Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rPduw0LY2I0qxpcTYug9Np08g1c.roa
File: rPduw0LY2I0qxpcTYug9Np08g1c.roa (raw, json)
Hash identifier: aKST1LEKDk3eXMLoUElDw2K4UR/EkhdnZOHRHBen5eI=
Subject key identifier: AC:F7:6E:C3:42:D8:D8:8D:2A:C6:97:13:62:E8:3D:36:9D:3C:83:57
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: FC3A39
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rPduw0LY2I0qxpcTYug9Np08g1c.roa
Signing time: Sat 01 Jan 2022 00:59:23 +0000
ROA not before: Sat 01 Jan 2022 00:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31396
IP address blocks: 2a0c:b641:410::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16529977 (0xfc3a39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acf76ec342d8d88d2ac6971362e83d369d3c8357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:0d:5c:48:63:7d:3a:81:26:9a:6d:35:20:
47:00:e4:fe:8d:d2:a5:f5:47:64:7f:51:e0:28:b0:
3d:ba:ed:18:87:bf:e4:e7:af:36:ed:48:4c:65:d2:
1c:79:3d:f1:88:83:aa:31:4e:83:2d:c6:42:3b:39:
1a:4d:f0:13:3b:a8:75:07:d1:6b:4e:4c:a3:33:99:
97:e5:18:bd:55:1a:e3:12:e0:ad:87:6c:1f:43:c0:
f8:e4:fd:3c:f9:ef:78:cc:95:6e:bf:97:7b:26:62:
ba:39:84:48:ec:80:86:3b:58:22:30:1a:be:0d:2a:
c3:2a:a7:32:07:1b:4b:f4:10:03:a0:29:67:ed:b1:
f7:32:85:9b:01:31:c2:9a:ae:a5:8a:e2:0c:ae:06:
7d:a0:d3:f4:dd:aa:e2:37:d2:23:cd:4b:d1:a0:cb:
e6:83:6a:df:31:d8:c2:3f:63:02:9d:92:28:8d:b2:
e7:74:12:4d:8d:88:2e:ee:70:9f:f0:c2:15:a8:13:
f9:cc:cd:68:42:eb:5d:4c:58:40:5c:65:d2:a2:d5:
59:9e:ee:98:5f:f9:9f:eb:7c:bb:bc:a1:82:71:74:
de:d5:71:1e:03:63:1d:31:a1:ec:a7:41:c1:86:ae:
8b:31:4a:0d:d7:8b:b4:b6:b5:bb:e7:47:82:e4:82:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F7:6E:C3:42:D8:D8:8D:2A:C6:97:13:62:E8:3D:36:9D:3C:83:57
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/rPduw0LY2I0qxpcTYug9Np08g1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:410::/44
Signature Algorithm: sha256WithRSAEncryption
2c:2c:6a:3e:71:83:6a:9b:63:66:6d:b5:d5:a0:b1:6f:88:b1:
ed:ca:53:0c:76:16:79:fd:5a:d4:a0:72:9d:c5:f1:71:5d:2a:
ec:d5:1d:7a:74:46:92:fb:e3:d6:2d:1c:46:28:40:70:44:67:
f5:d7:30:74:c2:8f:49:9c:8e:32:e6:fd:64:ad:b8:8b:10:46:
8b:f7:69:7d:18:5f:27:66:b4:5d:0e:11:d8:42:be:5c:77:94:
94:80:09:98:db:d4:25:b5:48:60:2c:55:af:77:18:c4:35:3f:
4a:ba:c1:28:5f:fa:7a:a7:3f:35:5d:b2:fb:8e:37:f8:83:f3:
26:45:c2:8a:91:3a:71:2e:40:00:1f:8f:8d:e8:eb:71:0a:32:
20:cf:01:b5:14:3d:c6:be:93:17:e1:95:9b:e9:69:e1:51:fd:
bc:49:1e:41:02:44:64:b2:31:f1:96:eb:78:32:68:2d:2a:cd:
68:63:b2:a4:4f:62:f9:b7:34:52:8c:88:c2:5a:d2:9b:3d:8a:
e0:2a:b5:e1:d2:cb:16:76:c1:bd:0a:5c:b9:32:5a:9b:05:23:
63:30:ac:24:95:a1:ff:e8:50:4d:e0:6f:b3:23:8b:89:69:59:
7a:a9:16:b3:db:c7:7d:3a:c1:b6:03:5d:27:10:25:d5:f2:73:
d9:60:f8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:40 2025 by rpki-client