Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/J0EMcBsRpU28TJTeKc7NbPvC4ZE.roa
File: J0EMcBsRpU28TJTeKc7NbPvC4ZE.roa (raw, json)
Hash identifier: 7QPK0QjKczWlJ0Dksi8qluhqjn2/zM8Jjb1gIOZ/J3o=
Subject key identifier: 27:41:0C:70:1B:11:A5:4D:BC:4C:94:DE:29:CE:CD:6C:FB:C2:E1:91
Certificate issuer: /CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Certificate serial: 018345A21E4ABB60ADFBDEBDB3B896F2A1F9
Authority key identifier: 55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/J0EMcBsRpU28TJTeKc7NbPvC4ZE.roa
Signing time: Fri 16 Sep 2022 09:29:56 +0000
ROA not before: Fri 16 Sep 2022 09:29:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201364
IP address blocks: 2a09:5986::/32 maxlen: 32
2a09:5984::/32 maxlen: 32
2a09:5982::/32 maxlen: 32
2a09:5980::/32 maxlen: 32
2a09:5983::/32 maxlen: 32
2a09:5985::/32 maxlen: 32
2a09:5987::/32 maxlen: 32
2a09:5981::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:45:a2:1e:4a:bb:60:ad:fb:de:bd:b3:b8:96:f2:a1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Validity
Not Before: Sep 16 09:29:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27410c701b11a54dbc4c94de29cecd6cfbc2e191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:8e:26:13:7c:00:32:4e:d5:b5:d0:0d:d9:
91:73:a5:d7:f8:fe:2b:9b:28:af:21:4c:09:f5:51:
e6:a1:c7:b5:0f:cc:5c:5c:2e:ba:57:70:3c:f4:de:
5d:24:5c:d1:fc:e4:c0:08:81:19:b3:88:a6:c5:4c:
a0:4b:19:fb:ce:aa:e7:fd:d5:71:65:e7:2c:52:0a:
91:af:16:fc:f1:e3:05:31:9f:43:5a:b3:83:ec:6a:
8c:b1:08:f5:5c:7a:c5:b7:e1:59:db:b4:5a:78:a2:
f5:66:fb:ac:7b:81:9b:b2:ee:8b:45:87:28:aa:bb:
9a:70:d9:43:56:dd:46:a5:4d:a4:f9:d6:42:f2:0a:
ae:f2:d8:76:e8:38:de:9c:7f:bb:06:76:eb:cd:22:
dc:64:ed:9c:1e:76:83:a1:b3:d4:a3:82:f7:b6:f3:
70:35:0b:10:a5:3d:17:00:64:82:e1:eb:23:1f:70:
dd:e0:27:7f:ca:2f:99:fe:5b:6c:cb:2c:47:1d:b3:
40:72:6b:74:da:ab:d4:a5:6d:36:f0:68:ff:80:35:
ef:95:67:22:9b:56:4e:6e:88:dc:eb:45:9e:c3:e0:
88:04:e8:85:f8:9c:ee:8d:8e:59:65:61:26:b9:e4:
62:ec:86:ab:47:70:14:97:3c:e3:2e:fd:9f:9a:a6:
0f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:41:0C:70:1B:11:A5:4D:BC:4C:94:DE:29:CE:CD:6C:FB:C2:E1:91
X509v3 Authority Key Identifier:
keyid:55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/J0EMcBsRpU28TJTeKc7NbPvC4ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:5980::/29
Signature Algorithm: sha256WithRSAEncryption
93:7e:2a:cc:13:d1:35:34:ac:b4:9a:16:d7:fa:b2:43:3b:ad:
3c:8c:eb:41:46:9e:4f:8a:c7:59:8b:8b:d0:48:d1:16:75:3f:
bc:72:cc:06:91:55:d1:76:41:b5:5d:19:e5:7a:38:9e:51:6d:
35:1d:b8:dd:94:f4:ee:2e:d8:9a:38:34:c7:dc:43:fc:c8:d5:
70:c6:6d:56:e3:c6:aa:b6:f3:24:84:7e:e1:ac:c8:97:2f:f0:
c0:bf:26:a4:5a:13:f0:69:c7:42:ca:ee:60:98:52:af:3d:96:
db:58:af:28:ad:50:fa:e6:6f:55:aa:59:64:53:ac:bd:e7:c1:
dc:a1:a2:c7:d6:cc:14:f8:c4:0c:60:7c:3d:3b:1e:e2:0e:6c:
7b:0a:df:59:49:6e:b0:d7:9c:4f:60:7b:57:92:ac:2f:55:d6:
32:e9:62:d3:91:92:dd:36:5c:24:5f:70:07:06:9b:1a:e4:6c:
98:de:fb:5d:62:f5:3c:30:1d:7a:06:6c:14:f3:61:ff:d3:b2:
1a:fd:42:95:6c:28:b4:83:f4:6a:83:d6:ef:98:16:5e:85:b4:
95:3e:ee:90:c4:25:79:89:ab:f2:1d:c1:42:8a:43:ad:01:de:
36:a9:2f:0a:53:89:76:2f:73:5f:76:4d:cb:bf:90:bc:6a:7a:
43:9f:a4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:48 2025 by rpki-client