Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/xq_DzcJKJyL_QOXEcDevkfhNNPI.roa
File: xq_DzcJKJyL_QOXEcDevkfhNNPI.roa (raw, json)
Hash identifier: jzUsWD8ZcpEQ3kYgHeVt63pPeqv0U4REF8CxebZQVqk=
Subject key identifier: C6:AF:C3:CD:C2:4A:27:22:FF:40:E5:C4:70:37:AF:91:F8:4D:34:F2
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 018899FA364A644F9DFAC537C2D1E85A6089
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/xq_DzcJKJyL_QOXEcDevkfhNNPI.roa
Signing time: Thu 08 Jun 2023 07:48:11 +0000
ROA not before: Thu 08 Jun 2023 07:48:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5411
IP address blocks: 2a03:9b80:4000::/34 maxlen: 34
2a03:9b80:6000::/35 maxlen: 35
2a03:9b80:4000::/35 maxlen: 35
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:99:fa:36:4a:64:4f:9d:fa:c5:37:c2:d1:e8:5a:60:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Jun 8 07:48:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6afc3cdc24a2722ff40e5c47037af91f84d34f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b7:60:5f:14:ae:90:d6:d1:2c:23:dc:c0:f3:
ad:ca:ad:e8:8e:5f:0e:fd:6a:48:69:a3:8f:91:40:
72:58:6f:d6:d8:6e:e8:86:f7:81:09:28:01:56:db:
b0:38:ee:95:ed:f0:20:12:55:6d:29:44:b5:d0:c8:
45:43:43:21:47:92:2b:a2:a4:98:dd:24:16:8a:f2:
40:53:46:cd:66:af:d8:d9:c9:62:1e:47:9d:ea:24:
ad:0d:c3:12:87:7a:93:a1:0a:1a:bf:4f:67:b5:e5:
a8:eb:84:d2:13:9d:e0:84:4f:d2:56:f3:1c:06:f7:
2f:00:f7:5c:10:92:c0:df:39:65:83:ae:7f:01:16:
ac:86:70:aa:3f:45:de:67:ba:83:be:05:d9:5e:07:
b9:48:4e:71:a9:0e:9d:19:91:24:98:da:ec:9f:83:
d2:e8:50:fa:4a:13:30:4d:c0:aa:31:49:af:79:3e:
1a:3c:b7:d4:f7:7e:d4:8c:50:03:d8:97:27:2e:a8:
f1:76:cd:38:6b:17:bc:6a:6d:47:24:ad:33:8d:e0:
18:5d:10:e5:98:a5:19:c5:13:0d:d8:68:25:78:9d:
0b:06:e2:7d:9d:cc:74:60:0c:24:88:fd:01:77:de:
70:ee:71:44:e2:a7:2a:08:a6:93:ec:5f:18:c7:d2:
20:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AF:C3:CD:C2:4A:27:22:FF:40:E5:C4:70:37:AF:91:F8:4D:34:F2
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/xq_DzcJKJyL_QOXEcDevkfhNNPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:9b80:4000::/34
Signature Algorithm: sha256WithRSAEncryption
8f:ec:46:d0:09:44:c6:63:b3:1a:83:da:4b:e8:3f:2c:14:d3:
95:7a:66:f1:b1:c4:cb:39:9c:99:ab:8c:e2:97:ce:b6:4e:94:
2d:44:ce:6f:1a:43:70:16:49:a2:d1:59:17:b6:cd:1f:ea:52:
b7:0b:84:7c:f5:40:9a:51:b3:27:5c:fe:cd:48:c9:db:b5:7f:
54:16:ef:cd:0a:50:39:da:4e:ed:a5:b6:90:fd:1f:e1:2e:81:
b0:41:d2:ce:c4:d4:ec:78:05:f4:5f:91:6c:0b:74:b3:27:78:
9c:cf:6c:af:ad:99:8c:45:b4:c0:41:51:5a:a7:aa:46:c7:36:
d3:0b:c3:50:ee:d1:8e:b7:80:45:7c:9b:df:e2:77:d1:cb:63:
f3:7f:69:96:82:2b:4a:e8:bb:8a:6b:aa:04:9b:34:a9:a0:88:
8d:2f:82:ff:90:13:0c:66:00:7e:25:1e:e0:0c:46:ed:6d:95:
e3:00:38:fc:ff:fc:65:46:6b:cf:82:ff:96:d5:33:67:d2:0b:
80:76:ea:a0:af:58:45:1f:c9:a4:fb:b4:93:48:3b:c5:d2:bc:
7c:c0:9b:70:c3:a8:4c:4c:85:bc:6a:c2:5d:ff:2a:c9:a1:50:
33:03:78:9c:62:c7:b7:36:d1:c3:ca:d6:82:4e:7a:7c:fa:cf:
49:0c:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:59 2025 by rpki-client