Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/QoyqxMtmdfGwz36DR28bG_WZLuM.roa
File: QoyqxMtmdfGwz36DR28bG_WZLuM.roa (raw, json)
Hash identifier: vRVAF1pcrUjfbi6l0POZtgQeDgh259a63JjRKphoemo=
Subject key identifier: 42:8C:AA:C4:CB:66:75:F1:B0:CF:7E:83:47:6F:1B:1B:F5:99:2E:E3
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 083084EF
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/QoyqxMtmdfGwz36DR28bG_WZLuM.roa
Signing time: Sat 01 Jan 2022 04:58:51 +0000
ROA not before: Sat 01 Jan 2022 04:58:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31605
IP address blocks: 2a0f:56c4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137397487 (0x83084ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 1 04:58:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=428caac4cb6675f1b0cf7e83476f1b1bf5992ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:ac:4b:05:27:58:fd:3a:b4:67:aa:4e:48:
d4:98:32:d9:2b:02:4f:24:0b:69:4b:9f:3c:d2:b5:
89:65:2f:87:61:71:b8:46:6a:92:10:a1:2e:ef:97:
da:a9:25:e0:6c:d2:1c:dc:93:5e:62:d6:98:f9:f8:
8e:ab:9b:d7:ee:72:1a:9b:1e:59:f5:01:4e:9f:fc:
81:68:43:cb:86:31:e5:f5:3f:8f:49:46:35:c6:ed:
8d:2d:38:7e:af:05:25:0d:9a:17:39:da:ff:08:4f:
b3:74:4d:96:b5:f7:97:0f:d7:dc:ab:69:9a:64:bc:
b5:8b:97:24:ae:0a:b4:dd:23:1f:d6:4b:0b:a3:62:
ab:7c:95:84:12:3a:1d:55:c2:c7:70:07:dc:d6:45:
6b:02:89:9c:58:52:1a:2f:61:e2:6c:f4:80:ca:d8:
db:be:ed:68:f5:53:ef:bd:09:35:50:60:3c:72:7c:
18:81:5a:9e:c8:f9:e2:0f:f1:57:9a:75:fe:37:3f:
b3:18:ea:b4:63:0e:df:40:fa:24:7b:07:eb:4c:2e:
a1:5a:de:ad:6b:5d:71:79:03:cf:fe:1b:04:c1:b1:
2f:fb:0d:21:ff:37:7f:23:56:9f:d2:34:d6:5a:ff:
d1:e3:9a:e3:a3:87:cf:8d:56:dd:ed:6d:ac:bc:5a:
2f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8C:AA:C4:CB:66:75:F1:B0:CF:7E:83:47:6F:1B:1B:F5:99:2E:E3
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/QoyqxMtmdfGwz36DR28bG_WZLuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:56c4::/48
Signature Algorithm: sha256WithRSAEncryption
5c:ea:93:57:ef:e1:f3:b9:0e:2f:77:0e:ec:d4:e7:bf:4c:21:
88:2e:22:a3:ba:c1:d8:ff:bb:ce:90:f8:77:cd:80:8c:b3:3c:
4f:c5:86:54:1c:4e:39:68:d6:c7:be:88:92:c8:36:be:46:27:
c7:17:ac:e4:6d:3a:ce:d1:7c:0b:ff:96:f6:88:5b:18:78:dd:
e7:bf:7b:88:53:a8:82:ca:1e:b8:f3:1a:cd:3a:73:4c:a4:7d:
22:be:94:8f:c8:86:48:ef:32:7b:e1:ff:ef:46:8b:a2:e7:c0:
19:0d:84:c6:f8:5e:f0:59:fc:c5:05:0d:50:f1:f6:31:71:99:
0c:f9:5c:86:4d:ad:68:8d:21:e1:45:d2:b8:ae:a0:ad:d2:df:
47:1e:15:5f:f1:9f:1b:b3:28:27:56:9c:c7:3b:04:ee:20:3f:
8c:38:63:51:31:b3:c4:57:27:95:c5:da:9c:3a:f6:38:7c:f2:
6e:aa:24:60:1b:fc:ca:6c:1b:2e:d4:cd:24:b2:c6:35:32:02:
14:f2:ff:cd:81:bf:ef:8f:ef:7c:e4:24:65:2a:54:8e:ef:37:
3b:ab:1f:e6:0a:39:31:f8:10:13:14:5f:2a:d7:61:9a:02:f3:
af:bf:c4:0e:1c:d0:43:a8:98:97:92:42:cf:53:ba:4c:6b:16:
32:83:7a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:31 2025 by rpki-client