Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/Ib_PSTUbLjyC61YRkzTdXmolYyU.roa
File: Ib_PSTUbLjyC61YRkzTdXmolYyU.roa (raw, json)
Hash identifier: C5L+sxf9kk2o+mWwPmZQrS9uBhtqaHxPYGAzfArmNm8=
Subject key identifier: 21:BF:CF:49:35:1B:2E:3C:82:EB:56:11:93:34:DD:5E:6A:25:63:25
Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Certificate serial: 03EA58FB
Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/Ib_PSTUbLjyC61YRkzTdXmolYyU.roa
Signing time: Sat 01 Jan 2022 12:54:19 +0000
ROA not before: Sat 01 Jan 2022 12:54:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50389
IP address blocks: 2a01:b960:2303::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65689851 (0x3ea58fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Validity
Not Before: Jan 1 12:54:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21bfcf49351b2e3c82eb56119334dd5e6a256325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:ba:b0:23:26:9f:70:f2:91:13:b6:81:ba:
dd:00:2e:f7:d1:08:2d:1c:dc:fa:6a:55:aa:a5:bc:
b0:b8:7f:f9:38:e7:4d:5f:3b:f4:04:bc:02:c3:0c:
e7:45:e6:78:51:0e:f9:e1:d6:98:19:c1:41:61:49:
f8:95:1d:a1:a7:c8:1b:ee:9e:63:ff:e6:36:eb:2e:
0d:ce:7d:11:df:27:8c:c0:17:d8:cb:bb:49:7f:6d:
c4:6f:ad:ff:11:2f:bb:ea:62:50:d7:21:5a:13:6f:
ef:57:f1:28:f5:d0:e0:e1:e9:b6:86:fa:da:0a:89:
1c:4a:fb:a0:30:84:84:2c:84:ce:a7:90:44:08:f2:
ea:8c:bb:af:6c:34:de:f9:33:57:62:7e:73:71:e8:
91:45:58:9b:94:e2:d1:e8:f4:3f:06:4d:66:7d:73:
c8:16:75:9a:b2:88:7d:a4:98:df:20:b9:48:6e:7a:
84:c2:8b:2e:61:0d:41:6a:d1:e9:4b:0d:03:7f:6c:
be:91:7b:b9:6b:e5:e9:30:d1:f0:0c:96:df:7d:64:
e0:6a:6d:d5:52:53:a2:e7:74:a4:79:f2:20:52:ee:
06:55:d9:a7:b5:e0:32:56:7d:f2:78:13:45:f0:87:
ed:dc:8f:16:ef:e3:c1:10:03:15:e9:bc:a1:fb:71:
d7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BF:CF:49:35:1B:2E:3C:82:EB:56:11:93:34:DD:5E:6A:25:63:25
X509v3 Authority Key Identifier:
keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/Ib_PSTUbLjyC61YRkzTdXmolYyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:b960:2303::/48
Signature Algorithm: sha256WithRSAEncryption
5e:40:ef:dd:26:1a:3c:42:66:4f:9d:29:f6:82:1c:2d:e4:b5:
e5:c3:e6:4b:f8:b7:1b:8c:6f:3d:50:34:86:d9:14:31:e1:57:
e5:fa:1b:5c:bb:e0:54:7c:68:46:b4:7a:a4:d8:eb:fc:8a:36:
d5:a5:a8:12:15:c9:6c:7c:57:d5:1c:63:6e:e0:9a:d5:51:a8:
a3:76:96:7e:9d:88:e6:21:38:9a:2e:12:18:8f:bc:ea:6e:0e:
97:9e:1c:18:11:a5:43:5b:9d:1e:d5:c9:39:5e:5b:21:68:a9:
3b:1d:7b:0c:07:ca:d4:5c:6c:ae:52:d5:5b:c5:cf:da:72:7a:
0d:60:75:0e:2f:1c:b3:c7:38:3c:bf:83:48:c8:04:b3:bb:c9:
4a:fa:b0:f8:2a:84:9b:97:76:16:b2:4c:71:cd:4e:2b:37:df:
29:ce:e3:8b:40:83:fb:95:f9:ab:cd:37:38:29:3b:78:7a:1b:
04:51:46:35:e6:02:cc:29:c6:75:c7:f9:4c:be:42:94:4a:99:
ca:d9:40:bb:98:c8:a5:b2:ce:7a:a2:21:9c:d4:45:6c:64:2f:
59:58:ce:88:06:e2:b7:ea:bd:c5:de:ec:f3:8f:d4:dd:a5:59:
76:72:92:f8:74:20:a3:8d:ed:9b:63:0e:c4:39:57:32:47:ec:
0e:2f:19:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:04 2025 by rpki-client