Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/5hNfXOhYneRq9EnfODHJyrf-Mvg.roa
File: 5hNfXOhYneRq9EnfODHJyrf-Mvg.roa (raw, json)
Hash identifier: TOyxDHbICEHLYwgSFd4UyUse/YP04Nq+bAlb3TPzZFA=
Subject key identifier: E6:13:5F:5C:E8:58:9D:E4:6A:F4:49:DF:38:31:C9:CA:B7:FE:32:F8
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 01894E2BE16B554372F46CED63D76E3FA632
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/5hNfXOhYneRq9EnfODHJyrf-Mvg.roa
Signing time: Thu 13 Jul 2023 07:34:05 +0000
ROA not before: Thu 13 Jul 2023 07:34:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210619
IP address blocks: 2a0a:a501::/48 maxlen: 48
2a0a:a502::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:2b:e1:6b:55:43:72:f4:6c:ed:63:d7:6e:3f:a6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Jul 13 07:34:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6135f5ce8589de46af449df3831c9cab7fe32f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:7b:84:85:98:7d:e0:4d:59:7c:cf:a7:97:
af:5e:07:c5:7f:86:75:71:a5:ff:06:a5:2c:21:65:
6e:30:e9:b9:25:37:79:7f:91:b1:f2:11:77:67:64:
61:63:c3:64:ec:fc:4f:b7:11:6a:b0:7c:1b:ac:3a:
be:b5:a6:8f:b8:5d:5a:73:96:f3:fb:4a:0e:c3:4d:
a6:e5:08:f6:31:04:b7:c9:b4:5d:7b:c6:69:f8:2a:
c5:55:0d:ad:3a:ba:85:fa:ba:29:83:7f:66:a0:9a:
f3:a0:00:de:b5:49:4a:fb:0c:bf:b9:36:52:44:a2:
51:9a:35:be:7a:c7:ba:66:54:e8:34:c9:9c:96:43:
57:ab:87:e9:62:b3:91:cd:d8:47:52:ad:af:bf:a2:
fc:a5:6d:0f:c7:64:b7:c9:72:f0:0f:09:90:6b:61:
e2:b5:85:7b:f5:66:b7:b0:65:6b:ba:84:89:ac:33:
ce:c6:4b:b9:d8:db:89:cb:7c:7f:fa:98:35:57:b8:
c1:96:fe:4b:71:a5:11:d9:af:ab:af:a6:82:ba:7e:
0e:75:55:5e:f3:27:39:70:33:d3:73:38:5e:61:00:
2a:a6:3c:f1:c3:d8:89:07:0c:92:ce:2c:88:12:bf:
2c:63:9b:03:77:3a:f0:02:4a:9d:e0:00:b7:d1:80:
32:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:13:5F:5C:E8:58:9D:E4:6A:F4:49:DF:38:31:C9:CA:B7:FE:32:F8
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/5hNfXOhYneRq9EnfODHJyrf-Mvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:a501::/48
2a0a:a502::/48
Signature Algorithm: sha256WithRSAEncryption
26:9d:e5:52:1e:64:85:17:c1:f0:9c:3c:18:0d:e1:d1:7a:c4:
16:16:b2:e4:02:7a:b5:cf:53:d5:ed:cb:cf:d1:6e:99:05:9f:
c4:dc:68:60:6f:64:49:e1:23:c6:1d:b6:aa:0e:e3:7a:5f:35:
3f:4e:af:19:c4:66:92:30:43:00:49:e3:b5:f6:9b:f0:15:46:
fa:65:f2:ea:de:13:09:38:25:d1:26:e9:f7:08:1a:30:d0:81:
32:48:89:ed:99:5e:19:6e:c4:88:74:d0:c5:9b:81:20:b1:e4:
52:e9:68:1a:28:bf:a2:aa:98:08:72:20:36:9e:54:de:40:b5:
26:ad:d0:85:8e:a5:6b:b4:26:e3:7c:a0:ee:46:7d:8e:1d:6d:
58:f3:de:cf:e4:ee:6b:5f:aa:33:bf:f5:51:12:ed:ba:cc:95:
48:ce:34:08:5f:61:25:f7:43:46:53:82:ae:30:93:c0:7f:88:
15:38:3c:35:d7:e1:4f:d7:05:4d:99:24:9d:c9:e7:4d:f5:b2:
b3:c1:f1:67:cc:5a:f8:06:0b:46:b1:4c:2b:de:4c:a1:99:8e:
8b:9b:54:5b:53:19:0d:33:ce:32:ef:2c:5f:78:54:cf:65:39:
58:ef:80:b6:d4:fa:e0:86:ac:7f:d2:77:c3:7d:2e:05:0d:0b:
36:fd:ea:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:06:35 2025 by rpki-client