Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/O-AnnzuxiNkhM1leuRI0tgmqS0A.roa
File: O-AnnzuxiNkhM1leuRI0tgmqS0A.roa (raw, json)
Hash identifier: xXfXiA5YiurBtTZ4UHPneQrgH2n+tjg8r9FRCjHwLK0=
Subject key identifier: 3B:E0:27:9F:3B:B1:88:D9:21:33:59:5E:B9:12:34:B6:09:AA:4B:40
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 18D23CBE
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/O-AnnzuxiNkhM1leuRI0tgmqS0A.roa
Signing time: Sat 01 Jan 2022 05:53:33 +0000
ROA not before: Sat 01 Jan 2022 05:53:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209454
IP address blocks: 2a03:4bc0:3150::/48 maxlen: 48
2a03:4bc0:3151::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416431294 (0x18d23cbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Jan 1 05:53:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3be0279f3bb188d92133595eb91234b609aa4b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:b1:96:42:c0:5b:25:ea:bd:90:0b:83:38:
19:22:d8:6e:d3:82:3b:ca:39:fc:93:75:32:a1:d9:
a1:3c:e0:db:57:cf:4f:48:22:37:f9:fb:2b:14:04:
62:85:40:9d:99:06:46:c7:6b:ba:1d:83:64:05:42:
88:f1:e6:aa:5e:b4:b7:74:4c:19:f0:da:c5:4c:d8:
38:72:f7:f4:17:3b:4a:0f:93:3f:3a:d9:21:25:ea:
45:07:3c:71:86:1a:52:a7:21:40:04:c4:8f:33:cd:
ff:e3:c1:90:a8:a7:e2:46:dc:fb:ca:53:db:3a:b8:
b5:bf:28:27:b0:7f:01:d8:a2:19:3c:db:ae:85:4a:
ac:97:d7:5b:75:34:13:ec:2b:51:dd:44:07:f9:e7:
d5:3c:65:cd:44:7f:61:a3:99:6c:70:7c:5b:a4:eb:
ba:20:55:67:99:f5:f4:e5:aa:99:dd:5a:83:98:28:
a0:25:ce:d1:63:97:97:db:2b:ac:bd:e4:a3:33:eb:
16:6c:c4:91:3c:c4:0f:c4:c8:47:74:00:e6:a3:9b:
72:c2:94:f1:bb:02:c8:70:43:4f:1b:fc:87:2d:2c:
02:73:bb:ad:a2:aa:b7:8d:6d:aa:7e:db:97:f8:b0:
5f:a0:79:8e:50:80:98:b8:f9:f9:ca:c1:e1:a7:60:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E0:27:9F:3B:B1:88:D9:21:33:59:5E:B9:12:34:B6:09:AA:4B:40
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/O-AnnzuxiNkhM1leuRI0tgmqS0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:4bc0:3150::/47
Signature Algorithm: sha256WithRSAEncryption
05:b9:bb:fe:8c:2a:93:ef:78:02:47:ef:f1:7f:12:eb:e4:33:
0d:de:6a:77:89:2e:ca:12:8e:9f:1c:9e:45:23:ac:ec:5d:8e:
e0:76:04:0e:db:e8:81:b9:c4:31:21:4a:1e:48:17:37:33:5e:
2f:43:d5:f6:e7:31:ee:4b:42:fa:a1:6f:3f:82:13:db:50:a7:
27:44:97:56:79:4e:eb:40:32:7f:66:f9:63:6d:a1:21:0b:73:
47:2c:aa:9d:a2:18:9d:f6:7f:a7:28:f7:98:d7:fe:80:7d:03:
b5:a9:4f:7a:4b:a6:84:01:76:5d:8c:54:a8:da:f3:9e:b1:b1:
59:2b:ad:6a:7c:83:39:95:02:e0:66:ff:03:79:df:f1:0d:80:
21:7b:8c:f9:33:23:1d:65:d2:02:67:29:60:e5:f4:62:af:85:
93:de:86:95:2f:16:a1:3d:57:d6:4d:b3:a1:93:0b:c2:91:a7:
99:81:5d:58:dc:71:20:a5:d7:66:1d:3c:41:74:c1:7f:ef:8f:
ca:bb:2b:50:81:b9:5a:bf:d4:08:cd:5c:fe:76:6c:e9:75:6a:
fd:5a:1d:f7:71:79:5f:5b:08:90:5b:06:79:fc:6d:67:05:1e:
94:23:c4:f2:68:27:c4:81:84:4d:95:8c:3e:c4:ae:5a:b9:d1:
ab:50:21:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:50:29 2025 by rpki-client