Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/uxe2zAsMf8ED3aFh50TO83m5Css.roa
File: uxe2zAsMf8ED3aFh50TO83m5Css.roa (raw, json)
Hash identifier: Jm8gQfOP2cMqWgSve5vnbVbyTUceHan5zxE2c74kr74=
Subject key identifier: BB:17:B6:CC:0B:0C:7F:C1:03:DD:A1:61:E7:44:CE:F3:79:B9:0A:CB
Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial: 01856F3011B525E3A916817463E43334C3A3
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/uxe2zAsMf8ED3aFh50TO83m5Css.roa
Signing time: Sun 01 Jan 2023 21:14:59 +0000
ROA not before: Sun 01 Jan 2023 21:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61230
IP address blocks: 2a0e:1107:10::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:11:b5:25:e3:a9:16:81:74:63:e4:33:34:c3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Validity
Not Before: Jan 1 21:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb17b6cc0b0c7fc103dda161e744cef379b90acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1e:d6:3a:0f:da:ae:e8:b7:e8:6d:48:e3:de:
c9:3d:ea:f4:b4:e8:c9:0d:c3:4f:fc:24:94:5f:67:
f1:23:9c:58:d2:9e:3e:86:13:06:f4:c1:a7:1c:7b:
ee:f6:8f:d0:58:6e:f7:c2:e6:f6:7f:a9:75:c4:46:
8e:3e:ed:6c:af:d4:5b:12:ef:cb:24:f4:a0:77:1f:
e1:f1:be:d0:70:51:58:ec:5e:93:da:c0:28:98:a2:
2b:dd:7d:2e:cf:be:d4:5b:af:63:fe:4e:b4:a7:ef:
bc:8e:c7:4b:c6:9f:e0:dc:50:a0:6b:dc:9b:6f:66:
46:30:87:c7:43:b7:ec:f6:65:93:56:86:06:d3:8b:
30:5f:fb:55:30:c7:f1:f6:c5:5a:cf:66:9f:61:74:
5a:b9:91:bc:7c:c1:1d:e4:58:91:c9:ee:10:b8:7e:
4b:c3:a7:53:1b:99:bf:d9:02:9e:00:ab:fb:be:72:
66:c3:05:9c:13:9c:fa:77:3e:63:23:36:6a:31:98:
fd:5c:b8:d2:3e:f2:ed:b3:4c:78:b4:ed:27:7c:4a:
01:7c:e6:ed:e0:61:27:ba:61:78:45:cc:76:fb:f1:
19:a2:8f:e1:f3:c3:79:f4:1d:54:cf:ef:96:b5:79:
5c:a8:d0:f7:ac:8e:9d:0c:b8:81:ad:e0:7b:f7:41:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:17:B6:CC:0B:0C:7F:C1:03:DD:A1:61:E7:44:CE:F3:79:B9:0A:CB
X509v3 Authority Key Identifier:
keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/uxe2zAsMf8ED3aFh50TO83m5Css.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1107:10::/44
Signature Algorithm: sha256WithRSAEncryption
86:f2:f2:a3:55:39:48:2a:c7:0d:b5:ca:0e:eb:36:0a:cd:b5:
88:b3:92:22:c7:80:85:aa:81:31:e4:bd:cb:dd:a6:a2:af:41:
04:a2:db:95:ab:b0:da:b6:07:d5:11:41:41:7c:59:ff:3c:3d:
48:37:d0:f6:f8:92:88:c6:1d:ed:e7:f3:17:ba:92:33:29:5e:
d9:bf:a5:32:40:0a:97:b5:8d:66:7b:69:22:6d:e0:94:d6:dd:
64:dd:31:19:01:4d:4e:dc:0c:e8:a0:2a:d7:6e:03:49:34:6d:
a3:cb:ca:df:74:78:8e:56:1e:11:a7:48:7a:b1:a3:a2:56:28:
07:28:5b:c3:d3:f2:ca:f5:2a:df:bd:65:5c:c4:75:35:78:a7:
41:a1:bc:48:51:cf:26:a2:08:02:22:7d:34:49:5a:47:53:0a:
1b:46:bd:4f:55:f9:e1:cc:8f:2f:75:49:5c:22:5e:1f:cb:43:
69:12:54:f8:bb:72:6b:1b:9f:9c:4d:46:03:e7:66:ed:32:88:
9f:e0:1b:c3:a3:a4:1f:ff:f7:da:dd:7f:b6:c2:48:52:e7:78:
5f:36:ac:f4:1b:69:78:8e:b4:80:52:d9:48:f6:4b:42:af:dd:
12:e2:f8:46:ae:97:3c:96:e6:af:a8:68:05:72:87:99:68:e2:
52:ff:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:19:19 2025 by rpki-client