Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CR-5gJysUZItBx8fCM8dy2atAFA.roa
File: CR-5gJysUZItBx8fCM8dy2atAFA.roa (raw, json)
Hash identifier: cT4guaL2Lr0Gy3jhz5Ry80eWGRMHgTjaClrnJ++Tq6Q=
Subject key identifier: 09:1F:B9:80:9C:AC:51:92:2D:07:1F:1F:08:CF:1D:CB:66:AD:00:50
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570958B1FA4B0D6352C047091CB459049
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CR-5gJysUZItBx8fCM8dy2atAFA.roa
Signing time: Mon 02 Jan 2023 03:45:26 +0000
ROA not before: Mon 02 Jan 2023 03:45:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197726
IP address blocks: 2a02:128:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:8b:1f:a4:b0:d6:35:2c:04:70:91:cb:45:90:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=091fb9809cac51922d071f1f08cf1dcb66ad0050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:07:13:16:97:ad:26:fc:0f:6f:d3:51:b7:
ac:7a:00:e8:ee:2d:f8:39:50:4a:d6:5e:8b:39:a0:
df:89:46:6f:d9:30:85:01:ad:02:b8:2b:73:70:ed:
9d:d1:bf:08:21:73:55:fa:38:0c:3d:9a:fe:9b:c7:
54:17:95:13:da:49:5d:f5:ca:86:d0:2c:db:3f:4c:
ee:fb:5d:6e:8f:17:d2:c5:a7:f4:db:9d:77:35:cf:
f7:33:f1:9b:2a:9f:41:76:8d:bc:f5:3d:b5:9b:35:
fc:8d:a5:a0:7b:26:5b:5f:ac:22:b9:c2:e0:64:a1:
df:15:b0:aa:96:59:7b:1c:4d:f8:09:83:66:dd:66:
8a:16:0f:ff:28:7a:d5:ed:8a:10:19:21:d6:8a:30:
b5:e7:d5:5b:01:0d:ce:70:b7:71:d7:73:ef:92:ab:
97:33:26:07:8c:15:2e:c2:92:c8:da:8a:e0:bb:02:
11:7e:16:77:cc:47:d0:d4:e7:b3:29:3d:9d:45:91:
c6:f9:8e:69:2b:43:0f:9e:36:68:e7:53:69:bd:1d:
cd:93:29:d7:0b:79:b1:2d:92:f3:10:f9:28:90:90:
fd:45:67:ba:17:86:a3:3a:ea:50:ae:11:14:5d:2d:
92:16:62:d3:86:8d:fa:cb:dd:71:5e:03:e9:97:f3:
7d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1F:B9:80:9C:AC:51:92:2D:07:1F:1F:08:CF:1D:CB:66:AD:00:50
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CR-5gJysUZItBx8fCM8dy2atAFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:128:2::/48
Signature Algorithm: sha256WithRSAEncryption
a6:7a:d5:24:0b:68:ff:76:02:6b:8e:47:5f:7c:cc:62:31:e8:
17:b5:19:71:be:ae:5c:6a:4f:4a:36:0c:cd:d5:9b:df:97:56:
20:e1:ca:f7:41:46:75:03:c6:b4:ad:30:94:0a:6f:b4:67:5f:
9b:c5:3c:ac:68:46:86:d1:4a:54:93:f9:ab:48:2b:ae:7e:ad:
ed:6a:7f:54:6b:49:75:c8:8f:59:c7:fb:f8:0a:90:ed:1a:d1:
34:91:4f:b5:2a:94:d9:4b:64:5a:dd:80:3e:d6:f7:56:94:41:
e5:3b:f1:29:c6:ad:bb:3b:21:8a:b1:dd:e1:46:ca:ce:1f:da:
61:22:04:66:4e:f9:74:70:21:aa:28:5e:99:97:4c:24:00:ff:
0c:18:a3:62:f7:5d:32:e5:e3:f3:64:fb:a5:2c:db:92:d5:a1:
01:9a:b9:88:4e:10:94:c3:86:84:cd:94:44:56:fd:1c:2d:ef:
3c:13:fc:cf:30:14:2c:9e:b3:27:ae:59:8f:a7:dd:9b:c8:0b:
7b:3a:c1:21:8a:ff:10:a9:a9:cf:10:13:73:50:b7:96:71:f6:
e9:e1:87:f8:06:30:d5:a0:77:2a:39:9d:41:22:49:f4:7a:20:
65:f9:f1:03:eb:3f:1f:33:48:24:f5:65:a8:0a:cb:58:9f:24:
8f:e5:49:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:56 2025 by rpki-client