Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/j0_w8C-o29rl9gzF3A4vFSREgpU.roa
File: j0_w8C-o29rl9gzF3A4vFSREgpU.roa (raw, json)
Hash identifier: v96NsJb7BOctfV0bQXMGcCRLuVMJbVdeYZoY3haZWO4=
Subject key identifier: 8F:4F:F0:F0:2F:A8:DB:DA:E5:F6:0C:C5:DC:0E:2F:15:24:44:82:95
Certificate issuer: /CN=29d59e889f99aefdde5e949fe8079d337b57f447
Certificate serial: 02B7259E
Authority key identifier: 29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/j0_w8C-o29rl9gzF3A4vFSREgpU.roa
Signing time: Sat 01 Jan 2022 11:01:38 +0000
ROA not before: Sat 01 Jan 2022 11:01:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62396
IP address blocks: 2001:67c:2c68::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45557150 (0x2b7259e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d59e889f99aefdde5e949fe8079d337b57f447
Validity
Not Before: Jan 1 11:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f4ff0f02fa8dbdae5f60cc5dc0e2f1524448295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:15:9e:5f:a0:54:3c:bd:45:5f:79:0c:74:68:
c7:0a:58:d0:48:87:fe:d3:a5:29:fc:5e:6a:53:a8:
01:e6:24:ff:5e:59:c5:ab:38:66:53:6a:cd:fe:fb:
e0:97:a0:74:5b:3f:16:9a:65:c4:5e:12:8d:c0:89:
eb:31:8b:69:b3:25:ff:0f:ff:52:6e:de:bd:42:64:
6c:45:36:88:82:4d:07:a2:af:66:87:3d:46:e2:3f:
fc:ef:e1:10:b9:c0:1a:1d:0b:04:0c:7f:91:e9:6c:
ef:64:48:4d:94:2e:df:59:c3:35:d0:da:c6:6d:14:
48:02:bc:fb:a9:0e:73:c1:9b:6f:de:c5:bd:3c:be:
aa:c2:a2:49:88:6a:99:87:e6:5b:b9:69:07:40:5c:
2d:89:71:66:19:e4:c4:14:3f:d0:70:d0:48:4d:ad:
5c:9c:fd:70:f4:e3:de:3c:69:e6:00:ef:de:64:b4:
1f:f8:93:67:f6:00:d6:b4:0f:4f:85:c8:8d:02:02:
e1:02:c5:93:b5:34:ce:88:ac:ca:d8:11:54:e3:a2:
10:34:2e:f6:ff:68:23:fb:fd:10:ff:4c:c1:b9:0a:
c3:5a:f1:d0:47:4e:a7:1c:43:9c:de:b6:df:09:b9:
18:c5:21:2f:0d:66:59:30:5a:7b:6a:5c:b2:21:da:
76:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4F:F0:F0:2F:A8:DB:DA:E5:F6:0C:C5:DC:0E:2F:15:24:44:82:95
X509v3 Authority Key Identifier:
keyid:29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/j0_w8C-o29rl9gzF3A4vFSREgpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c68::/48
Signature Algorithm: sha256WithRSAEncryption
58:7a:ee:81:62:78:66:ed:bd:6e:ec:d9:1d:82:d2:71:aa:f0:
3a:ef:6b:5d:bb:24:ae:47:df:9a:67:a7:a9:c6:e1:3d:0e:e8:
a7:35:36:e1:87:66:94:30:ef:60:de:fa:bd:48:f2:84:eb:c4:
33:10:b0:54:66:81:83:9a:80:b9:34:65:7a:76:f9:4c:1e:69:
77:04:a9:e9:e5:65:44:47:3f:fc:e0:db:0d:03:46:a7:b2:9c:
4d:d8:a3:ff:93:17:20:90:9e:42:64:29:aa:37:d7:99:62:b1:
d0:e7:e9:da:8d:c2:5e:01:2d:ec:8c:45:e2:d1:66:da:58:02:
a7:79:a0:f4:d4:69:fc:e1:d4:6a:58:5e:c9:5c:c6:94:ef:d2:
2b:af:0f:0a:2d:f0:c1:5c:58:8f:68:d0:92:64:38:76:38:8f:
a0:7f:dd:ce:fb:57:f5:f9:94:59:85:58:7c:e0:1c:99:e1:40:
98:8a:52:e1:08:4f:f7:fe:a5:7b:dc:1c:ca:4f:bc:bc:66:d2:
42:1f:8c:b4:a3:6f:10:76:bb:60:1f:9f:e6:20:9c:f8:a2:c8:
37:63:2a:db:cc:b8:64:04:70:28:8d:74:10:19:a3:04:1a:c8:
50:51:9e:25:78:e8:6f:5a:8f:8e:72:cd:d4:c0:84:f4:96:da:
e7:f2:61:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:40 2025 by rpki-client