Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/Uy2gZpv4qH_b3vNf1xr_kCf1XTY.roa
File: Uy2gZpv4qH_b3vNf1xr_kCf1XTY.roa (raw, json)
Hash identifier: VMdIcBu4gf7DHSeokHATATfUskCdXuJ9s78dQKq8snE=
Subject key identifier: 53:2D:A0:66:9B:F8:A8:7F:DB:DE:F3:5F:D7:1A:FF:90:27:F5:5D:36
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 0187752800829C60648F0B05B65C8356CE74
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/Uy2gZpv4qH_b3vNf1xr_kCf1XTY.roa
Signing time: Wed 12 Apr 2023 11:09:28 +0000
ROA not before: Wed 12 Apr 2023 11:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 2a10:12c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:28:00:82:9c:60:64:8f:0b:05:b6:5c:83:56:ce:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Apr 12 11:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=532da0669bf8a87fdbdef35fd71aff9027f55d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:df:f9:b6:3c:72:41:c8:8e:16:63:82:ec:d2:
a9:09:93:70:e4:a5:42:2d:1d:70:14:03:30:20:bb:
61:d6:69:8c:3c:e6:5e:18:1e:c3:7f:47:40:ee:78:
53:66:4b:e7:16:c4:2d:71:9a:3a:f1:5b:b9:a0:dd:
3d:fc:5f:0a:f7:81:92:64:00:28:06:fd:e2:43:1a:
1d:ca:d0:d1:0e:d9:3f:ef:6d:f6:1f:a3:ba:e0:fc:
3a:fb:6a:a8:79:3d:a5:8b:f3:39:d2:69:4a:95:fa:
02:70:7e:07:b2:a4:85:7d:8b:fb:09:ce:b8:88:c3:
68:04:d9:0d:84:e0:18:cb:e6:3e:e0:dd:d6:92:f1:
e0:ba:2f:39:fd:a2:0f:7b:bb:24:09:07:b1:88:02:
e1:a9:2b:8b:fc:16:30:1d:c8:91:b1:ba:08:cf:d0:
5a:6c:f7:ab:c5:ed:74:ef:c1:1e:f2:f3:f9:ee:eb:
7c:87:69:62:19:74:e6:2b:73:52:57:c8:7d:b4:03:
1b:cc:e0:6c:75:33:2e:d3:1f:6b:6a:e3:bf:1b:86:
47:06:44:f6:46:93:fc:4d:90:c3:0c:80:a5:49:4e:
fb:94:ff:4c:cd:b5:69:3b:c2:ea:fc:e7:ce:30:7d:
6e:f7:13:7f:f6:9a:2a:f9:40:11:43:ac:3a:81:31:
29:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2D:A0:66:9B:F8:A8:7F:DB:DE:F3:5F:D7:1A:FF:90:27:F5:5D:36
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/Uy2gZpv4qH_b3vNf1xr_kCf1XTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:12c0::/29
Signature Algorithm: sha256WithRSAEncryption
10:e1:c0:26:65:1c:f8:51:8e:c3:8b:b2:80:05:9b:95:b1:bc:
04:e9:b2:bd:33:f2:a0:1b:d6:db:90:90:c3:68:fe:e0:f2:f9:
48:c7:c6:71:8d:ad:ea:64:11:05:af:a3:bc:0d:e1:8c:c1:50:
a9:9b:97:a1:df:32:55:ba:0b:8c:70:b4:e1:c1:4f:4d:85:41:
30:e4:19:87:f7:cf:a4:bf:50:cc:48:ae:36:9a:6d:87:e5:8a:
95:0e:bf:6e:13:8e:43:88:94:7d:fd:86:79:bb:2e:e7:6c:b6:
24:fe:3c:16:eb:09:1e:1e:f6:a8:18:3c:eb:ee:86:7b:0b:e8:
ea:6b:40:9e:70:e1:7f:41:a7:d8:b8:64:01:4b:1e:6d:b7:43:
90:5a:95:78:d9:2b:1a:c1:ba:78:8d:84:e2:19:d0:0b:9f:e4:
d2:8f:ae:58:e3:a1:d9:30:6e:99:ca:70:4e:40:6a:6c:4a:c9:
58:69:b6:43:ab:9e:b8:bf:be:b0:55:1a:cd:1c:48:c5:1c:90:
e6:7b:e1:45:ce:f7:32:f4:b8:2a:a4:9a:93:a3:b4:c5:20:f8:
01:69:f2:70:38:57:00:db:9b:85:8b:08:23:79:ac:6f:f9:f7:
52:b3:0c:dc:92:ce:fc:03:32:ca:cb:d4:cd:5e:40:be:de:47:
b4:1c:b2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:19 2025 by rpki-client