Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/X587CVxR9GWXTnDIqU2nN_90IBM.roa
File: X587CVxR9GWXTnDIqU2nN_90IBM.roa (raw, json)
Hash identifier: zNK9jJeDSTF29JWEOALDco86DYNw85SFRA4CJqhqC/Y=
Subject key identifier: 5F:9F:3B:09:5C:51:F4:65:97:4E:70:C8:A9:4D:A7:37:FF:74:20:13
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 018572C39884C42341BFF8C956587B4805DF
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/X587CVxR9GWXTnDIqU2nN_90IBM.roa
Signing time: Mon 02 Jan 2023 13:54:59 +0000
ROA not before: Mon 02 Jan 2023 13:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51134
IP address blocks: 2a01:430:11::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:98:84:c4:23:41:bf:f8:c9:56:58:7b:48:05:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Jan 2 13:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f9f3b095c51f465974e70c8a94da737ff742013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:3e:c1:24:6f:28:7c:b6:32:82:bd:df:ba:
cc:7e:1e:1d:2b:c8:59:22:bb:89:39:01:ea:98:9e:
95:0d:57:d8:8a:7c:e3:76:d6:46:64:e6:ea:8f:56:
fd:94:ac:55:ce:0a:9f:99:5b:09:d5:6b:69:d7:70:
52:0c:c8:ad:14:2b:2d:20:23:48:d7:b6:6b:f6:05:
f8:99:77:07:41:41:89:68:6f:25:a8:11:a5:0b:24:
8a:d0:c2:24:de:af:a4:24:98:35:3d:13:eb:f1:bb:
d7:0f:32:ba:f8:9e:6a:7a:10:e2:aa:99:0b:40:59:
85:45:8d:57:6d:bc:de:4e:f7:3c:43:97:fd:6b:b0:
3c:02:12:ee:b6:54:56:6e:52:16:42:1c:f0:ca:59:
41:16:0d:81:2e:95:fb:9a:e8:bf:bc:2c:bb:ad:c4:
ff:21:ca:ed:f5:47:44:ce:b9:f9:6a:ed:66:98:d7:
7a:6b:33:96:bd:22:f3:a6:16:c3:fa:a3:ca:11:af:
b6:11:8d:64:b3:5c:11:33:94:1b:2f:8d:dd:45:30:
5a:18:dd:83:88:28:90:6c:d9:26:ee:44:48:f2:7f:
7e:78:c1:71:6a:7c:2d:76:a8:e2:5d:c6:c6:14:82:
2c:ff:19:83:a7:dd:19:ce:1d:6e:84:ab:5b:51:b9:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9F:3B:09:5C:51:F4:65:97:4E:70:C8:A9:4D:A7:37:FF:74:20:13
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/X587CVxR9GWXTnDIqU2nN_90IBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:430:11::/48
Signature Algorithm: sha256WithRSAEncryption
1f:9a:59:eb:81:7d:83:06:c0:1e:21:0b:22:04:97:8f:db:43:
f6:70:4e:be:8d:2a:f0:03:22:cd:65:00:69:e9:e2:50:b4:7c:
14:4d:ec:6a:08:88:b9:2a:e1:9a:26:94:6d:0d:3f:2a:2b:52:
3c:2d:b1:64:9e:a7:76:b1:bb:62:05:f8:a3:c5:12:c5:d1:10:
07:6b:e3:e9:2a:2a:3e:cd:85:49:d4:cd:25:9d:1b:5c:38:3b:
ba:10:39:e2:41:d7:6a:f0:74:c3:ad:d7:8e:7b:76:e7:15:1b:
4c:a2:24:5d:e5:38:7a:77:87:26:b9:43:3f:d3:62:c4:51:24:
1d:80:de:e4:a4:af:a5:70:fc:3b:e2:9a:1f:ae:2e:b4:a1:7f:
2f:ef:f3:b4:5d:ca:c7:27:ba:f3:30:21:33:75:f6:78:7e:c8:
04:22:3c:73:29:73:3a:c5:50:74:17:9d:82:b1:60:92:a8:42:
9a:a8:10:1d:eb:c8:db:7d:e1:91:b0:89:56:80:1e:bb:c3:7e:
f1:89:cf:c2:82:3f:4a:8f:9c:7f:83:0b:f6:84:4e:19:89:ba:
ec:a8:78:43:03:e8:40:6b:00:1c:55:7b:6d:63:df:d8:5d:cc:
01:ae:93:47:93:c0:3d:bf:44:22:6a:2d:19:4e:4d:5a:8b:f7:
11:a4:a0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:30:17 2025 by rpki-client