Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/yG_2XaLx4SdU6LHm1tgxS3LoJsk.roa
File: yG_2XaLx4SdU6LHm1tgxS3LoJsk.roa (raw, json)
Hash identifier: nInl0SIiZthOL851Ezrec/NdCpWgYI+vb9y0VybjvHM=
Subject key identifier: C8:6F:F6:5D:A2:F1:E1:27:54:E8:B1:E6:D6:D8:31:4B:72:E8:26:C9
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 018427F9C634B932222CFB063C27E0B929B1
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/yG_2XaLx4SdU6LHm1tgxS3LoJsk.roa
Signing time: Sun 30 Oct 2022 08:19:51 +0000
ROA not before: Sun 30 Oct 2022 08:19:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203472
IP address blocks: 2a12:3fc2:dd00::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:27:f9:c6:34:b9:32:22:2c:fb:06:3c:27:e0:b9:29:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Oct 30 08:19:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c86ff65da2f1e12754e8b1e6d6d8314b72e826c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:41:70:a5:61:40:76:19:84:bc:4f:45:57:
10:c4:f2:38:0d:31:7e:ba:7f:5a:8e:41:58:0a:41:
8c:de:ba:6d:3a:41:10:6c:2f:00:c3:33:bf:8a:af:
a2:50:72:fc:5a:8c:b2:c7:e0:24:9a:27:ef:6f:8a:
d2:3b:c3:4e:cf:b3:2a:c5:9c:41:10:ec:99:cd:b0:
05:6a:9d:7e:43:e1:48:5f:a5:a5:1a:8b:4d:85:5b:
97:46:96:08:b3:c2:dc:39:8c:a2:9a:4a:aa:ed:ae:
7f:ab:1b:db:32:1f:35:0c:a9:09:cf:0f:d0:35:5d:
b4:2e:76:6e:22:71:0f:1a:43:5c:b1:c0:24:fe:eb:
83:a9:e7:68:9e:fb:27:c9:a8:b7:23:1a:06:6c:dc:
9d:c6:3e:bb:a8:9b:6e:65:6c:d9:67:cf:6c:03:bd:
dd:c3:b5:db:bf:7c:c0:2a:3b:51:92:04:a6:37:35:
54:48:ed:8f:8c:37:e3:75:0a:f4:f7:93:14:94:72:
80:c1:5f:74:38:c9:ab:2b:7c:d1:c3:42:cf:cb:19:
ae:3f:2e:51:cd:9b:39:2e:60:2a:a6:18:a4:ac:74:
20:5d:59:2c:e7:19:da:6c:1d:7d:49:d8:c4:ad:b4:
7f:57:d4:5f:cb:cb:3a:d7:8d:0b:87:98:dd:73:b8:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6F:F6:5D:A2:F1:E1:27:54:E8:B1:E6:D6:D8:31:4B:72:E8:26:C9
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/yG_2XaLx4SdU6LHm1tgxS3LoJsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:dd00::/40
Signature Algorithm: sha256WithRSAEncryption
79:41:f0:dc:26:4a:87:0f:d7:40:80:c9:47:bb:fc:09:ab:aa:
40:c6:88:e9:8d:5a:64:59:f6:ec:01:30:2a:bb:67:e3:a5:22:
ec:f7:22:7e:54:67:14:6a:60:e2:89:68:fa:d2:0b:f1:b7:f2:
1f:ad:83:aa:b2:2a:43:03:4a:5b:ab:71:0c:37:9c:98:43:b2:
9e:de:03:a8:06:dc:cc:a9:2f:18:69:4e:e5:27:fe:25:82:aa:
9b:c8:b9:ab:08:37:ae:82:89:30:ef:74:b8:16:b3:ea:80:2d:
c0:d2:c5:a8:ce:95:74:70:dd:90:c1:9d:d5:64:60:1f:cf:93:
66:3f:8d:85:dd:c1:22:f3:18:67:15:bb:f8:72:6e:61:b9:04:
38:eb:e2:b9:12:74:4f:5d:08:c4:3c:d2:a1:4c:b8:da:22:7d:
bd:ea:5f:00:05:b5:27:e4:94:66:e2:df:98:fb:2a:e7:e7:69:
0a:67:36:84:81:00:0a:ac:3a:58:d6:c4:07:db:85:37:cd:54:
01:7b:b5:30:f9:24:09:5a:f5:e8:07:8b:40:73:e0:34:ee:f9:
f7:6e:ab:44:9d:9b:9e:40:90:be:7e:26:a1:c7:bc:3d:bb:e6:
bf:c4:04:42:76:ba:87:65:0a:bb:64:cb:fa:90:11:a3:e3:21:
3c:f5:98:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:24 2025 by rpki-client