Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/g8DlYUbNN2Ae5qkKHFlrEVtozCE.roa
File: g8DlYUbNN2Ae5qkKHFlrEVtozCE.roa (raw, json)
Hash identifier: YZPlSf7zl+TakuAzMjf3Re/OJQ9KxOnJQ/j7hhQ2rug=
Subject key identifier: 83:C0:E5:61:46:CD:37:60:1E:E6:A9:0A:1C:59:6B:11:5B:68:CC:21
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 0827EB70
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/g8DlYUbNN2Ae5qkKHFlrEVtozCE.roa
Signing time: Mon 24 Jan 2022 17:18:59 +0000
ROA not before: Mon 24 Jan 2022 17:18:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 2a10:14c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136833904 (0x827eb70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jan 24 17:18:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83c0e56146cd37601ee6a90a1c596b115b68cc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:06:d1:f5:2a:3e:3e:42:be:27:6a:d3:71:
ac:09:51:b0:47:9f:2a:57:f8:e1:f3:42:96:cb:bd:
2f:5b:11:ed:36:1b:4c:39:bb:3c:ff:55:31:aa:fb:
63:41:81:14:d5:0e:f5:45:eb:30:fe:69:75:2a:b1:
9f:8c:a4:35:43:70:72:9b:10:bc:aa:64:cc:2c:56:
dd:6a:0f:3f:30:d8:c9:4d:13:68:95:34:89:73:b3:
4e:73:c5:0d:35:10:67:b8:d8:08:eb:24:2c:2c:84:
b0:37:1d:eb:d3:68:df:d6:30:80:a4:96:67:52:e1:
85:9c:c2:10:4f:e5:48:e3:1e:b0:65:73:a0:30:10:
8a:d0:38:2d:56:92:ef:15:e8:62:0b:ab:5b:22:dd:
ad:bc:96:d8:36:4b:f4:52:2c:d4:e4:1a:06:c4:d1:
ec:dd:bc:d5:f8:ea:27:51:15:0e:72:a1:85:90:49:
aa:4f:08:36:43:41:a0:67:27:e1:90:24:55:c9:f1:
bf:64:e5:01:40:7a:b5:1a:b9:16:6a:76:c9:08:c1:
56:3f:aa:d4:87:c4:8b:6a:de:54:68:05:2e:d3:d3:
8b:31:4c:e5:85:41:c0:bf:50:5c:3f:34:3e:b8:a8:
5a:f0:c4:c8:04:1f:d5:f8:50:4d:ec:57:b6:88:ac:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C0:E5:61:46:CD:37:60:1E:E6:A9:0A:1C:59:6B:11:5B:68:CC:21
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/g8DlYUbNN2Ae5qkKHFlrEVtozCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:14c0::/29
Signature Algorithm: sha256WithRSAEncryption
33:c7:7b:8a:ae:f5:ee:2d:a0:76:e1:fe:d9:e1:8b:59:3c:70:
b4:bb:cc:b7:f8:d6:90:a2:97:e2:ef:42:3b:9c:8a:3f:2f:6e:
b0:ae:6b:51:71:7a:3e:76:45:10:9d:1d:97:db:98:dd:f1:67:
83:71:10:ff:68:09:48:62:06:97:91:b8:fa:32:76:4e:de:ff:
a5:35:99:42:3a:3b:3b:68:47:a0:96:30:69:c4:f9:70:4a:6f:
d3:2b:4f:44:cb:47:43:4d:22:42:68:68:7c:c0:3a:d1:0b:e1:
bd:95:d2:b6:6d:a3:33:0d:88:04:11:0d:aa:da:5b:45:42:ae:
2f:a2:57:6e:4c:18:69:d4:5f:76:6c:7a:35:17:1d:73:c1:ae:
59:4e:86:7d:b5:c9:06:dc:07:b3:3a:2f:de:06:7f:e8:d5:d0:
5c:15:49:a8:43:63:a4:18:01:d8:6c:ad:7c:b6:db:ac:95:77:
3d:ef:10:d2:c2:6a:05:04:2a:f3:ab:ac:d5:cf:31:ec:44:ff:
8e:c9:59:b3:54:4d:b0:2e:c9:dd:d1:9f:e9:a5:00:a1:4f:0b:
b5:7b:b1:05:04:05:3a:7f:0d:e2:6d:d8:26:f9:72:d0:d4:90:
2e:eb:85:32:e3:97:76:6e:0a:bb:89:3e:81:b5:2d:15:48:21:
fb:7b:22:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:31:10 2025 by rpki-client