Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/dpFSX4XLrdQp93R2l8g_VtI0YAY.roa
File: dpFSX4XLrdQp93R2l8g_VtI0YAY.roa (raw, json)
Hash identifier: tjYDKxYcoHkTLgRLgDV3nRR8A/qReObBpt1FBKdrblg=
Subject key identifier: 76:91:52:5F:85:CB:AD:D4:29:F7:74:76:97:C8:3F:56:D2:34:60:06
Certificate issuer: /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial: 0A5BA283
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/dpFSX4XLrdQp93R2l8g_VtI0YAY.roa
Signing time: Sat 01 Jan 2022 06:57:17 +0000
ROA not before: Sat 01 Jan 2022 06:57:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200299
IP address blocks: 2a09:3a00:2000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173777539 (0xa5ba283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
Validity
Not Before: Jan 1 06:57:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7691525f85cbadd429f7747697c83f56d2346006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:be:a3:f1:02:78:da:4a:8c:81:ee:f9:20:4d:
fb:70:c8:be:49:a7:20:04:67:5f:19:7b:66:4c:11:
75:21:63:0b:14:3e:14:f9:cc:9e:e8:08:8b:b0:40:
79:36:ff:1d:7c:8e:96:67:b7:68:4c:b3:ab:1f:7d:
88:87:b8:68:51:4f:79:b8:6c:78:13:d2:f3:69:37:
43:9a:23:da:89:54:31:11:7f:37:9f:48:03:62:30:
7d:f8:d6:f0:84:16:47:58:c3:dc:23:1f:19:f8:2f:
d1:f0:ef:92:02:64:d8:10:43:8d:bc:8e:c0:69:ea:
43:e0:89:c2:2e:4f:fc:ca:c0:f2:d1:7e:ff:37:19:
14:b9:91:da:57:22:58:e1:73:19:67:9f:48:85:b9:
bd:a6:85:dd:e6:56:1e:a1:12:ff:6b:18:e7:7c:57:
da:67:eb:08:02:14:ef:2d:b0:92:2b:ac:16:79:c5:
56:fb:bf:8f:ae:81:c3:cc:0a:ae:c1:51:de:8e:c0:
1a:4c:67:0b:f7:d4:6a:82:94:17:c2:15:55:4d:52:
0b:5d:32:11:f4:92:e2:6b:b3:16:ff:6d:59:36:fd:
5a:70:39:e0:59:4d:50:cf:ac:50:95:68:b8:9b:7c:
f0:26:4f:73:95:99:71:ac:12:c7:31:bf:1c:d7:37:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:91:52:5F:85:CB:AD:D4:29:F7:74:76:97:C8:3F:56:D2:34:60:06
X509v3 Authority Key Identifier:
keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/dpFSX4XLrdQp93R2l8g_VtI0YAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3a00:2000::/48
Signature Algorithm: sha256WithRSAEncryption
21:02:77:ca:2a:02:6c:47:bd:98:4a:7c:f7:9f:21:49:3f:b7:
75:b6:e9:6d:26:c4:6f:ff:81:9f:e3:5d:99:ea:fa:22:62:5a:
ba:46:90:88:b3:fb:dc:86:5c:7c:d3:a5:bd:80:b3:b4:f0:19:
5d:ee:c5:87:70:80:fa:5f:6a:ae:7a:a4:45:fb:4b:ca:23:23:
25:0f:b1:e7:de:c2:43:3b:2a:4c:29:3a:f6:23:30:11:8d:40:
70:e2:7e:06:03:29:62:ee:aa:69:ae:5c:42:59:47:c8:3d:2f:
b2:ea:ca:9b:c8:9f:da:42:8e:37:75:8f:4e:1e:c0:a1:9c:f7:
db:d8:39:40:8e:e1:06:49:0c:b9:24:4d:e0:07:19:77:0e:96:
55:3f:ce:e9:08:1e:d9:df:df:ff:b0:d8:2c:b4:53:c8:6d:4a:
cd:19:d2:1f:1d:8e:5c:7c:04:ca:0d:5e:ab:25:73:47:83:6e:
c6:4e:20:e1:b9:69:52:74:70:a0:b8:db:49:9b:79:18:4c:b6:
9e:39:8c:e5:03:8b:ff:5f:a5:7f:27:13:34:18:65:72:d8:59:
bc:e4:64:e8:11:30:64:f5:b0:6b:9b:20:4f:74:3c:2f:b6:cf:
45:da:f3:9c:f0:dc:db:e1:14:cb:ad:20:5e:86:1b:41:23:e0:
88:85:0b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:59 2025 by rpki-client