Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/rKNdFedE6aatbVodHNvKaKKs7r8.roa
File: rKNdFedE6aatbVodHNvKaKKs7r8.roa (raw, json)
Hash identifier: FMnIoqvl0AbgIJvUZQICLS1ERrld0pAoYgrBh1a2Qec=
Subject key identifier: AC:A3:5D:15:E7:44:E9:A6:AD:6D:5A:1D:1C:DB:CA:68:A2:AC:EE:BF
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 01856C6F087797FBBB66A848D9991496CAE3
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/rKNdFedE6aatbVodHNvKaKKs7r8.roa
Signing time: Sun 01 Jan 2023 08:24:54 +0000
ROA not before: Sun 01 Jan 2023 08:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142597
IP address blocks: 2a0e:46c4:2e00::/40 maxlen: 48
2a0e:46c4:2c30::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:08:77:97:fb:bb:66:a8:48:d9:99:14:96:ca:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 08:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aca35d15e744e9a6ad6d5a1d1cdbca68a2aceebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:a1:45:16:b7:42:31:30:7b:c8:c2:f5:ac:
c1:d4:98:ce:ca:2e:c8:b1:fa:1c:3c:3a:fe:c9:cd:
83:12:44:d6:70:56:ff:37:05:e8:be:b5:f0:69:24:
b9:3c:62:70:25:e7:5b:04:d9:3b:04:22:6e:9e:48:
2a:1b:40:cf:b1:20:4f:be:dd:89:ed:bb:86:dd:d2:
96:13:14:65:b9:1f:4f:d2:5c:6f:fc:c5:d7:4b:04:
c2:1d:7c:ef:fe:90:e8:5b:d2:f9:1b:2b:aa:8a:f1:
e0:9f:b2:09:90:de:f0:9e:d0:9c:78:61:0a:02:51:
c6:6e:18:8b:32:33:1e:e7:20:0f:f5:bf:97:5b:c2:
1b:c3:26:b3:23:33:f6:aa:44:a6:b9:a8:48:5c:0c:
97:71:4a:68:ee:5a:fe:c6:b5:c6:5f:3d:22:fd:7a:
08:87:60:83:a9:9f:a0:24:96:7f:76:4f:11:1a:a2:
40:0d:73:14:65:ab:a9:b4:9d:11:7b:12:b7:de:27:
bd:50:82:2a:b7:86:b4:fc:a1:de:0d:60:fc:f2:0b:
38:16:10:7e:fa:cb:e6:cb:9f:9f:4e:82:f2:41:0d:
3b:68:b7:e3:aa:05:c4:7f:20:c7:74:06:39:bb:a3:
35:5f:c1:08:30:88:f8:d8:65:a1:05:cb:08:3b:ed:
da:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A3:5D:15:E7:44:E9:A6:AD:6D:5A:1D:1C:DB:CA:68:A2:AC:EE:BF
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/rKNdFedE6aatbVodHNvKaKKs7r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:2c30::/44
2a0e:46c4:2e00::/40
Signature Algorithm: sha256WithRSAEncryption
2a:c6:9e:f5:ee:b4:74:c3:fe:6c:37:45:43:c0:87:97:d7:80:
99:09:a4:00:a2:0a:4f:1c:4c:6f:f3:72:a6:3d:72:51:f4:6a:
93:ad:f0:c3:0d:81:e9:67:c1:17:4e:2d:47:1f:70:45:dd:e6:
a9:25:79:b9:f2:12:ea:b3:3e:6f:5f:14:02:69:d4:4e:bf:42:
31:0f:33:59:b9:85:da:ec:eb:cc:74:b1:74:33:70:9e:96:37:
2b:be:52:82:e6:ec:6a:63:1e:7f:56:f4:4a:77:c7:78:da:43:
0a:5c:a9:9a:f7:0c:38:34:40:76:4a:f7:9c:2a:db:0a:36:37:
35:32:77:9e:a9:60:f7:97:8b:a2:90:32:b0:5a:ab:e6:9e:e1:
7c:41:0a:ec:f4:5a:8f:3e:2b:d9:9f:98:e8:63:e9:81:79:42:
51:2e:6c:49:f3:50:9e:b6:c1:fb:d0:ba:8b:7b:99:1f:2a:64:
a0:8b:80:97:ed:3b:29:02:16:52:25:92:49:ea:f0:9f:31:da:
05:fc:aa:dd:94:67:af:a5:ff:12:25:0d:f1:9c:97:f5:3b:b3:
d5:d8:14:e0:8e:d3:e6:21:14:06:72:4a:8d:16:13:61:c2:d7:
da:3e:ee:59:68:06:99:c7:a9:fc:4f:43:e3:0a:8e:8c:66:74:
12:04:b6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:42 2025 by rpki-client