Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/Km4DC6kdNqzxMx9RM5-aRifabUs.roa
File: Km4DC6kdNqzxMx9RM5-aRifabUs.roa (raw, json)
Hash identifier: vQRCrMOVle/sN+2DCVLahGIvONOYSN48DE6EIdXXwjU=
Subject key identifier: 2A:6E:03:0B:A9:1D:36:AC:F1:33:1F:51:33:9F:9A:46:27:DA:6D:4B
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 018BA91F3B233F36DA481E3C77B96742D50E
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/Km4DC6kdNqzxMx9RM5-aRifabUs.roa
Signing time: Tue 07 Nov 2023 09:31:18 +0000
ROA not before: Tue 07 Nov 2023 09:31:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212786
IP address blocks: 2a10:12c0::/29 maxlen: 29
2a0e:5780::/29 maxlen: 29
2a0e:2b00::/29 maxlen: 29
2a09:e980::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:1f:3b:23:3f:36:da:48:1e:3c:77:b9:67:42:d5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Nov 7 09:31:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a6e030ba91d36acf1331f51339f9a4627da6d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:96:59:1c:a8:39:86:e2:70:b0:57:28:e1:
6b:c1:91:bf:1e:c9:e4:f7:1c:c0:f7:e0:15:64:ee:
20:5b:d1:68:88:cf:0d:67:bc:4b:7d:b3:88:36:25:
08:a4:ed:b6:8d:7e:1c:bb:82:ad:af:da:57:c2:de:
60:88:ed:54:01:31:ec:e4:e6:f6:2f:09:03:59:da:
52:73:db:4e:1e:d4:0a:bd:6b:5b:f3:a3:2a:09:20:
dc:df:33:85:3a:77:41:7d:dc:5e:79:60:ff:f6:5a:
b1:38:60:27:ec:6b:05:a9:3f:02:fa:42:b8:6f:fc:
6a:d6:2e:00:18:a9:e8:20:1d:f5:e9:49:cd:14:ca:
cc:2e:dd:13:d0:ac:34:c4:fc:25:a6:03:82:95:3d:
5e:ea:f5:9c:e0:c6:de:ea:7c:a0:b3:2c:79:d3:51:
6f:b4:c8:72:54:77:68:84:2e:c5:2e:9b:0e:34:cf:
27:97:09:a5:02:f7:77:b3:c2:ec:f1:f7:c9:9c:2e:
99:65:98:6a:a4:d4:56:5d:02:92:30:86:82:3b:74:
15:50:69:b8:60:a0:69:ea:b0:b5:49:2d:4d:6e:a5:
55:ca:25:50:bd:91:d6:26:c2:ec:6e:e4:17:5b:77:
4c:a9:86:d4:13:dc:33:6e:3a:ec:d2:1c:ab:c6:bc:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6E:03:0B:A9:1D:36:AC:F1:33:1F:51:33:9F:9A:46:27:DA:6D:4B
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/Km4DC6kdNqzxMx9RM5-aRifabUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:e980::/29
2a0e:2b00::/29
2a0e:5780::/29
2a10:12c0::/29
Signature Algorithm: sha256WithRSAEncryption
3d:f3:c6:06:b4:8a:e3:ae:d8:85:0c:4e:ac:b1:18:7c:ab:2d:
4b:d2:2d:3c:c5:33:c9:f4:ad:d8:4b:c6:d2:9a:8d:68:12:75:
a4:16:94:14:55:d6:71:72:df:d7:b4:1d:b9:ef:04:cb:64:c8:
26:0d:ae:1f:36:3d:a9:57:4d:72:04:3a:9b:ba:f0:5b:2c:e3:
84:b5:c8:e6:11:74:62:ee:4c:48:20:c6:de:1e:f7:1e:e7:f0:
b5:c8:46:60:88:78:45:fa:d8:3c:f1:92:a8:ab:7a:79:e5:cc:
f1:5f:d5:d3:a2:b3:cf:f9:32:70:03:a5:11:59:20:20:3c:ca:
35:60:a6:d1:55:e5:f0:8e:e1:18:1f:62:68:0f:fb:eb:ba:9a:
f2:f3:ba:84:56:11:c2:f5:25:59:3f:4d:5a:ff:0a:03:34:26:
34:f0:d2:10:4e:e5:60:42:7e:1c:dc:6c:dd:46:1a:ea:81:eb:
0e:37:2e:23:70:16:f7:9c:1f:25:f2:e3:09:98:46:8c:ec:5e:
7c:a6:2d:97:31:a3:4a:84:24:8e:ef:e3:4f:d1:0c:bb:b1:29:
ca:51:21:cd:18:a2:81:23:f4:25:5f:da:9f:be:73:e5:44:53:
61:49:03:32:6c:a8:a7:b4:63:11:5f:49:7c:c9:f3:30:26:1a:
ac:0a:de:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:48 2025 by rpki-client