Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/svyrTexmiE2Nf6dHwzj2oRdjQf0.roa
File: svyrTexmiE2Nf6dHwzj2oRdjQf0.roa (raw, json)
Hash identifier: lbpCq0OT3AB1eqpppVma4BL/ucfCvLyl/TDVzDEUMms=
Subject key identifier: B2:FC:AB:4D:EC:66:88:4D:8D:7F:A7:47:C3:38:F6:A1:17:63:41:FD
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: FA62EB
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/svyrTexmiE2Nf6dHwzj2oRdjQf0.roa
Signing time: Sat 01 Jan 2022 00:59:21 +0000
ROA not before: Sat 01 Jan 2022 00:59:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 2a0c:b641:160::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16409323 (0xfa62eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2fcab4dec66884d8d7fa747c338f6a1176341fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:9c:35:39:6d:a2:c7:ed:96:b0:c4:e0:04:
20:8f:9e:93:ad:e1:3b:1d:6e:18:21:d2:1e:31:39:
93:c7:d3:da:d3:75:93:a8:43:3c:a1:6b:b0:68:95:
e0:84:b9:72:f0:4c:1b:a7:0d:d3:b9:41:b6:a1:dc:
c1:98:a7:70:1a:df:d6:f6:cc:37:5f:7b:37:0c:82:
0c:16:91:74:93:ae:b2:d7:44:b3:44:7c:a1:58:c7:
9c:2c:be:43:cc:57:52:9a:3c:e8:ba:0b:5b:fc:a9:
31:3a:d3:2d:35:88:72:b5:22:1f:71:f4:dd:75:40:
65:fd:a4:e8:d1:05:b2:01:68:20:06:72:55:db:06:
f3:b7:30:46:10:23:ee:b1:c1:e4:4e:dd:e6:af:10:
b4:15:cb:ef:55:9e:ca:b0:7f:ed:2b:aa:2f:1b:47:
22:71:f8:75:d8:28:9b:6d:c4:73:d3:e7:eb:59:0e:
1b:a2:fe:db:c6:89:1e:14:c6:ef:f8:40:6b:76:a3:
25:d0:c1:2d:92:68:cf:34:be:8a:32:d2:9b:97:c4:
5f:74:8c:60:aa:23:b6:a8:b2:16:7f:13:7e:0d:78:
79:a8:a1:2e:20:aa:46:3b:bd:0b:43:e8:6a:a8:4d:
dc:79:18:83:ae:1e:8a:03:84:51:8f:66:94:df:90:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FC:AB:4D:EC:66:88:4D:8D:7F:A7:47:C3:38:F6:A1:17:63:41:FD
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/svyrTexmiE2Nf6dHwzj2oRdjQf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:160::/44
Signature Algorithm: sha256WithRSAEncryption
2a:e7:21:c7:f8:51:34:bc:21:e8:3e:60:76:ab:8b:13:c7:85:
9a:52:b7:66:cc:da:1f:27:2f:ec:40:b0:7d:5f:fa:d8:d4:8b:
35:45:cd:65:3e:d0:3e:69:4b:fb:29:61:14:d4:dd:ac:95:60:
82:5e:0d:6c:7b:af:5f:a6:8f:be:95:ef:66:8f:5d:e2:6f:e7:
3a:8a:97:c6:f5:91:dd:bc:de:0c:3c:ad:a6:ba:04:37:21:12:
74:56:eb:97:aa:cf:c6:5d:d8:b1:c2:89:48:c5:cf:a1:84:4d:
3c:a6:9c:3f:d0:26:b9:26:e4:36:42:45:65:7c:e6:2d:db:7f:
55:58:4b:95:26:8e:3e:42:7c:ef:f0:66:70:f9:a1:09:3c:b4:
16:92:e2:ef:19:92:c6:af:0c:06:66:ae:8e:14:25:df:74:87:
57:30:74:d7:f3:12:42:a5:69:f3:cb:92:8d:6e:63:99:16:59:
77:41:df:9e:61:ef:78:d7:75:80:98:38:6f:d6:56:68:93:58:
4f:55:98:4c:83:e5:cc:40:4b:01:76:d9:b9:9f:93:4d:88:c4:
ba:63:14:06:0f:bb:a3:35:63:fe:59:a4:b7:7c:49:68:e0:c6:
d2:fb:fc:35:2b:40:52:83:ec:87:0d:95:23:04:b3:09:d5:f3:
18:51:26:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:34 2025 by rpki-client