Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/a-JAkg9wSO_d5dnXX2A4gLXNBGQ.roa
File: a-JAkg9wSO_d5dnXX2A4gLXNBGQ.roa (raw, json)
Hash identifier: ZiSiZPoao1JCoX2S/VXRDctOkvszXX4IZ3Y6+L7pZnc=
Subject key identifier: 6B:E2:40:92:0F:70:48:EF:DD:E5:D9:D7:5F:60:38:80:B5:CD:04:64
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 01856C6F0D049E1DEE0BEC780A151D68E197
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/a-JAkg9wSO_d5dnXX2A4gLXNBGQ.roa
Signing time: Sun 01 Jan 2023 08:24:55 +0000
ROA not before: Sun 01 Jan 2023 08:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211227
IP address blocks: 2a0e:46c4:1600::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:0d:04:9e:1d:ee:0b:ec:78:0a:15:1d:68:e1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 08:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6be240920f7048efdde5d9d75f603880b5cd0464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b0:4c:89:ac:fd:1d:59:6e:e3:62:c1:47:9a:
ac:59:1e:d0:bd:e1:5f:d3:4b:b6:4b:34:67:5e:50:
1d:c2:76:60:10:6a:01:ed:bf:26:b5:65:44:7f:56:
ec:3f:34:b8:8a:69:29:e1:a1:20:ef:1a:91:3d:b9:
e9:68:d6:c2:db:26:df:d6:ca:53:2d:f4:5b:83:cf:
85:de:ef:a8:19:02:90:d7:59:cc:64:5f:9a:08:82:
7b:19:98:31:62:48:d2:5f:e7:f1:c1:cd:0e:ba:bc:
17:6b:3d:57:ba:d1:de:ac:e6:9c:29:8c:40:3a:be:
87:93:96:42:80:c4:c3:03:5b:3e:c6:76:fa:62:4c:
cd:df:c2:76:7d:76:87:28:4b:ad:54:93:9c:c5:24:
6d:02:a3:51:0d:a0:16:6c:19:1f:d6:34:25:b0:62:
6c:a7:38:e9:84:f1:a4:17:12:f2:57:02:26:ab:70:
42:2f:ff:75:c8:e8:89:ba:a5:71:89:c2:19:80:a6:
5a:e2:3a:ba:01:10:34:f6:15:53:37:4b:1a:4c:aa:
5e:71:8f:f4:83:62:1a:5b:40:be:03:45:61:04:1d:
c8:cd:97:22:fa:a4:fc:24:e1:ad:64:9a:46:da:93:
d3:33:b8:4d:d5:e7:f5:04:1e:9e:89:bb:83:a3:f8:
b5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E2:40:92:0F:70:48:EF:DD:E5:D9:D7:5F:60:38:80:B5:CD:04:64
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/a-JAkg9wSO_d5dnXX2A4gLXNBGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:1600::/40
Signature Algorithm: sha256WithRSAEncryption
33:d3:f8:09:fb:86:33:d9:31:82:51:32:a3:38:7e:e5:30:dd:
33:50:9d:66:08:53:8f:d9:36:c1:80:7d:aa:f6:65:a4:5d:85:
5a:d6:8c:38:65:31:66:0d:8e:d9:4e:0d:ac:e1:ab:f2:e5:d4:
6d:6a:dd:38:26:a5:b5:7d:63:67:61:22:cc:c2:47:fa:03:d2:
d6:d1:ff:79:d5:04:d4:2a:24:dc:e0:03:80:56:ac:99:e0:d5:
33:3a:1d:dd:48:34:dd:ef:bf:57:e7:68:70:bd:1f:8b:52:cf:
0a:89:16:77:f1:5f:1a:53:ba:22:89:df:8f:49:af:3c:8d:ca:
06:57:ce:d7:88:a5:91:96:ed:b4:97:eb:63:85:4f:d0:c9:45:
fb:dd:9b:90:ca:fd:bf:fa:8c:10:4c:f6:1d:55:99:22:72:fa:
77:ec:82:da:7f:23:bf:16:92:f8:55:a5:f2:38:dc:4e:4b:30:
60:78:ae:65:bd:c8:80:10:8f:5b:c5:23:9e:73:73:9b:c5:d1:
9f:78:8a:ab:22:84:3b:79:20:4d:df:e2:36:ec:c6:f7:95:df:
40:b0:5e:ea:d9:6f:43:16:81:c6:2a:5b:20:f1:9d:04:96:1d:
34:69:c2:32:c7:2d:2e:31:d5:24:9a:24:3c:30:12:d6:aa:9b:
a3:9e:5e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:39 2025 by rpki-client