Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/AegJivh5FIEXnKbVTt4GrHDEAjY.roa
File: AegJivh5FIEXnKbVTt4GrHDEAjY.roa (raw, json)
Hash identifier: +VxSLnX3O0404gcDaocTJcKvKcQlN7MqcvRC5GUuHgg=
Subject key identifier: 01:E8:09:8A:F8:79:14:81:17:9C:A6:D5:4E:DE:06:AC:70:C4:02:36
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 02FBC5AC
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/AegJivh5FIEXnKbVTt4GrHDEAjY.roa
Signing time: Sat 01 Jan 2022 16:03:39 +0000
ROA not before: Sat 01 Jan 2022 16:03:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213326
IP address blocks: 2a0e:46c4:2c00::/44 maxlen: 47
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50054572 (0x2fbc5ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 16:03:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01e8098af8791481179ca6d54ede06ac70c40236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:41:7a:b5:08:22:ad:c4:e1:dd:5d:00:9b:
3a:04:d3:87:e0:36:7e:07:13:4c:af:55:5f:97:6f:
12:71:4c:09:06:9a:95:01:1d:c8:2a:59:13:98:72:
28:24:76:a2:c4:6e:8b:64:cd:2b:8c:e7:e7:47:f2:
fd:d3:a8:8d:79:c3:36:24:15:16:23:ff:e5:ed:29:
04:93:4f:63:6a:41:7b:33:0f:7e:9b:65:54:2f:26:
69:dd:64:a3:c3:a3:46:2d:0f:0f:e9:eb:3a:49:42:
2c:0a:07:70:18:ad:d5:04:0e:ea:fc:93:d8:2e:40:
dd:52:41:68:69:b4:76:80:6d:6e:6c:b9:5f:d9:b1:
6c:c7:0e:a5:b9:1e:bd:dc:2a:d0:67:56:c8:b9:c9:
46:a7:6c:fd:e7:65:5a:db:38:a4:8f:6e:fc:93:da:
4b:c5:c1:66:b5:88:cd:02:39:85:74:87:bb:2a:6a:
fd:3c:86:f4:00:d6:af:b8:50:9e:0f:27:6a:d5:b0:
d2:2b:a7:59:4f:80:30:64:11:43:af:12:63:96:0e:
f3:b7:1f:24:8c:62:d2:16:e1:70:96:30:02:90:73:
4f:a1:1c:6b:e9:57:65:b8:e5:c4:b7:06:37:e4:85:
0b:8d:93:20:25:30:45:03:7b:36:51:a5:1e:80:7c:
15:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E8:09:8A:F8:79:14:81:17:9C:A6:D5:4E:DE:06:AC:70:C4:02:36
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/AegJivh5FIEXnKbVTt4GrHDEAjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:2c00::/44
Signature Algorithm: sha256WithRSAEncryption
98:20:85:3d:52:0a:f6:b6:f2:f3:00:cc:84:9d:7f:10:89:fb:
25:12:e1:d9:47:6e:4d:d2:84:93:90:5a:7b:58:aa:05:96:0e:
8a:ae:01:ff:03:ed:44:21:70:e5:7f:72:bc:7d:93:50:ab:21:
12:5d:15:e1:90:84:7f:cb:7e:e8:0b:32:5e:c2:ec:54:ef:ec:
82:e0:51:6a:f9:9a:c5:c6:f0:7a:3a:d9:dc:94:ea:84:3f:6e:
d9:1f:bf:bc:9a:ef:73:8e:cc:a6:53:f6:d7:e0:d9:55:dc:3b:
da:18:a1:44:b9:16:29:53:6b:9e:c5:ff:25:0d:e2:92:c7:1b:
6a:95:3b:80:3d:bc:8e:ae:54:d4:fe:b5:d3:99:5e:0f:7e:6a:
4b:a0:8d:82:30:53:fa:dd:4a:92:d8:10:1a:3f:4b:a4:95:af:
67:26:d1:91:ff:36:81:0d:9d:a3:db:4f:1e:cf:af:19:1e:9b:
7e:74:79:52:0b:9d:f5:50:5d:05:05:92:76:2e:7f:5d:85:e5:
33:a9:db:c0:df:06:5b:41:90:36:b3:ad:1e:89:e2:81:78:5a:
96:03:38:f3:fa:da:43:00:91:81:c4:ec:b1:a0:9d:dc:3b:bd:
e2:ba:76:c0:0a:da:bd:dd:70:7d:36:67:c5:a6:89:b9:98:1f:
30:33:8e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:45 2025 by rpki-client