Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/brriu88gale5ARkSpU90N3jaeWM.roa
File: brriu88gale5ARkSpU90N3jaeWM.roa (raw, json)
Hash identifier: 7wlOIMNl9gFvBt3d3MIonlL3MSp4O90U/CyNF35fC8Q=
Subject key identifier: 6E:BA:E2:BB:CF:20:6A:57:B9:01:19:12:A5:4F:74:37:78:DA:79:63
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 0183D936E3C269E7F831E82533583D0F00F8
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/brriu88gale5ARkSpU90N3jaeWM.roa
Signing time: Sat 15 Oct 2022 01:16:36 +0000
ROA not before: Sat 15 Oct 2022 01:16:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47316
IP address blocks: 2a12:c6c3::/32 maxlen: 48
2a12:c6c2::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d9:36:e3:c2:69:e7:f8:31:e8:25:33:58:3d:0f:00:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Oct 15 01:16:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ebae2bbcf206a57b9011912a54f743778da7963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b7:09:4b:72:8d:7d:9e:dc:2c:40:b0:17:44:
ad:a1:09:3c:15:f6:a2:0c:11:cf:66:07:b3:88:ca:
88:20:54:1b:3e:ad:f5:84:a1:d4:ab:5c:52:76:92:
94:e7:21:d2:29:00:fb:19:b6:1e:ee:d9:84:1d:a5:
b2:db:d2:a9:82:17:4a:15:77:c5:13:a8:a3:ac:2f:
e8:b3:ba:d4:2a:e3:54:f7:44:ac:5e:bd:ef:ca:f1:
69:f4:43:93:c9:34:a1:57:e9:49:0e:26:76:dc:af:
83:40:fe:a2:4c:c2:f7:af:90:a4:55:30:e5:80:b6:
14:0a:d0:ad:7f:21:9a:d8:d3:c5:89:0a:81:10:2f:
d2:b2:ae:a1:12:d7:21:01:91:72:c4:95:d9:4d:41:
4e:9e:09:b2:64:44:d3:9e:5d:ee:b4:fb:5a:00:6f:
85:09:e1:c0:53:9b:e9:8b:62:1a:86:c8:40:e0:96:
ba:60:d8:c9:f7:a4:05:5b:50:7c:64:66:33:ee:5a:
cd:34:14:d8:2e:83:5d:26:a0:82:4f:2a:9f:03:29:
b1:59:cc:ee:48:15:b3:7c:96:af:87:74:0b:a4:0e:
cd:04:df:fd:32:83:ac:86:ef:a0:17:17:77:3b:7d:
49:2d:bf:f9:d5:0b:b9:0b:b1:48:ca:0d:d2:a3:56:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BA:E2:BB:CF:20:6A:57:B9:01:19:12:A5:4F:74:37:78:DA:79:63
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/brriu88gale5ARkSpU90N3jaeWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c6c2::/31
Signature Algorithm: sha256WithRSAEncryption
4e:8e:3f:10:df:14:6f:6d:71:9a:d1:83:46:5e:9f:25:c0:a9:
c9:b0:1d:3f:9c:63:2f:70:f8:14:4f:52:fc:16:de:6c:1b:e2:
cd:6c:8b:02:56:ae:26:7e:97:c7:69:a9:1e:b8:8a:a2:4c:36:
da:9d:75:c8:b0:ea:cc:cd:d9:4e:55:32:1d:a0:57:65:8e:6c:
5a:f3:42:e2:62:d8:b3:ee:33:fc:b6:e9:64:0d:34:6f:84:32:
f1:89:4b:14:99:db:c3:71:c7:22:e9:a0:bd:04:61:f8:e6:89:
7f:79:1f:f9:1e:28:0c:52:cd:04:69:a9:23:06:14:b9:48:b4:
e6:8f:e0:e6:cb:3e:97:e2:3a:c6:6b:3a:0a:12:4a:ae:f5:38:
82:63:65:de:bd:0c:de:e1:83:76:fa:a5:6c:f5:e1:06:ad:88:
fd:ba:96:40:f5:32:52:fd:73:65:ad:41:73:50:13:bf:1a:cc:
80:6a:c1:2c:21:33:d1:06:12:90:9e:ac:1f:04:be:3f:43:3a:
91:46:13:41:a6:e7:6d:fc:dd:49:58:e2:9d:3c:9c:be:50:18:
84:09:06:53:b8:2c:cb:84:be:4d:92:27:60:3e:0e:94:9d:30:
17:36:88:89:67:8c:ef:a2:c7:35:40:d3:5e:cf:79:15:ae:68:
5a:05:38:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:41:28 2025 by rpki-client