Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/7K-qtMPLbnCfB6J9G7BNXzWAGSM.roa
File: 7K-qtMPLbnCfB6J9G7BNXzWAGSM.roa (raw, json)
Hash identifier: /3INIzGgUcP+gijuF4kHJ9vuAo2P5Mk32k9AYq4S7oY=
Subject key identifier: EC:AF:AA:B4:C3:CB:6E:70:9F:07:A2:7D:1B:B0:4D:5F:35:80:19:23
Certificate issuer: /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial: 018B5BC541FDD8426D9C983C9749DC082FF2
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/7K-qtMPLbnCfB6J9G7BNXzWAGSM.roa
Signing time: Mon 23 Oct 2023 09:02:15 +0000
ROA not before: Mon 23 Oct 2023 09:02:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1136
IP address blocks: 2a10:dac0:101::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:c5:41:fd:d8:42:6d:9c:98:3c:97:49:dc:08:2f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Validity
Not Before: Oct 23 09:02:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecafaab4c3cb6e709f07a27d1bb04d5f35801923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:67:b7:50:85:0b:1b:3d:73:ed:5d:a6:cd:
4d:b4:44:30:0f:c7:f5:e1:68:52:33:84:93:fa:57:
76:74:76:b6:38:29:b5:10:93:3c:f5:ca:94:bc:e8:
a3:00:c3:01:f4:c5:ef:c4:b3:c0:cf:db:f0:c2:4a:
34:31:e4:33:5b:17:f3:31:52:b3:4d:e4:2e:97:41:
c7:53:d8:0f:9d:f1:ae:19:d3:7f:89:8a:2c:e7:9d:
89:2c:d1:3c:95:74:6d:0e:44:57:31:c8:c7:4c:8c:
74:1c:24:09:67:28:7a:1a:b6:86:16:07:18:13:03:
6f:a3:8e:fa:4b:35:09:a8:67:32:d0:5a:3e:16:aa:
84:c4:0c:cb:d1:a9:b6:48:fe:ab:91:f2:ca:59:d9:
c6:da:d5:fa:2f:c0:f9:d0:ff:2c:16:23:8e:a4:03:
e3:42:f9:48:7a:09:bf:3a:9d:14:d0:61:4c:88:4e:
4e:cd:df:82:e4:ed:bd:da:4c:38:8e:75:2a:21:d3:
7c:b8:92:74:a2:10:ce:28:b0:14:e8:14:cb:ef:82:
a6:e1:bb:66:9b:bc:d1:1a:c1:5e:4e:4b:59:f7:6c:
24:7a:e8:0f:3d:3b:b2:f0:8b:8c:0f:92:a2:c0:d1:
7a:92:91:c7:a7:bd:f9:61:d5:9f:7b:b5:e1:dd:59:
41:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AF:AA:B4:C3:CB:6E:70:9F:07:A2:7D:1B:B0:4D:5F:35:80:19:23
X509v3 Authority Key Identifier:
keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/7K-qtMPLbnCfB6J9G7BNXzWAGSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:dac0:101::/48
Signature Algorithm: sha256WithRSAEncryption
4e:bf:e5:74:6f:a0:1c:61:96:96:39:16:4a:df:08:4c:1d:13:
ac:8e:d3:37:89:dc:f0:5e:e2:31:26:b1:b6:dd:0e:43:bf:1e:
07:85:47:31:7a:42:89:4f:d0:32:c4:a5:91:71:9c:85:a8:78:
b7:a4:e1:26:53:08:4f:1f:d4:d9:cb:af:2a:7a:61:ca:a3:a4:
d5:b1:24:23:f4:47:ab:33:a3:74:9f:d4:4a:94:bf:d7:21:a0:
b9:7c:f6:c2:69:d3:5f:94:00:fe:ce:35:9a:91:01:cf:a4:a6:
d5:42:23:1b:c8:5d:d7:56:4a:36:c5:ed:3c:64:3b:1a:f4:01:
32:29:e9:9c:2b:8c:ba:c7:66:57:58:c9:3a:98:a0:6c:5e:25:
fa:dd:c4:a7:41:ba:19:fe:e4:3a:39:68:70:6f:25:56:e7:94:
35:ee:f1:cf:4e:e0:81:f8:83:5a:f2:6f:b9:62:37:a4:3e:cc:
9d:24:52:16:52:9f:12:04:f1:f4:f7:42:a4:1a:bc:ca:91:f0:
9c:93:df:e6:62:b2:36:fa:76:cc:0f:58:06:d6:79:b1:0b:cf:
44:06:9b:ee:1c:6b:f2:c8:39:04:cb:3a:b1:7c:2a:f2:45:83:
66:5c:b6:f8:34:aa:f2:d5:e3:e4:03:a7:6a:15:88:19:ca:4b:
8b:a7:94:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:05 2025 by rpki-client