Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/3RnR6v9PVeTcx79c3x_mN94N6VQ.roa
File: 3RnR6v9PVeTcx79c3x_mN94N6VQ.roa (raw, json)
Hash identifier: 6SC34FaX6WUA/bhhV5SS8TfMnwY5VsBQYT8blPTX3sA=
Subject key identifier: DD:19:D1:EA:FF:4F:55:E4:DC:C7:BF:5C:DF:1F:E6:37:DE:0D:E9:54
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 0185718C23D83F2ADF5B2B3C3F9E5984D709
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/3RnR6v9PVeTcx79c3x_mN94N6VQ.roa
Signing time: Mon 02 Jan 2023 08:14:47 +0000
ROA not before: Mon 02 Jan 2023 08:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44445
IP address blocks: 2a12:c6c1::/32 maxlen: 48
2a12:c6c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:23:d8:3f:2a:df:5b:2b:3c:3f:9e:59:84:d7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Jan 2 08:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd19d1eaff4f55e4dcc7bf5cdf1fe637de0de954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:76:a0:42:7a:4e:5a:4d:5b:40:92:07:bd:c4:
c4:b6:d5:fd:3b:9d:0e:31:6a:a4:23:86:a0:40:a6:
4a:0d:8d:6c:3a:d5:63:7d:28:b2:19:a9:8a:64:59:
d7:65:29:fe:d2:59:45:e8:47:49:05:1a:54:b6:7a:
e3:63:72:58:f6:f4:48:2c:b5:79:e9:09:a0:ac:06:
b8:87:92:86:d3:5e:f8:47:9b:b0:09:a2:bc:89:8c:
bd:b0:ea:07:67:20:9e:2f:06:cc:d2:a7:17:56:66:
66:51:93:f0:de:5e:3d:d7:37:ca:0f:fe:ec:9e:3a:
d3:67:28:ab:e9:75:72:9b:dc:c4:7b:93:89:50:2c:
e3:d7:7b:e6:cd:f3:06:f3:97:85:97:88:37:d8:2b:
d7:02:ab:f4:6d:b0:dd:24:de:06:c6:58:1f:de:91:
e0:12:eb:2e:88:d6:ce:d3:ca:40:ff:56:bd:75:4b:
64:93:9e:7a:5b:5b:7b:df:5e:08:6f:0b:9c:c7:ed:
61:8a:8a:78:49:be:38:2d:ee:d8:43:a6:ab:a0:55:
40:ae:e8:5b:37:b1:fe:c3:26:89:bd:4a:27:5c:3f:
99:8f:43:6f:32:1a:8f:87:34:f4:8d:63:46:aa:b3:
06:2e:6f:ea:9b:a2:0b:a8:8b:a1:ab:4c:49:32:c6:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:19:D1:EA:FF:4F:55:E4:DC:C7:BF:5C:DF:1F:E6:37:DE:0D:E9:54
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/3RnR6v9PVeTcx79c3x_mN94N6VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c6c0::/31
Signature Algorithm: sha256WithRSAEncryption
81:0f:cc:20:ee:92:85:d6:90:83:f6:86:b7:5e:92:06:9b:ec:
0e:98:6e:e6:32:43:c4:dc:e6:f9:b2:9d:b0:51:86:d6:5f:f6:
44:60:4f:d5:4f:0d:0d:54:f8:92:f5:c6:52:73:4a:76:3f:4b:
f6:ff:d9:9e:90:cf:7f:d2:99:36:06:1b:ab:11:cd:07:bc:7a:
31:aa:41:f5:b2:9d:c8:d7:ec:48:20:31:b3:8a:26:39:1c:fa:
22:11:25:61:cb:62:3f:b6:7d:24:d3:03:86:b3:75:04:9d:a8:
ec:0e:b3:e8:8d:02:15:09:ab:2c:1c:5a:07:b0:ac:b2:c7:4f:
cf:38:08:dc:28:4e:1f:c3:9b:48:b8:fb:03:f2:ae:c5:73:fe:
39:43:96:85:f3:10:9e:98:fc:40:ee:a1:7d:70:00:12:c6:24:
2e:90:96:11:0b:2a:ae:28:3c:fc:54:38:22:6f:c1:15:5d:8e:
52:1a:83:79:10:a7:ca:0a:77:14:0c:44:f1:22:2b:d5:60:44:
22:be:d2:20:a7:70:89:02:65:3b:4d:53:60:97:38:97:88:0a:
0d:79:ca:b8:75:bd:15:31:ae:f6:7d:70:e9:f9:4d:d5:07:4b:
4e:1c:c3:7f:2c:4f:db:12:dc:c2:6c:7d:6a:3c:b6:42:f0:64:
d4:fb:3f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:32 2025 by rpki-client