Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/1_-mkCN3uJ5gOQn3NVnkAT8xis8.roa
File: 1_-mkCN3uJ5gOQn3NVnkAT8xis8.roa (raw, json)
Hash identifier: MQvx9uCUW8Xpk4RlstS2yWl+C+FzoFko3UaSd9RG6GI=
Subject key identifier: D7:FF:A6:90:23:77:B8:9E:60:39:09:F7:35:59:E4:01:3F:31:8A:CF
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 01857042ABE314CAF83BA2DAAC522E9A8D38
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/1_-mkCN3uJ5gOQn3NVnkAT8xis8.roa
Signing time: Mon 02 Jan 2023 02:14:55 +0000
ROA not before: Mon 02 Jan 2023 02:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203038
IP address blocks: 2a0a:3507:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:ab:e3:14:ca:f8:3b:a2:da:ac:52:2e:9a:8d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Jan 2 02:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7ffa6902377b89e603909f73559e4013f318acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:e1:e7:80:c4:1f:12:68:aa:70:a4:fb:55:
a0:c5:4b:76:db:cc:ee:9a:79:02:53:ae:1d:42:ad:
5d:30:f7:35:2c:7e:c5:4c:f2:40:ee:a4:ca:91:1d:
49:63:4a:23:c2:4f:bd:42:86:49:fa:88:4c:82:72:
6a:23:54:9f:c9:80:e2:25:2b:56:fd:db:47:6e:2c:
43:cc:c4:40:87:9f:1a:2a:25:56:28:98:51:3e:81:
1a:cb:5f:04:09:fc:0a:f8:c7:d9:22:c7:cc:91:80:
b0:65:3c:29:7c:a5:70:e0:04:01:da:51:e9:1f:e6:
63:a4:37:d5:27:ee:19:12:65:ae:82:f7:08:42:22:
79:35:10:fa:87:33:af:4e:6e:81:d6:33:ca:07:a5:
84:7c:32:ee:d4:63:b7:45:ec:e4:c9:61:0d:89:be:
37:99:d5:73:d6:39:77:3d:77:1d:ab:32:c5:df:2b:
6f:4b:df:7b:1d:1f:08:ca:d6:c5:a3:92:4c:55:d5:
23:db:01:41:87:75:b2:cc:c7:69:b7:f8:75:30:fe:
0e:cc:c3:b7:68:56:29:96:ed:c1:51:ef:fc:ce:03:
ae:51:1b:70:37:2b:fe:a5:79:d6:ae:25:6d:73:e2:
7b:3b:57:b3:57:10:2b:2f:6f:c2:8d:f7:a4:fa:8d:
1b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FF:A6:90:23:77:B8:9E:60:39:09:F7:35:59:E4:01:3F:31:8A:CF
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/1_-mkCN3uJ5gOQn3NVnkAT8xis8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:3507:1::/48
Signature Algorithm: sha256WithRSAEncryption
80:34:d0:98:69:44:94:ca:ea:d9:d8:ea:85:db:88:90:5f:38:
12:c1:53:32:f8:af:4d:c4:52:d3:30:ba:1c:0d:49:3d:ce:5e:
34:3a:86:7e:38:e9:7c:d1:dc:d5:3f:91:cc:70:6b:7a:03:60:
f0:9c:c4:fe:cf:82:b4:59:48:51:51:5b:61:9e:e8:48:d2:5a:
bf:5e:58:b3:e4:dc:84:e2:96:b9:84:76:ef:ee:40:69:eb:14:
61:55:a2:15:d9:ed:88:3f:09:42:ac:ad:47:48:83:c3:cc:1f:
93:31:72:59:47:98:29:da:81:8e:c6:2b:ef:44:97:14:5c:48:
70:ef:33:0f:7e:f0:82:90:2d:13:8c:fa:e3:1a:9f:56:4a:c7:
06:a6:3c:e8:28:e9:4a:4a:38:7d:e4:00:46:3e:ef:aa:d1:b7:
07:26:d1:bb:b4:2e:8d:41:85:4f:25:cc:4b:f5:5e:da:c3:b2:
52:3c:b7:0d:ca:87:3f:80:ec:54:ca:e0:a0:6b:79:d9:74:11:
fa:2a:19:a3:35:71:73:a0:ad:a4:2c:3c:fb:17:33:9e:73:ef:
7a:b1:d3:a6:41:49:c6:f4:f4:88:69:50:b1:8c:cf:b7:ee:59:
46:dc:07:f1:7d:d2:79:da:ac:88:3f:42:63:1f:41:c2:fc:18:
9e:cf:72:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:04 2025 by rpki-client