Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tNe9dV3XuNQpkp04TmLlIYb3GcM.roa
File: tNe9dV3XuNQpkp04TmLlIYb3GcM.roa (raw, json)
Hash identifier: GMs9JeX5ygJN52oxIkz5ZaMTWXnFOKkH/E8XGt7SJJg=
Subject key identifier: B4:D7:BD:75:5D:D7:B8:D4:29:92:9D:38:4E:62:E5:21:86:F7:19:C3
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185A7711E0804302408DFD1C71AFD7A68CD
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tNe9dV3XuNQpkp04TmLlIYb3GcM.roa
Signing time: Thu 12 Jan 2023 19:24:46 +0000
ROA not before: Thu 12 Jan 2023 19:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201670
IP address blocks: 2a0c:b641:3a0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a7:71:1e:08:04:30:24:08:df:d1:c7:1a:fd:7a:68:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 12 19:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4d7bd755dd7b8d429929d384e62e52186f719c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:14:38:59:c2:1a:ab:38:bd:c4:92:d2:ad:
91:ca:e1:b9:19:33:6a:24:2a:c4:fa:c5:29:df:de:
7a:b4:18:4c:e2:db:6f:df:86:18:64:74:62:02:04:
d3:18:78:cf:c5:f9:d0:e7:c3:de:d6:f9:af:c9:bc:
62:cb:31:61:14:f6:5a:c0:eb:a3:97:ab:91:7a:4c:
ce:73:32:fb:94:ca:c8:4a:c6:39:80:e3:ce:04:96:
88:6c:22:d8:45:9a:6f:da:85:16:62:37:9e:78:b3:
93:cf:df:ee:70:40:df:4a:e6:54:28:dc:ea:2d:de:
cd:5f:3e:62:9a:38:21:3a:74:fb:57:ce:c5:b3:a5:
26:c6:df:5c:20:80:0f:7f:bf:4b:1b:4f:f7:1c:3b:
cd:c1:3e:3f:d5:1b:65:13:a6:92:b1:0c:e1:52:d6:
d1:74:e0:38:c6:52:fe:79:11:f7:52:bc:71:61:22:
6d:d7:91:64:83:3c:1f:5e:0b:e2:c0:cf:b6:e2:48:
64:49:23:c8:61:de:90:0f:1a:ae:5a:cb:8e:f8:87:
61:28:91:f2:85:95:1c:9f:3c:cf:11:9a:6b:0e:89:
d2:85:21:a9:c0:6a:4b:07:42:04:99:eb:80:c9:07:
fb:f1:65:3a:38:3c:52:39:20:be:dc:13:48:6d:92:
74:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D7:BD:75:5D:D7:B8:D4:29:92:9D:38:4E:62:E5:21:86:F7:19:C3
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tNe9dV3XuNQpkp04TmLlIYb3GcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:3a0::/44
Signature Algorithm: sha256WithRSAEncryption
00:d7:9b:a3:99:13:f4:d2:fb:ea:f1:e4:83:f9:7d:d8:ef:7a:
17:64:3e:64:85:2b:de:e1:52:44:15:c3:bf:98:a7:ed:19:6c:
b4:7c:06:a8:5c:82:61:cd:af:7f:06:c4:b7:7d:dc:1c:f8:c4:
3e:9c:71:62:d3:69:89:40:e6:92:c2:57:e6:34:cc:ef:21:ad:
4d:18:aa:46:8e:e2:c1:0d:8c:de:d6:64:f1:7d:42:43:fe:9e:
fe:d5:f0:b0:af:59:fe:fe:2c:50:de:e0:20:d9:d2:bc:b3:28:
47:cb:45:46:4f:41:c6:18:e1:d2:6f:7d:df:d1:e7:e1:c7:44:
f4:e8:1a:7c:99:52:40:8c:6f:6c:5e:65:88:1d:c9:46:5b:4f:
3f:2a:b1:d2:c3:ff:20:a5:e1:3d:15:1a:3c:d0:93:57:32:f1:
e9:b8:c9:16:1c:e8:48:14:8d:b6:8b:ea:c8:5d:72:8f:96:a7:
ce:7b:bb:e9:96:7a:5b:82:ce:f7:42:89:60:4a:bd:c4:c6:4c:
9f:49:43:c4:c2:56:b5:73:11:89:47:05:5c:a9:d3:6d:40:82:
91:1b:fc:35:32:c9:47:0f:57:88:a3:c6:3d:ca:61:3e:42:52:
e4:a7:2d:a5:f1:4a:39:bc:90:3d:e0:e9:05:ef:d6:1d:c3:be:
49:ee:b8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:20 2025 by rpki-client