Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/R0SjM2RoqpgyJdZUdBCN-JRsjAs.roa
File: R0SjM2RoqpgyJdZUdBCN-JRsjAs.roa (raw, json)
Hash identifier: oDduDtKF1vILG0v7JBNUSSMD2qpmZ8nVBp0Jr3b5hcY=
Subject key identifier: 47:44:A3:33:64:68:AA:98:32:25:D6:54:74:10:8D:F8:94:6C:8C:0B
Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial: 01856ED50544DF89D1663978D057E98178F4
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/R0SjM2RoqpgyJdZUdBCN-JRsjAs.roa
Signing time: Sun 01 Jan 2023 19:35:32 +0000
ROA not before: Sun 01 Jan 2023 19:35:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210070
IP address blocks: 2a0f:f7c0::/32 maxlen: 32
2a0f:f7c1::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d5:05:44:df:89:d1:66:39:78:d0:57:e9:81:78:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Validity
Not Before: Jan 1 19:35:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4744a3336468aa983225d65474108df8946c8c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cc:3c:a7:5e:6a:a4:d2:be:df:61:48:0c:d2:
23:88:5b:1d:a1:2a:03:77:17:c9:34:f8:28:a4:bb:
f2:a5:d6:e9:34:8f:6f:55:0b:cd:cb:f1:2f:12:86:
a1:33:9a:85:43:a2:d2:48:f6:e3:72:62:80:4b:fb:
2e:0c:ea:ac:46:62:8f:bd:c3:15:eb:ae:80:19:e4:
35:ca:33:85:79:ef:43:bf:86:e8:c8:fb:ab:9b:ff:
38:23:51:43:63:61:be:47:6f:ef:82:cb:3a:01:9c:
9c:ff:47:65:08:78:33:d6:05:5f:f1:22:5c:ef:44:
8b:36:b6:ce:ce:12:bf:71:83:8c:cf:13:39:7b:d4:
a0:95:c7:d3:20:69:08:72:de:88:6c:6c:0a:7b:08:
ec:5e:2b:8c:fd:34:c9:fb:49:05:8b:40:04:34:f6:
c7:eb:39:e8:fa:70:22:64:8e:67:58:23:5e:29:b3:
94:ba:da:ef:dd:bd:ca:fb:d5:85:46:c7:08:c2:a0:
2a:c5:0f:b9:86:a9:48:32:74:d6:dc:01:f6:73:7f:
95:7a:4a:a2:3d:04:e0:4f:58:cd:a9:a9:7b:44:50:
74:67:88:07:ea:59:a6:a3:18:4f:ea:1f:54:68:ac:
d2:7b:f4:cd:b9:c8:81:fe:2d:a8:52:fe:11:ed:89:
76:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:44:A3:33:64:68:AA:98:32:25:D6:54:74:10:8D:F8:94:6C:8C:0B
X509v3 Authority Key Identifier:
keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/R0SjM2RoqpgyJdZUdBCN-JRsjAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:f7c0::/31
Signature Algorithm: sha256WithRSAEncryption
3d:59:06:94:22:d0:f4:26:02:1e:eb:e7:6e:27:82:66:93:05:
52:17:b4:06:15:c1:ea:fa:59:e8:5d:51:c5:8f:cb:e3:90:59:
e4:db:57:e4:23:e8:9e:5b:0f:6b:38:7a:58:76:d9:3c:47:9e:
c8:22:ac:a4:4a:41:ea:91:a1:97:24:f7:da:17:6e:31:f7:bc:
69:90:2b:39:d5:d1:43:80:77:8d:0c:d6:b5:ef:ea:b2:77:f9:
bf:25:c9:bb:80:90:ea:aa:13:a2:2f:13:9c:cb:a9:dd:20:ed:
e8:96:8d:ed:47:f2:52:26:b5:08:d6:93:67:0d:3a:70:49:b3:
fd:7f:66:04:ec:ca:70:69:4e:13:67:ae:39:b1:14:cb:6c:6e:
ca:57:89:ec:21:35:11:a9:e4:73:4d:dd:54:e0:e3:c6:ad:19:
89:9c:83:33:89:2d:6c:a8:71:03:5d:f9:87:6e:40:32:49:0d:
ad:f2:8b:63:bc:c8:1e:de:a3:32:d9:f4:bf:6e:58:ed:9d:df:
8e:ae:21:57:67:60:e1:66:9d:06:10:c7:78:a4:95:8c:88:88:
e0:7b:bd:2b:49:7d:15:00:d0:bc:d5:e9:60:1a:13:80:08:5e:
5f:56:46:e3:5a:e6:04:1d:e1:1c:a2:b9:1f:e3:b3:95:4c:53:
a8:eb:2b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:22:51 2025 by rpki-client