Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/0XdQQmoPKjJSQ0spAY0_hy6yROk.roa
File: 0XdQQmoPKjJSQ0spAY0_hy6yROk.roa (raw, json)
Hash identifier: y9VTlb+JNEv07q4rOabeSUy/vlj5cL9dI4Ei9uC41wQ=
Subject key identifier: D1:77:50:42:6A:0F:2A:32:52:43:4B:29:01:8D:3F:87:2E:B2:44:E9
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 355D0FCF
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/0XdQQmoPKjJSQ0spAY0_hy6yROk.roa
Signing time: Sat 01 Jan 2022 16:10:38 +0000
ROA not before: Sat 01 Jan 2022 16:10:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50475
IP address blocks: 2a00:1908:e965::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895291343 (0x355d0fcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Jan 1 16:10:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d17750426a0f2a3252434b29018d3f872eb244e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:f3:59:3c:9c:97:8b:eb:9c:a6:c9:d2:4a:
61:52:5f:76:ab:2b:fd:f0:3a:0b:c1:61:e6:92:3c:
27:60:d9:2a:67:49:db:84:aa:d3:5d:32:d2:e3:af:
e4:77:54:c3:79:74:f5:d5:96:f4:8c:84:5c:d2:a1:
ca:ed:0a:ab:0b:03:67:3a:d8:f2:e9:82:e6:ef:74:
c2:d2:11:69:77:e4:78:50:78:56:09:d6:83:ce:7c:
7c:a9:eb:c9:c6:2c:cb:db:da:ad:03:1f:34:42:73:
52:67:7a:f2:c1:db:58:5f:15:a3:50:5a:13:64:e1:
4c:c4:14:2e:6a:b3:41:c0:48:90:44:dc:9a:a4:54:
22:3f:1b:95:0b:17:2f:41:3d:0f:05:3d:79:62:b3:
3b:41:c3:ce:14:d2:f7:36:3b:2b:17:4e:44:29:f4:
22:61:9c:51:6b:cd:dc:d0:2b:fa:28:88:0b:56:90:
62:fd:22:81:bd:ce:8e:ab:44:0b:6c:99:a9:3d:aa:
66:78:5e:0d:d7:4a:0e:eb:60:7a:c5:e4:ee:cb:f0:
c6:ea:67:b9:c6:29:68:90:ec:a2:a8:a0:77:ac:68:
e1:b2:9c:54:f1:a9:79:4c:30:ed:be:12:71:33:f7:
1b:4f:dd:9d:44:73:6c:e3:00:c7:4a:14:f9:62:d7:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:77:50:42:6A:0F:2A:32:52:43:4B:29:01:8D:3F:87:2E:B2:44:E9
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/0XdQQmoPKjJSQ0spAY0_hy6yROk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1908:e965::/48
Signature Algorithm: sha256WithRSAEncryption
0b:14:67:4d:eb:c7:a1:75:09:7f:10:c0:aa:c7:1f:c9:cc:ff:
bc:de:3e:ff:11:ba:7e:85:f9:96:1f:56:95:b1:d1:39:a2:6e:
c2:ce:16:9f:0d:d8:8c:18:f6:08:70:20:82:36:53:2c:c2:e0:
0c:ee:dc:14:d7:d6:ed:66:f5:30:fd:e4:23:59:b4:e2:f5:05:
97:0f:c3:85:bf:48:1c:6a:44:58:a6:73:d0:d4:f9:f7:bb:4b:
b0:ee:a8:be:36:97:64:07:ac:80:2e:6e:77:33:e4:0a:c6:95:
9e:8c:95:05:cc:2f:62:5f:85:ce:97:8d:8a:dd:ad:9e:0a:2f:
8d:65:18:4f:44:ba:bd:e3:d0:03:b2:1c:99:b3:2b:3e:8c:25:
ad:f7:bb:d4:0e:92:85:00:79:03:c2:29:7d:63:0f:d7:d9:b1:
4f:26:6a:4c:95:6c:7a:20:a9:94:42:2a:74:26:e0:91:ec:7b:
89:1a:78:c5:1d:93:26:4c:7a:a2:c1:90:49:d8:e3:97:d5:ac:
ee:80:5b:82:68:35:04:5b:85:5e:09:76:ff:42:47:e8:be:76:
bf:e0:0d:56:39:42:6d:5f:df:8b:a1:97:95:df:50:09:58:d4:
14:cb:91:63:f9:7e:66:3b:d1:b1:1e:75:73:c1:69:f3:e5:d2:
9d:91:0d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:37 2025 by rpki-client