Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/xJ03zyUWbR1Z_ErpPtjOqZf2tEc.roa
File: xJ03zyUWbR1Z_ErpPtjOqZf2tEc.roa (raw, json)
Hash identifier: vTuZgWat4l+OuIh3X23/3/gO0bvIVluQetz9xmVBsAk=
Subject key identifier: C4:9D:37:CF:25:16:6D:1D:59:FC:4A:E9:3E:D8:CE:A9:97:F6:B4:47
Certificate issuer: /CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Certificate serial: 382CBEC5
Authority key identifier: 1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/xJ03zyUWbR1Z_ErpPtjOqZf2tEc.roa
Signing time: Sat 01 Jan 2022 08:55:32 +0000
ROA not before: Sat 01 Jan 2022 08:55:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206202
IP address blocks: 2a01:9e00:ac00::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 942456517 (0x382cbec5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Validity
Not Before: Jan 1 08:55:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c49d37cf25166d1d59fc4ae93ed8cea997f6b447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:09:46:75:8c:2e:1b:bc:e0:f6:05:4a:e6:
e5:9c:c7:ca:4a:af:a0:53:39:87:03:ec:6f:66:40:
ac:1b:f3:ce:bc:56:05:a8:8a:c6:34:bd:10:b7:b2:
dc:fe:52:20:73:21:e5:b7:58:c9:c6:0b:05:58:a7:
59:a4:2a:96:6a:ff:2d:14:18:1d:d1:e5:5a:c9:9e:
6d:bd:cd:66:27:51:44:a9:3e:b3:cb:63:6e:c2:37:
82:c4:fa:b9:57:db:d0:8d:3a:eb:58:0a:b1:15:73:
14:af:41:06:2f:19:4d:89:4e:83:de:1b:13:1e:9f:
c1:8c:af:46:1d:01:f1:b2:e2:71:6a:50:45:9a:52:
d3:91:48:6a:59:d8:9e:26:6f:db:64:69:62:2a:43:
53:cd:31:73:24:17:7c:70:47:96:96:a8:76:dc:39:
bb:2d:4e:54:5c:ac:23:53:6e:cb:d8:9e:16:88:54:
cd:ec:e3:b3:39:ef:04:8d:33:ba:66:43:4e:ee:2c:
c5:3f:5c:7a:66:77:42:c9:30:36:64:e6:33:89:e7:
d7:62:64:3e:70:27:5c:3d:e7:10:e9:e6:bc:36:9a:
e9:13:ab:4d:1e:83:7a:b9:87:ea:76:3d:81:9b:5e:
db:9a:4d:6c:3d:04:9d:18:ea:dd:c8:b4:b7:d5:19:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9D:37:CF:25:16:6D:1D:59:FC:4A:E9:3E:D8:CE:A9:97:F6:B4:47
X509v3 Authority Key Identifier:
keyid:1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/xJ03zyUWbR1Z_ErpPtjOqZf2tEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:9e00:ac00::/40
Signature Algorithm: sha256WithRSAEncryption
2b:b0:ed:6f:5d:50:db:4d:79:16:4a:af:5e:88:d1:2b:66:16:
4e:c5:2d:f5:fe:cb:e5:e6:fe:c1:bf:bd:c9:96:e3:01:df:9b:
cd:f3:eb:19:bb:79:87:8d:77:98:1e:ea:1a:05:98:3c:bb:64:
00:9a:b7:df:41:ec:40:fa:d5:a8:37:08:59:db:b0:f3:8d:0f:
53:d3:85:ca:96:7f:ce:a5:23:27:b7:cb:85:5c:b2:9b:db:95:
41:26:a9:9f:d6:3a:c1:f6:4a:99:a1:be:13:8a:6f:8b:71:34:
2c:d6:e7:10:77:5c:4d:39:10:79:23:db:12:85:97:fe:04:de:
40:2e:5d:bc:8e:05:e9:47:95:6c:80:a6:c2:77:8e:fb:8d:25:
2c:13:a1:73:71:ef:c8:3f:77:de:68:89:5a:25:61:de:7d:39:
d5:fa:53:e0:12:9a:bc:2a:94:0c:f1:26:27:45:36:52:4b:0a:
fd:fa:92:5c:00:0d:b3:f7:9f:a7:45:0b:21:cf:b1:32:8a:20:
08:f5:5f:82:c5:97:cd:ac:79:91:15:52:e8:b6:da:30:e8:08:
9c:fe:6c:5d:92:d0:c0:88:1c:1f:8a:69:c4:e8:9e:01:90:e1:
16:73:08:bd:5a:00:69:f7:eb:ca:27:05:bc:e2:06:51:bb:f4:
56:4f:d6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:17 2025 by rpki-client