Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/ANledIN3TR95zdevtcwsv251IkE.roa
File: ANledIN3TR95zdevtcwsv251IkE.roa (raw, json)
Hash identifier: W/HeQj8l0lZT8mvY7HsoRRvKfKqaN/H5zK8kA++M95E=
Subject key identifier: 00:D9:5E:74:83:77:4D:1F:79:CD:D7:AF:B5:CC:2C:BF:6E:75:22:41
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 01856C6F07122DE3B0502B76B6D149A20690
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/ANledIN3TR95zdevtcwsv251IkE.roa
Signing time: Sun 01 Jan 2023 08:24:53 +0000
ROA not before: Sun 01 Jan 2023 08:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142289
IP address blocks: 2a0e:46c4:2c10::/44 maxlen: 48
2a0e:46c4:106::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:07:12:2d:e3:b0:50:2b:76:b6:d1:49:a2:06:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 08:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00d95e7483774d1f79cdd7afb5cc2cbf6e752241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e0:4e:4c:2b:a4:38:94:ba:51:98:49:ae:1b:
c5:1b:d7:da:b7:5b:c0:61:af:90:5b:11:6f:53:4f:
24:8d:d9:84:05:c0:98:94:0a:73:4d:0c:5f:90:a1:
cc:ef:c9:78:7f:21:f9:ee:3b:c4:7c:a8:e8:02:05:
b7:e7:2d:d0:73:f0:dd:b9:50:77:b3:71:c9:d0:1e:
af:ea:f1:36:ff:70:47:c2:25:05:c9:1f:26:9d:94:
c0:67:71:64:06:96:fb:8f:51:2a:54:4f:5a:d2:b2:
0d:0b:fd:ed:f5:16:fc:6c:25:74:fd:09:35:1a:e4:
6d:8b:21:6b:2a:48:db:f8:a0:1a:85:d5:50:8a:a0:
74:a3:43:97:f9:4a:21:a2:e4:68:45:8e:9e:2d:de:
23:23:ab:dd:15:5d:2f:90:65:4b:f8:25:c4:e7:9a:
cc:1c:f3:2c:b5:a9:e0:c6:7e:85:e6:da:37:6b:e0:
91:14:86:c3:1e:3f:c4:44:24:ef:bb:be:d3:7d:ac:
11:10:e7:5f:36:aa:93:1d:d6:ef:1a:92:16:09:36:
bc:4d:69:93:fd:bc:ef:38:e8:f0:2b:5a:e5:b3:70:
db:93:2e:90:1b:b8:cf:eb:bd:4f:cc:fb:a3:85:35:
7a:f8:67:c5:17:c7:04:42:b8:c3:4f:38:2b:88:71:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D9:5E:74:83:77:4D:1F:79:CD:D7:AF:B5:CC:2C:BF:6E:75:22:41
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/ANledIN3TR95zdevtcwsv251IkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:106::/48
2a0e:46c4:2c10::/44
Signature Algorithm: sha256WithRSAEncryption
74:8c:00:0f:52:6a:34:11:8e:f8:da:9f:6b:b1:c6:bf:bf:0c:
2c:c5:50:9a:0a:9f:c7:67:1d:e9:3d:0d:de:e2:83:85:95:2e:
54:22:5d:1f:49:ef:29:16:a0:1e:11:05:fc:94:bb:96:13:4f:
af:93:5e:c0:e7:06:8f:cf:9b:85:a5:b3:1f:77:75:d4:17:8e:
53:37:e7:2d:85:33:ef:49:61:cf:88:3e:b9:f3:5a:ad:1f:c4:
6e:69:09:3a:bc:01:03:03:08:b4:67:43:ef:40:67:2f:c9:06:
09:20:a5:5a:bb:07:37:16:29:8b:93:73:95:69:d2:fc:e2:28:
f2:17:48:5d:fd:dd:02:b2:ca:de:ca:ed:5d:28:58:e0:d2:9a:
ce:5b:5d:3c:e7:3c:d8:a6:be:4b:99:37:a2:6a:41:21:83:13:
73:69:3b:45:ae:f3:c8:29:dd:f2:f8:96:79:bc:3f:54:7d:22:
79:c8:09:51:0f:8e:fc:7b:7d:d3:8b:cc:26:7b:8d:50:44:ef:
03:1e:4c:33:ca:62:da:da:42:e2:df:b8:a3:4f:ad:d4:78:ac:
d6:7c:98:eb:a6:66:46:24:16:63:32:ec:eb:23:2f:94:ef:3a:
46:77:89:7e:74:7c:ba:fd:df:85:68:43:5a:a4:83:f0:28:f8:
ff:a9:b6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:46 2025 by rpki-client