Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tbyiuEHKsjpqiOabrBNsKpe1LLY.roa
File: tbyiuEHKsjpqiOabrBNsKpe1LLY.roa (raw, json)
Hash identifier: Mwxdm6sctCiC6XL4jJUZuHTK7IX/4X6nvN+dh4Vt8tQ=
Subject key identifier: B5:BC:A2:B8:41:CA:B2:3A:6A:88:E6:9B:AC:13:6C:2A:97:B5:2C:B6
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0113D4B0
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tbyiuEHKsjpqiOabrBNsKpe1LLY.roa
Signing time: Sat 01 Jan 2022 00:59:38 +0000
ROA not before: Sat 01 Jan 2022 00:59:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202297
IP address blocks: 2a0c:b642:1a08::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18076848 (0x113d4b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5bca2b841cab23a6a88e69bac136c2a97b52cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:70:6a:af:61:7c:a5:77:44:cd:82:b2:b1:
52:87:d5:5b:8b:cd:23:75:be:bf:f1:fc:0d:9f:61:
68:c7:ed:53:b7:23:05:c9:15:9d:c4:a4:a2:e0:f9:
04:8d:e3:02:be:f0:02:9b:87:e6:ec:f9:10:10:32:
3b:be:6d:8a:41:44:be:9d:76:27:85:ef:0b:8d:5b:
61:d7:c7:02:43:cd:1c:6d:3a:9a:58:bd:a6:ba:ab:
f3:f4:ad:0f:43:e1:74:ae:58:aa:5c:fa:5d:79:e0:
eb:c1:de:e1:7c:19:4b:10:3a:d3:ce:e5:74:4d:c9:
0e:9e:ef:f5:db:51:81:ba:10:bd:4d:a5:2a:e9:15:
d2:d9:a0:d5:9d:61:a5:2c:83:ef:20:9c:45:64:cb:
07:cd:0a:af:1a:a5:25:80:68:be:f4:51:03:5b:c2:
4c:af:bb:e5:aa:de:49:53:3d:91:40:3e:cb:a6:41:
bf:bd:94:07:ed:e5:d5:db:e5:78:ab:22:cf:27:69:
00:0d:cc:e6:16:47:3b:cd:b0:9f:05:17:9e:ab:f2:
dc:0b:4d:63:36:e2:ca:50:d5:98:32:60:4f:df:f6:
68:91:d9:79:03:da:6e:35:78:c5:38:bf:4c:04:ca:
3e:a4:b1:41:c2:3f:02:26:c0:79:66:ef:35:c1:29:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BC:A2:B8:41:CA:B2:3A:6A:88:E6:9B:AC:13:6C:2A:97:B5:2C:B6
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tbyiuEHKsjpqiOabrBNsKpe1LLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a08::/48
Signature Algorithm: sha256WithRSAEncryption
63:bd:a1:e3:14:69:00:57:25:31:75:7e:8d:9b:ba:ac:71:28:
a6:93:19:b3:f5:ce:55:83:ce:df:f9:eb:69:74:e4:ac:d6:95:
10:93:57:b6:c5:0d:0d:96:6e:14:92:93:2f:2c:e7:27:0b:b9:
cf:21:4b:08:09:e7:e8:d3:4d:07:0c:f1:1f:93:0c:b4:10:6f:
67:49:9b:c6:ee:c6:a0:be:e2:1e:8a:a3:18:91:99:fc:a7:ed:
9e:cb:92:7a:4a:61:38:7d:01:bd:60:4f:1c:1e:68:e1:7c:f9:
18:52:f6:98:eb:b1:d7:a9:d3:37:e7:4c:02:93:59:73:9f:9a:
df:3b:2e:fe:7a:d9:c7:b1:46:c3:95:07:97:ad:cd:9d:85:3a:
65:7f:89:58:e2:33:80:8d:2e:16:cb:26:4d:a7:f8:95:08:ee:
d6:f6:78:a8:e2:ff:ab:5f:79:f4:bd:b2:70:5f:28:71:8f:52:
37:16:d5:81:cd:1f:fc:f7:43:08:4c:0d:d0:4c:59:6b:fc:cc:
ad:86:37:ba:e2:91:3d:9a:1f:89:63:bf:03:e9:8c:b1:14:1c:
6c:41:e8:b1:79:73:29:a1:c9:7c:7b:89:09:21:01:29:59:75:
4e:79:d9:4f:8e:83:ff:8d:ff:a6:7f:0e:de:9a:0b:9c:71:2c:
8a:dc:9e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:51 2025 by rpki-client