Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/L4ZAHVvLHBhRH7rCyIw_G84bIOU.roa
File: L4ZAHVvLHBhRH7rCyIw_G84bIOU.roa (raw, json)
Hash identifier: /q+IjqKkHRgievkHAbmAZok3h2r75WLV4P9fVAqUWCk=
Subject key identifier: 2F:86:40:1D:5B:CB:1C:18:51:1F:BA:C2:C8:8C:3F:1B:CE:1B:20:E5
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 0FD54854
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/L4ZAHVvLHBhRH7rCyIw_G84bIOU.roa
Signing time: Wed 12 Jan 2022 09:18:30 +0000
ROA not before: Wed 12 Jan 2022 09:18:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 2a06:56c2::/40 maxlen: 40
2a06:56c1::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265635924 (0xfd54854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Jan 12 09:18:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f86401d5bcb1c18511fbac2c88c3f1bce1b20e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:86:06:08:04:29:77:6a:5e:9f:b4:b6:4a:
48:f9:01:1e:5b:ab:2b:0e:a7:2d:5c:a2:2c:6f:8e:
6b:73:4b:42:fc:7d:93:bb:fe:4a:58:0c:9a:38:d4:
64:58:f8:ed:06:ad:b6:3b:fb:9f:cb:d4:93:78:d0:
6c:d4:d4:e7:a2:01:f2:a5:a0:3d:c2:15:1b:b8:98:
8a:57:50:95:13:e4:30:45:c8:07:ca:5d:f3:4c:70:
43:43:68:58:58:3f:ba:63:79:33:b8:ec:6e:28:12:
f4:c1:ac:5e:b5:75:88:30:01:f9:47:60:6f:19:ac:
2f:35:59:35:b5:7c:60:04:50:0b:ff:08:fb:5b:9b:
45:40:e8:3c:80:4b:6f:70:75:8f:6c:ef:c5:b5:d8:
34:79:4f:f6:a4:b4:0f:96:07:d5:26:f6:66:1b:3b:
b2:7b:8a:1d:9d:77:9f:e1:0c:91:0e:6b:d7:a4:e2:
dd:ba:98:33:9f:50:23:df:a6:86:e2:8f:61:15:d5:
b4:a3:5f:a4:fd:5b:89:a5:1d:b2:61:a7:e0:a0:5d:
e7:dd:49:21:51:4f:f4:7c:c6:f0:90:15:34:ec:c0:
81:b9:90:5c:0a:5f:d8:db:58:4c:d9:62:3c:8f:ac:
a6:b4:0e:fb:53:78:f0:cd:35:32:18:3d:5c:26:2e:
8d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:86:40:1D:5B:CB:1C:18:51:1F:BA:C2:C8:8C:3F:1B:CE:1B:20:E5
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/L4ZAHVvLHBhRH7rCyIw_G84bIOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:56c1::/40
2a06:56c2::/40
Signature Algorithm: sha256WithRSAEncryption
45:47:9d:41:b8:90:cd:99:c3:cf:f3:8f:3c:92:68:60:9c:51:
5d:ba:14:9d:e8:2e:c5:65:0f:13:6c:7a:23:6c:76:57:fd:38:
21:61:f2:d7:46:75:af:f8:01:b5:c8:a6:93:25:02:2f:85:68:
b8:f8:21:32:36:33:42:d0:b9:00:cb:b8:05:d3:35:08:0f:87:
11:85:01:d5:dc:49:26:af:92:cf:8a:e2:75:db:e3:6b:86:2f:
d0:2b:b0:9b:54:81:fe:1f:45:50:6d:2d:0c:71:8b:6b:58:d9:
88:2f:58:29:9e:64:36:5e:4f:c3:fb:b3:19:f8:83:73:b8:8c:
91:13:48:d3:0c:c5:ae:3f:8a:8f:5a:8c:00:04:f4:6c:25:19:
4f:08:47:40:d4:a4:08:f6:6b:b9:47:9b:68:0a:8a:5b:bd:c8:
51:49:9e:33:f9:c7:6b:4b:d1:2e:30:97:b9:a7:fb:67:12:70:
db:3a:c0:88:2b:59:99:95:26:99:31:76:67:1f:11:1d:a2:5b:
8a:41:a7:84:50:69:df:b8:68:62:dd:de:93:11:c1:72:53:67:
34:50:02:c2:e6:3c:f7:0b:49:a2:06:9d:7d:78:9e:70:33:1a:
ef:8f:1d:9a:38:89:0d:2b:33:c2:13:97:c1:8f:7d:21:43:a8:
a5:77:b2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:09 2025 by rpki-client