Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/AIArBwMUERrwPdEn4tom0PHTRXY.roa
File: AIArBwMUERrwPdEn4tom0PHTRXY.roa (raw, json)
Hash identifier: 1bkmtsldsecQ8AvCn+PTbdWfyzbexHkcfFd3XTvYSgg=
Subject key identifier: 00:80:2B:07:03:14:11:1A:F0:3D:D1:27:E2:DA:26:D0:F1:D3:45:76
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 17E0FBC3
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/AIArBwMUERrwPdEn4tom0PHTRXY.roa
Signing time: Sat 01 Jan 2022 04:55:19 +0000
ROA not before: Sat 01 Jan 2022 04:55:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42655
IP address blocks: 2a03:1240:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400620483 (0x17e0fbc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Jan 1 04:55:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00802b070314111af03dd127e2da26d0f1d34576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:ad:01:81:16:a4:2a:be:d5:8c:74:da:cb:
8d:5f:ba:c2:fb:38:e6:d8:b4:31:1c:6f:48:31:6c:
4b:04:98:94:8c:1d:87:a3:e5:0f:47:fe:11:3f:e4:
96:6e:2f:bb:e2:62:5e:67:50:41:62:b4:53:c0:e9:
85:f3:c0:35:b9:c5:25:aa:dc:e1:e4:68:59:86:50:
90:b2:94:87:8f:ca:56:da:c9:1c:e0:46:52:be:26:
58:0f:37:71:e9:23:dc:cb:b3:45:cf:ec:f8:81:fe:
b6:5b:ba:0d:42:7f:4b:92:05:ff:74:b9:04:c9:d4:
79:32:f1:6b:2b:2e:ab:4a:84:59:e4:6b:ce:af:6e:
6b:3c:61:6a:b4:eb:b8:d8:ca:60:23:e4:1e:46:73:
f0:12:4f:b3:ee:c8:1b:6d:9b:40:e4:d3:5f:1d:b3:
92:90:14:75:89:0e:76:71:72:23:8d:f5:54:01:02:
f2:aa:16:bf:e2:f9:e5:80:f6:7c:4e:95:e4:da:11:
f8:2f:6e:d1:b2:c7:88:59:5e:93:53:ee:d1:a6:87:
82:33:ee:47:f3:88:b1:fb:55:a4:20:73:e4:f4:cb:
b2:8e:a4:54:29:ee:13:be:3d:8a:7a:b8:6e:0e:b4:
d1:a2:08:de:3e:0c:5f:61:31:02:c0:bc:0b:9c:64:
3d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:80:2B:07:03:14:11:1A:F0:3D:D1:27:E2:DA:26:D0:F1:D3:45:76
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/AIArBwMUERrwPdEn4tom0PHTRXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:1240:1::/48
Signature Algorithm: sha256WithRSAEncryption
26:8a:a6:82:b7:60:ec:45:91:3e:23:0e:69:5d:e7:bd:78:19:
cb:b4:3c:6f:04:89:36:6b:0a:08:59:5b:89:01:9e:cf:a3:69:
c4:61:79:99:8b:0e:81:cd:2a:2a:5f:d5:e4:b4:39:8e:27:71:
2f:ed:ac:29:a7:4c:c4:fd:80:98:2d:10:61:48:42:c8:2e:c0:
42:08:65:b1:ba:ec:6f:00:a1:bc:46:59:f1:91:63:4d:0b:db:
0d:b4:71:c6:26:4d:0e:66:0b:c1:d5:08:ad:8d:df:9a:d9:71:
ee:7c:7f:9f:1b:eb:ce:15:ec:9d:d1:07:de:15:de:e3:a6:db:
d5:77:52:27:53:c5:15:68:e0:04:f2:aa:ee:6b:d6:cd:66:e0:
18:57:eb:87:b4:b6:a9:ff:09:b8:14:32:27:fc:18:2c:32:24:
d5:12:0a:f7:dd:54:46:62:cd:3f:09:46:6f:b5:d6:ab:17:1b:
d4:1d:53:5f:19:48:74:5e:e3:8a:00:e7:c6:dc:a7:65:81:94:
1c:1a:92:ee:81:3b:66:f3:60:0e:b2:d6:69:5b:83:67:5f:74:
3e:8f:e7:35:93:1e:b6:51:9c:b8:33:f3:52:4a:76:88:98:49:
4a:4f:8b:c0:d7:99:e5:28:8d:9e:6a:0b:d2:9a:f8:a2:74:fa:
00:36:27:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:52:38 2025 by rpki-client