Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/ABBraQceY5LgQ9FT5RtsCREu0EM.roa
File: ABBraQceY5LgQ9FT5RtsCREu0EM.roa (raw, json)
Hash identifier: qvniks77ylvOriFBs1XYfoA2QQq+oGjFZAaJb9GQ+rM=
Subject key identifier: 00:10:6B:69:07:1E:63:92:E0:43:D1:53:E5:1B:6C:09:11:2E:D0:43
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 01857002764E110F6D69CEFE73114FCCD775
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/ABBraQceY5LgQ9FT5RtsCREu0EM.roa
Signing time: Mon 02 Jan 2023 01:04:47 +0000
ROA not before: Mon 02 Jan 2023 01:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29497
IP address blocks: 2a00:1fa1::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:76:4e:11:0f:6d:69:ce:fe:73:11:4f:cc:d7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 2 01:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00106b69071e6392e043d153e51b6c09112ed043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8f:8f:85:15:23:84:bc:2b:b5:65:f8:18:fe:
2e:f5:70:64:b3:f8:a6:0b:64:06:ac:79:e5:05:82:
82:d0:c5:cc:50:1f:70:22:e5:91:0d:3e:63:2b:a3:
ec:13:8a:c1:36:8d:8c:7e:71:34:09:03:85:22:2c:
94:e4:9b:af:71:a3:3a:4f:f8:f1:ac:60:ed:9d:29:
cb:50:7d:cc:c2:40:f1:7f:31:15:65:cc:d9:09:db:
77:e0:10:ee:09:2e:3b:89:fb:4f:af:d5:dd:5c:f6:
16:e1:3b:ff:c0:d5:af:30:d9:74:68:ac:43:ad:64:
e1:14:92:ed:de:d4:89:4f:81:09:37:cb:e4:78:a6:
c9:a4:d2:08:5c:60:ba:40:9e:87:70:d9:25:99:c8:
ef:ea:6a:01:69:9a:db:fa:62:88:54:ca:db:b9:f8:
9f:01:1b:f5:86:83:96:4f:9a:fa:a3:98:05:3b:4c:
8b:63:76:ea:76:33:ed:9e:a2:4d:64:d2:16:ad:c2:
fa:64:b9:82:2c:76:5c:82:91:17:68:76:3d:f1:87:
64:07:4d:2e:d9:4c:99:03:26:2c:b5:f9:51:98:75:
4a:91:b8:71:e5:85:34:96:c5:ef:b1:08:6f:ec:19:
c0:c3:e0:c6:13:6d:eb:a1:22:26:61:7d:58:7e:d7:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:10:6B:69:07:1E:63:92:E0:43:D1:53:E5:1B:6C:09:11:2E:D0:43
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/ABBraQceY5LgQ9FT5RtsCREu0EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1fa1::/33
Signature Algorithm: sha256WithRSAEncryption
18:1c:74:79:38:05:dc:95:5f:90:b7:da:b8:de:b6:0e:1c:4d:
a5:0d:ec:e4:cc:f9:47:26:9d:54:d4:d4:12:10:6c:ac:e9:95:
bb:6d:0d:c0:8d:86:26:63:08:d4:e4:e3:b6:a0:91:6e:cb:4e:
02:1d:87:92:c5:ed:db:79:3f:c0:50:8d:a5:79:dd:0b:2c:06:
f8:bc:65:dc:5d:38:23:a8:f0:ce:0f:1c:64:4c:ed:d8:63:14:
e6:3c:68:e2:6f:44:d1:eb:ff:fa:e9:71:56:8e:89:3e:82:ab:
a3:3b:b1:b2:73:be:2a:0f:8e:7b:9a:2b:b3:b6:1d:c4:96:5b:
b8:c2:00:a7:3d:b4:b5:c1:db:2f:fd:70:2a:0f:b3:eb:0e:44:
04:80:bc:43:57:bc:f1:fd:e9:3a:a5:21:ea:fc:48:d9:81:f9:
ab:d7:23:4e:97:59:a8:04:dc:93:9e:c0:87:81:5d:a3:2c:dd:
4e:2d:e5:c1:2b:9d:ba:54:80:2a:ca:7c:22:4e:37:93:74:41:
ee:c0:0a:a5:5f:86:5b:69:3b:f8:7c:62:33:8a:65:b9:bd:b6:
8c:4d:ed:e0:75:02:4c:61:69:e1:6b:fe:2d:c9:5e:8b:d9:95:
64:22:1d:28:9a:7b:b6:fc:db:cb:8d:5c:df:30:45:d9:86:d5:
d0:23:5d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:24 2025 by rpki-client