Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/o-gO97nQm0kyZadH3iaFCHJ66hQ.roa
File: o-gO97nQm0kyZadH3iaFCHJ66hQ.roa (raw, json)
Hash identifier: 2kIxqw5ezLei6mHTjmc3UsGZGjTObCAqbVsjn9GYr4Q=
Subject key identifier: A3:E8:0E:F7:B9:D0:9B:49:32:65:A7:47:DE:26:85:08:72:7A:EA:14
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 0183D936E450DC2CD38B1E780CB68E80BAA7
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/o-gO97nQm0kyZadH3iaFCHJ66hQ.roa
Signing time: Sat 15 Oct 2022 01:16:36 +0000
ROA not before: Sat 15 Oct 2022 01:16:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399976
IP address blocks: 2a12:c6c7::/32 maxlen: 48
2a12:c6c6::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d9:36:e4:50:dc:2c:d3:8b:1e:78:0c:b6:8e:80:ba:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Oct 15 01:16:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3e80ef7b9d09b493265a747de268508727aea14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:9e:6a:9c:30:bd:0c:07:e6:82:46:f4:30:
39:98:6e:4b:bf:ee:77:b7:c2:58:32:2a:e3:2a:fd:
7f:27:ed:0c:e5:e9:81:eb:ae:2c:82:74:ff:aa:24:
ed:a6:df:bd:92:a4:06:77:8a:27:18:19:85:a3:a5:
fb:db:29:9a:27:2c:a8:c0:67:3f:90:15:43:27:f7:
45:72:ef:b2:67:d5:5a:77:b1:63:cd:36:94:92:43:
e5:f5:0e:e6:c2:28:f8:09:e0:1e:7e:ab:34:47:54:
55:f1:66:7d:3f:ea:17:33:3a:1f:73:09:c7:06:a4:
84:19:0c:a5:be:d7:28:be:36:07:6b:0c:09:c3:3a:
80:10:e7:a8:5b:0d:3f:e1:75:e9:ff:f7:99:cc:3e:
32:28:92:1d:f3:8f:81:0b:38:f6:b4:9d:85:30:93:
3a:23:cf:92:d3:64:64:e2:20:bb:4a:a2:a5:18:19:
cf:dc:59:d8:a1:4e:81:25:37:6c:53:c4:f0:68:95:
f9:40:8c:d5:eb:be:47:96:c5:14:db:93:e1:13:f1:
ef:30:8b:36:2e:45:b3:c2:b4:2b:8d:0d:65:81:14:
73:69:a9:57:be:44:ab:10:97:13:f0:1a:79:f1:f4:
78:72:ec:a0:59:f2:3d:58:93:4d:16:6b:be:76:2a:
cc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E8:0E:F7:B9:D0:9B:49:32:65:A7:47:DE:26:85:08:72:7A:EA:14
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/o-gO97nQm0kyZadH3iaFCHJ66hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c6c6::/31
Signature Algorithm: sha256WithRSAEncryption
6a:63:18:32:a4:2a:b4:84:83:d0:8f:c5:ea:a5:d3:ee:fb:f0:
8c:da:5f:73:92:e5:9b:35:23:08:56:d1:aa:7f:ff:0d:21:5f:
a7:6d:e0:06:c8:ae:1b:28:3d:68:c3:98:8f:a3:1c:4c:da:e5:
3a:3c:c7:1e:24:4c:a6:d6:0d:56:57:db:74:a0:8b:05:16:4d:
41:bb:64:8c:c4:b5:12:ab:c1:ac:34:1b:8d:fd:e7:22:72:23:
f9:43:46:af:6c:0f:4a:3d:b1:ef:ee:08:c7:7d:a3:74:55:4c:
9d:de:c0:6e:4b:e2:f2:62:f4:f0:c5:90:52:98:ed:6f:03:02:
7f:37:a2:40:82:5c:81:89:02:ab:0e:ae:ea:cf:df:49:13:88:
18:84:d8:95:7a:a7:db:48:ae:7c:23:64:4a:ac:59:09:ae:0f:
eb:05:2d:3d:3f:0b:7f:c4:13:e3:dd:d3:33:df:2b:de:d5:5c:
c1:e0:49:a0:59:85:6a:4b:8d:18:f7:fc:0b:68:4c:57:c7:2b:
8a:55:95:50:1b:a1:3b:0c:96:13:af:e5:8f:b6:7c:5a:56:9e:
16:79:71:d6:d1:88:0e:37:7b:59:f1:c0:8b:f7:b5:ae:42:2e:
55:59:89:7a:a5:23:ca:b7:69:43:34:10:f5:8a:a8:cc:ca:cf:
f1:47:1a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:42:50 2025 by rpki-client