Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/lkZLNRnx2XF5xnXYcOjQ--yPxcc.roa
File: lkZLNRnx2XF5xnXYcOjQ--yPxcc.roa (raw, json)
Hash identifier: ttokDoIw0bh2SQeRwxqCOpXvYbJspAoXdbZylprpwyM=
Subject key identifier: 96:46:4B:35:19:F1:D9:71:79:C6:75:D8:70:E8:D0:FB:EC:8F:C5:C7
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01897CA3A7D54282BAA6DCCCA578476B4FEA
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/lkZLNRnx2XF5xnXYcOjQ--yPxcc.roa
Signing time: Sat 22 Jul 2023 08:07:27 +0000
ROA not before: Sat 22 Jul 2023 08:07:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139317
IP address blocks: 2a12:3fc6::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7c:a3:a7:d5:42:82:ba:a6:dc:cc:a5:78:47:6b:4f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jul 22 08:07:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96464b3519f1d97179c675d870e8d0fbec8fc5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:32:a3:36:8b:3d:50:a6:6c:de:c7:5d:45:9f:
4b:6e:df:26:02:d9:64:71:c7:7f:9c:92:57:e4:d9:
69:ab:ae:be:a8:74:5c:e1:4c:fa:58:c7:ee:63:86:
03:90:4b:cd:0a:20:18:c4:cb:24:d3:9b:18:9e:03:
70:9b:34:49:76:7f:80:33:67:fc:0b:e4:0e:34:b6:
bd:ef:fd:50:cd:8e:4b:6b:7f:85:eb:34:8c:98:5a:
2b:0f:2c:22:d4:cb:c8:dd:f6:ed:f7:b6:d0:79:3c:
5b:5a:70:6d:0a:4f:8c:f7:77:d6:b1:55:1f:e0:6e:
c9:e4:de:15:d7:dd:d4:4e:f2:e7:b3:f7:1d:d4:5b:
5f:4c:69:2e:ff:ab:75:68:c9:9c:2b:e5:ca:81:af:
26:df:5a:63:2e:a3:4b:05:06:00:53:ee:6f:25:0d:
18:83:a7:3e:c2:40:c4:c1:f1:8e:fd:66:dc:63:d0:
a1:b4:9d:43:67:38:81:fc:b3:c3:e8:d6:13:49:9f:
ba:6b:74:a2:91:7b:ad:a6:c3:5d:c4:31:82:fd:08:
df:22:be:ee:30:7f:80:9b:5a:01:8a:29:26:ad:b2:
f0:d2:10:0a:04:78:36:83:f5:17:8e:15:34:6b:2f:
7b:29:b5:2c:79:4f:a1:3d:ca:13:71:c5:30:64:00:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:46:4B:35:19:F1:D9:71:79:C6:75:D8:70:E8:D0:FB:EC:8F:C5:C7
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/lkZLNRnx2XF5xnXYcOjQ--yPxcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc6::/44
Signature Algorithm: sha256WithRSAEncryption
46:48:a9:9e:33:ea:b8:a1:0e:28:a1:8f:d8:ac:64:99:32:f4:
e6:31:72:92:f8:92:cc:23:ec:0a:db:c5:1f:25:5c:df:e4:75:
5e:48:da:60:de:c8:b9:df:ca:7e:d4:53:ae:3d:15:e0:8c:82:
8e:fa:0e:a3:77:62:0b:ec:44:22:74:d2:d7:9f:90:e7:c3:10:
64:ca:2c:41:6d:79:31:5a:7c:79:fd:56:3d:57:e0:cf:05:d3:
89:75:e1:54:9e:70:4a:f0:df:f5:36:b2:25:4b:3d:10:ad:98:
8f:8c:d2:39:46:b5:1b:70:f4:db:82:7f:46:19:7f:15:88:26:
aa:ae:cc:3c:df:1e:3b:19:3d:1a:b4:44:e1:82:ee:61:f1:78:
26:3f:50:9c:33:3b:4d:27:e7:5f:84:e8:95:e4:89:41:de:fd:
29:22:0b:32:4e:cd:61:17:b4:69:81:8f:c3:f5:65:06:74:17:
41:c7:c1:47:a5:fd:5d:50:17:da:06:b6:27:96:ca:d8:32:c6:
f6:75:e4:31:09:d4:08:95:1f:cb:a5:54:63:aa:3f:e3:8e:18:
e8:ed:4d:25:14:37:6f:63:72:8f:4d:5a:e7:e7:0a:f8:ea:ee:
d8:6f:c8:08:00:d4:ef:32:f8:1f:27:8f:81:25:b3:54:22:a5:
bb:6e:8a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:06 2025 by rpki-client