a:0c:ad:81:85:70:aa:aa:78:
64:32:08:b4:29:5d:ea:e7:f2:4b:ed:57:02:a4:c3:
fe:29:09:bd:75:28:00:ef:07:4b:4d:50:81:8f:5b:
33:70:b2:31:c8:f1:8f:7c:a0:14:c3:65:51:e4:8b:
16:5f:a1:af:40:ae:24:d0:c4:f9:f8:65:30:5c:3d:
39:4f:ad:df:27:a1:a8:6d:4c:b9:fe:cb:6d:13:2d:
97:b1:de:fb:0c:34:e9:a7:ea:27:e5:69:ed:b8:15:
eb:72:0b:57:a0:60:3a:f9:74:ff:5f:4d:56:05:2f:
9e:3a:99:70:b5:bb:27:a6:15:d2:99:db:aa:7f:85:
4d:f0:d9:9e:70:ef:1e:09:db:a8:64:00:c5:38:1f:
eb:17:75:e3:17:d2:95:a3:c2:89:1a:98:66:1a:46:
77:aa:cc:86:d5:82:4d:9c:8c:cc:12:95:fd:88:41:
5a:bc:fb:74:f8:5a:75:4e:cb:e4:d9:0d:b7:b2:4d:
a6:6b:bf:7e:70:f8:b3:1c:ba:3f:c5:04:e9:9c:56:
c9:9b:53:9b:45:ce:94:cb:3d:27:f3:31:00:db:f7:
a0:b4:f6:5b:0b:84:20:29:6a:f4:6c:dc:10:e9:0e:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:22:AE:79:59:EF:FF:69:99:80:4E:12:00:8E:BE:C4:27:3A:6A:85
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/pSKueVnv_2mZgE4SAI6-xCc6aoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:7d0::/44
Signature Algorithm: sha256WithRSAEncryption
20:ef:da:bf:5b:28:49:04:5a:7b:2f:1a:f6:0a:52:30:07:2d:
e5:44:e6:e6:01:af:93:af:86:af:07:86:16:6f:3d:f4:90:b4:
96:58:e5:72:52:21:23:e1:5d:48:45:41:d7:59:e9:87:74:06:
23:3f:0f:37:e5:9f:9c:23:71:d3:06:dc:c7:3d:77:cb:8e:94:
ac:a9:85:9e:01:1e:c3:38:11:4b:f0:f4:ad:c5:52:36:86:98:
56:68:41:4a:c4:c9:44:57:38:c1:a7:3e:a2:b5:70:7f:d5:03:
b5:59:73:c4:03:42:ea:33:fb:56:a5:d0:9a:0d:d2:dd:65:b3:
72:21:75:32:a7:ef:06:4f:37:35:52:58:91:07:3e:54:38:ec:
a0:58:c5:92:82:71:f7:ce:13:17:7a:4a:9e:b0:02:a6:10:70:
22:e6:dc:98:d5:35:11:eb:30:73:d9:23:61:e3:81:47:f2:4f:
01:3a:2b:16:3f:58:3e:d6:d0:b4:15:b5:ff:90:8b:c3:0c:4e:
3b:18:c8:38:35:c1:35:4b:b4:3d:68:c1:12:af:9a:4d:6e:0b:
6c:18:55:b1:58:d4:31:7f:8c:80:38:10:ab:90:b7:78:00:b2:
5f:1c:79:a2:45:8d:47:59:c5:28:61:19:ef:b7:5c:28:2b:39:
67:e2:dc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:19 2025 by rpki-client