Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/OLl_FfgYuo8b4GfOWxz18v27KeU.roa
File: OLl_FfgYuo8b4GfOWxz18v27KeU.roa (raw, json)
Hash identifier: +1mwivniMp3XvyRZqdjJW8jlJsaeNehBRHQQhHZBwwA=
Subject key identifier: 38:B9:7F:15:F8:18:BA:8F:1B:E0:67:CE:5B:1C:F5:F2:FD:BB:29:E5
Certificate issuer: /CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Certificate serial: 0184AE910A2F02CA8F83BA98BE8290D543B6
Authority key identifier: 4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/OLl_FfgYuo8b4GfOWxz18v27KeU.roa
Signing time: Fri 25 Nov 2022 11:34:11 +0000
ROA not before: Fri 25 Nov 2022 11:34:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25528
IP address blocks: 2a13:16c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ae:91:0a:2f:02:ca:8f:83:ba:98:be:82:90:d5:43:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Validity
Not Before: Nov 25 11:34:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38b97f15f818ba8f1be067ce5b1cf5f2fdbb29e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:10:ae:43:46:5d:81:34:e9:d9:03:cf:09:
7e:0f:29:b5:6f:8f:fa:9f:61:8a:81:14:79:6b:48:
7f:1e:b7:65:8a:c0:98:a9:bc:c1:7d:94:51:7c:53:
b4:f4:08:a2:4c:bd:14:4d:47:c5:2b:1a:bd:9e:b7:
ff:5d:df:90:85:33:59:fd:de:88:1a:1d:54:31:46:
6e:49:40:cb:ec:12:c6:ca:7d:75:cb:b6:f9:f5:77:
dc:35:ca:21:74:74:56:de:b8:0c:58:64:4a:c6:ff:
3d:5e:85:a2:c6:5e:c4:b2:a8:af:02:aa:9f:f6:5d:
40:ba:7d:10:ff:f0:6e:81:d5:8e:23:21:09:46:5c:
af:28:b1:58:fb:fc:d7:df:dc:65:14:c6:e8:a5:bb:
4f:77:16:37:75:0c:db:21:0f:d7:27:d6:05:17:d0:
1a:4a:7b:a1:4d:1b:e9:71:b7:85:06:4b:f7:2b:b3:
e2:d2:b0:79:ad:d2:a9:ed:4f:9b:f2:88:f9:7b:62:
ec:e4:c0:f2:24:93:6c:dd:d3:1c:40:6a:c4:a4:37:
f5:a1:34:18:6b:6b:39:dc:ae:03:ea:44:d6:5a:c0:
6a:00:04:f7:1b:4a:d3:fc:b2:ea:5e:8d:f5:3b:67:
11:0f:e4:87:cb:3d:08:3f:07:80:16:27:be:9d:d8:
77:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B9:7F:15:F8:18:BA:8F:1B:E0:67:CE:5B:1C:F5:F2:FD:BB:29:E5
X509v3 Authority Key Identifier:
keyid:4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/OLl_FfgYuo8b4GfOWxz18v27KeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:16c0::/29
Signature Algorithm: sha256WithRSAEncryption
de:1f:3b:52:06:6b:f9:80:0e:b0:78:f2:3e:6c:e4:46:99:3b:
d5:d6:fb:62:3f:79:1c:58:c3:6e:5f:52:e2:6e:f0:14:bc:f8:
dc:6b:24:9d:6c:a4:ac:7f:3f:24:3e:d2:af:97:2b:6c:2b:eb:
b8:ad:dd:e0:d9:4a:0c:45:94:00:ee:5a:12:9d:4d:00:4b:d3:
62:2f:91:99:34:6b:b7:62:f4:83:99:11:3c:0b:ad:34:f2:ea:
34:f9:ae:e2:b8:67:11:bc:4a:35:df:a5:d1:06:d0:42:7d:e9:
06:06:cd:96:a8:0e:33:ec:e5:d7:aa:43:f2:e1:3e:d5:25:ab:
22:ad:08:42:73:eb:d0:49:bc:88:f3:04:8f:63:15:15:a0:5a:
ac:5d:97:89:1a:50:e4:a3:14:49:74:9f:9a:2e:7c:79:61:54:
ec:b7:4b:a3:14:3e:85:a1:40:cb:83:87:62:ba:50:0d:21:aa:
f3:58:ac:a6:41:21:7c:0f:b3:37:d2:a2:13:54:a0:9b:04:67:
b2:cf:6a:2f:66:a7:a1:0e:00:df:b0:a9:9f:b3:ee:b5:cc:02:
90:c3:c2:15:3f:c7:75:75:4c:44:e6:de:b1:0b:0c:1f:b1:04:
f7:71:71:7a:67:09:87:8e:a3:ef:d6:d2:00:33:7f:c4:c3:9b:
f5:c6:3e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:46 2025 by rpki-client