Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/hSxkyk4Ype9ezrYpR7PCRYYyD_M.roa
File: hSxkyk4Ype9ezrYpR7PCRYYyD_M.roa (raw, json)
Hash identifier: vqSF78mDfYw8FPw/UVQKA/kqzkYXD+bA1QJqV/EmiaQ=
Subject key identifier: 85:2C:64:CA:4E:18:A5:EF:5E:CE:B6:29:47:B3:C2:45:86:32:0F:F3
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 0187DBF5ABBE9823009590D0E6C546CF5516
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/hSxkyk4Ype9ezrYpR7PCRYYyD_M.roa
Signing time: Tue 02 May 2023 10:15:23 +0000
ROA not before: Tue 02 May 2023 10:15:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 2a10:12c0::/29 maxlen: 29
2a0e:be00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:f5:ab:be:98:23:00:95:90:d0:e6:c5:46:cf:55:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: May 2 10:15:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=852c64ca4e18a5ef5eceb62947b3c24586320ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ca:51:34:57:3e:ed:a8:3c:36:a4:35:53:60:
6c:7f:4a:c9:a2:1e:15:1e:dc:8e:df:84:ff:b5:34:
b9:94:52:36:2b:35:ab:12:48:1c:2d:07:e7:e9:1b:
4f:4a:c7:48:7f:e3:e5:22:25:31:a5:15:0f:7d:80:
c1:63:08:6c:6c:bc:6a:ba:36:2c:e8:16:1e:31:48:
5f:96:38:73:cc:37:9d:47:53:d7:68:8b:c7:b5:69:
22:9a:5e:ac:bf:93:22:ce:f5:0c:23:8e:63:81:61:
96:f4:e9:61:0f:41:55:21:c2:2c:d7:cb:66:d4:51:
d2:b3:ab:a6:63:2e:21:ee:fd:16:cc:2c:74:c1:da:
1a:67:0f:b0:21:4b:90:f9:e2:8c:33:c0:67:1a:5c:
dc:90:ee:db:6c:8c:76:cf:45:53:4f:65:22:46:48:
63:19:39:80:10:cb:0e:c1:ac:13:18:67:76:d3:f9:
52:10:68:02:c6:0b:00:f2:54:1d:d7:47:60:fd:5a:
c1:94:6a:f3:e7:37:c8:1d:12:d0:64:39:55:6e:7e:
07:ae:11:a4:df:3d:16:41:41:69:86:30:e4:08:24:
b4:c3:ac:4b:d3:73:91:9a:71:7c:e0:71:cb:16:cd:
a3:2b:e7:14:24:b3:05:e8:05:78:7b:44:38:f7:63:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2C:64:CA:4E:18:A5:EF:5E:CE:B6:29:47:B3:C2:45:86:32:0F:F3
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/hSxkyk4Ype9ezrYpR7PCRYYyD_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:be00::/29
2a10:12c0::/29
Signature Algorithm: sha256WithRSAEncryption
82:f3:5d:db:63:15:ab:a0:fd:36:38:10:5c:e3:ed:b9:0c:ff:
fb:0a:b2:2e:63:bf:4b:93:f3:82:56:1a:07:07:08:43:9b:9d:
ac:a1:49:11:4d:dc:74:8f:22:57:da:7b:22:e7:23:9b:cd:15:
dd:83:8b:92:f2:6e:a0:41:f0:74:b7:35:63:d7:83:41:1c:9d:
3d:b7:b9:6b:9e:60:ca:50:b3:da:b5:1e:d1:c7:95:05:7a:1c:
5b:0c:68:aa:df:48:6a:ad:4a:f6:ac:10:15:6f:90:55:cf:cd:
2f:d4:6c:1f:3f:9e:43:c9:22:9f:c3:82:d3:e0:1d:64:73:9c:
91:fd:6b:51:35:51:92:a0:61:c8:99:05:e3:92:aa:17:98:58:
dc:c3:ba:3f:e4:27:02:e7:e1:52:79:3b:db:a7:e9:73:95:34:
69:08:b2:ce:0c:d8:e3:eb:f2:a9:d7:72:2b:4a:46:2d:67:e5:
d1:cd:b6:a1:57:4d:49:6d:d5:f3:f7:64:58:38:4c:2f:90:6a:
7d:6a:d3:c4:85:9b:97:81:9d:33:3f:b0:a2:ef:73:f8:80:0d:
32:8e:5e:02:a9:5c:34:47:9c:cc:12:93:b6:9b:69:a1:a8:c4:
11:0b:55:aa:e7:c5:c3:50:e3:81:b8:d2:92:1c:1f:2b:be:be:
bc:9d:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:40 2025 by rpki-client