Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/8l5NmbYjSMMomoGc4jvsYH8BOUI.roa
File: 8l5NmbYjSMMomoGc4jvsYH8BOUI.roa (raw, json)
Hash identifier: 2rwgaedgF3vt6cjmds1xbhBNpvT1wCMx4b5dlSnvPcw=
Subject key identifier: F2:5E:4D:99:B6:23:48:C3:28:9A:81:9C:E2:3B:EC:60:7F:01:39:42
Certificate issuer: /CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Certificate serial: 2744BB
Authority key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/8l5NmbYjSMMomoGc4jvsYH8BOUI.roa
Signing time: Sat 01 Jan 2022 02:01:00 +0000
ROA not before: Sat 01 Jan 2022 02:01:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210664
IP address blocks: 2a05:4b40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2573499 (0x2744bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Validity
Not Before: Jan 1 02:01:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f25e4d99b62348c3289a819ce23bec607f013942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:2a:08:ae:de:78:72:33:02:8f:1f:c9:8b:
77:37:b4:9c:f0:60:6a:26:27:94:56:a5:2b:b4:35:
5a:c2:94:1b:6a:5b:7d:9e:32:13:e4:ca:39:07:1c:
98:75:5e:e3:1b:89:00:9e:c7:1c:47:04:e9:d4:50:
89:eb:ea:b4:29:2d:90:3c:f5:8e:f6:77:f2:c4:82:
9d:c0:18:5a:54:17:c4:35:38:db:e6:5c:dd:7d:33:
2a:18:3c:86:8b:06:f6:04:d1:6f:d2:ac:1e:eb:e6:
60:aa:bb:2d:3e:60:63:d9:3d:34:c7:c9:28:cc:51:
8f:70:ba:59:1a:cb:46:77:f9:2e:41:36:c2:5f:c0:
87:0d:fb:6e:74:92:d2:93:c4:e4:98:ab:4e:c8:a1:
4a:54:d0:ff:c2:6b:69:f9:c2:db:da:1d:b6:c4:0d:
ee:49:fc:1f:72:1f:ba:53:88:59:31:bd:cd:e8:d1:
3c:dd:f5:6b:98:7f:96:21:b6:1e:79:5f:45:f3:46:
ea:eb:2c:30:b3:b7:22:c9:78:17:89:b4:48:6d:6c:
2d:72:da:4c:51:5b:18:dc:44:77:b5:4a:11:c6:7a:
7d:67:62:31:52:0f:57:65:56:0b:8f:b3:be:ea:6b:
57:63:4c:f9:ad:27:1d:7a:0c:39:e6:5f:b0:f6:0d:
95:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5E:4D:99:B6:23:48:C3:28:9A:81:9C:E2:3B:EC:60:7F:01:39:42
X509v3 Authority Key Identifier:
keyid:C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/8l5NmbYjSMMomoGc4jvsYH8BOUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4b40::/32
Signature Algorithm: sha256WithRSAEncryption
66:14:71:5a:3e:bf:55:d0:cb:f3:d9:4b:96:de:96:87:7d:6b:
ae:2c:86:4d:ef:76:b7:61:27:c3:a0:29:60:15:5b:21:98:bd:
2f:f9:a0:da:8a:3d:fc:80:03:43:44:a4:c6:6d:e1:2e:49:75:
5a:c7:68:d4:14:84:29:be:2c:a6:7c:d3:71:56:92:9f:49:59:
6a:96:7c:24:ff:c1:c5:5b:64:17:fe:d7:20:05:89:f7:2d:39:
0c:ea:c7:40:86:68:93:ed:6c:17:28:54:4a:87:cf:d0:d8:4c:
0b:ee:ba:f1:a9:0d:96:62:3d:5c:00:63:ff:48:dc:12:3e:c7:
8e:cf:67:5d:c6:17:67:a4:9d:3c:7d:61:59:fb:bc:ef:6b:95:
36:65:52:5c:6f:12:80:54:a4:ff:86:17:18:07:c4:1b:fa:32:
9c:78:a8:ed:80:4a:3f:89:37:68:d8:83:97:b7:2e:e6:dd:05:
e2:13:21:e0:88:b1:6f:f3:d3:15:df:f3:6d:89:46:d7:78:52:
0d:79:41:6f:2d:34:28:1a:94:0c:77:76:5b:e8:27:7b:a7:62:
b4:21:ae:41:bc:e2:dc:12:f3:d8:5d:6c:99:b9:9d:a4:2a:3e:
4c:a4:4d:70:ee:e2:40:52:09:2c:09:16:f8:c0:51:4c:7a:59:
79:c9:47:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:42 2025 by rpki-client