Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/n1PwqK37oqhq_hgpPLCqEnD_Q_0.roa
File: n1PwqK37oqhq_hgpPLCqEnD_Q_0.roa (raw, json)
Hash identifier: uCLM5nzEi6nWDsE+PJwPGxG3UoQ4WgSZWs2dHZuUv+Q=
Subject key identifier: 9F:53:F0:A8:AD:FB:A2:A8:6A:FE:18:29:3C:B0:AA:12:70:FF:43:FD
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 0184754AC09D339BAA46205F5199D45C62E8
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/n1PwqK37oqhq_hgpPLCqEnD_Q_0.roa
Signing time: Mon 14 Nov 2022 08:39:03 +0000
ROA not before: Mon 14 Nov 2022 08:39:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203008
IP address blocks: 2a0e:3302::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:4a:c0:9d:33:9b:aa:46:20:5f:51:99:d4:5c:62:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Nov 14 08:39:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f53f0a8adfba2a86afe18293cb0aa1270ff43fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:88:39:ff:60:1b:ce:88:3b:29:d2:51:04:2c:
43:82:28:0e:f7:aa:c4:5e:8a:8c:c6:7e:20:9b:c4:
dc:d6:47:e6:06:e9:38:e1:4d:22:a5:64:2d:94:ef:
38:6a:82:c6:66:b8:bf:e4:43:54:c4:72:bf:18:41:
53:b5:03:3c:b9:02:18:ac:11:b9:f2:a8:4b:6a:3b:
82:ac:05:20:6a:c1:24:62:4f:0e:6c:91:37:26:9b:
9b:21:4e:06:81:bb:45:7e:79:e3:22:1e:96:69:a5:
d4:73:95:fe:5d:01:a5:f1:3e:b1:96:7b:d5:ee:71:
3d:a3:b3:14:99:cf:12:40:f7:25:66:43:5d:02:5a:
fb:86:e6:cb:6a:85:a0:4e:6e:51:6b:71:c5:90:97:
96:28:53:6f:fe:ce:85:62:bb:c4:78:47:66:26:d5:
df:a4:88:5d:a9:ab:79:3e:89:ac:15:df:99:d3:16:
37:26:91:14:cd:8e:80:52:f1:24:b3:fa:bc:f6:6e:
ac:64:6f:b3:17:37:2b:ef:24:62:42:60:dd:3a:e4:
ae:7b:83:52:fb:26:1e:60:84:83:a5:92:41:9c:d1:
2b:d6:dc:c3:6c:5f:76:f9:81:5b:62:b7:11:1f:b8:
85:5e:ff:da:8a:04:d6:e3:12:23:63:76:84:d2:3b:
43:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:53:F0:A8:AD:FB:A2:A8:6A:FE:18:29:3C:B0:AA:12:70:FF:43:FD
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/n1PwqK37oqhq_hgpPLCqEnD_Q_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3302::/32
Signature Algorithm: sha256WithRSAEncryption
21:a9:df:d2:74:d7:5e:9b:c5:1f:53:b6:90:1c:43:cf:13:7e:
d8:c7:72:d1:17:00:1f:37:52:d1:3a:02:af:d8:43:85:ed:0a:
3e:3b:fc:2e:73:13:a9:88:d0:02:c8:1d:24:a6:90:6a:64:9c:
e7:9f:2a:7e:0e:04:c1:f5:a5:d2:0d:23:95:64:c2:0f:13:e3:
98:7c:07:5a:6e:65:70:69:4d:96:d3:e6:74:2f:34:9e:14:2b:
89:92:51:ad:e0:79:0d:18:10:e9:e4:76:48:df:ac:b5:44:2a:
76:4d:10:93:18:c9:44:47:88:d2:b0:50:00:d6:bd:65:9b:ad:
29:20:c4:5b:76:4e:f9:18:89:39:ed:31:86:af:d9:37:c3:ae:
e6:78:c5:02:3f:51:5e:db:59:3d:49:67:39:28:f3:a7:94:d9:
44:6a:91:4b:58:07:ec:ca:18:6d:e4:89:6d:a5:ca:c7:94:0b:
d8:b2:a1:62:30:82:04:5f:ff:6b:c2:e4:2b:aa:82:c7:99:5b:
02:76:84:4a:bc:4d:22:5d:3a:8f:89:38:c8:5c:99:07:55:16:
70:e4:c6:df:3e:60:4d:c5:1b:6a:43:5e:16:bc:7e:65:a7:03:
a0:79:8d:46:9c:01:95:9f:76:88:c4:7a:f6:2d:ba:df:63:9a:
85:d6:a1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:31:19 2025 by rpki-client