Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/DpVzVFjOVHML9utI6xdZgbvVYz4.roa
File: DpVzVFjOVHML9utI6xdZgbvVYz4.roa (raw, json)
Hash identifier: YVUoOEL7VccKGsVx65X0JNIMRKBZLysj/qOyRrmpPSY=
Subject key identifier: 0E:95:73:54:58:CE:54:73:0B:F6:EB:48:EB:17:59:81:BB:D5:63:3E
Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial: 1B2F418D
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/DpVzVFjOVHML9utI6xdZgbvVYz4.roa
Signing time: Sat 01 Jan 2022 10:58:50 +0000
ROA not before: Sat 01 Jan 2022 10:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57052
IP address blocks: 2a00:ad40:10::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456081805 (0x1b2f418d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Validity
Not Before: Jan 1 10:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e95735458ce54730bf6eb48eb175981bbd5633e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:da:41:71:1d:4b:f2:c5:99:f2:91:b6:16:b9:
aa:30:23:e6:a8:90:fa:a7:d7:1e:2d:14:c7:f6:ef:
ac:d3:34:d7:14:9c:5f:d9:01:e8:cd:20:96:ff:9f:
6b:4c:71:c2:d5:c0:87:de:18:18:8a:e8:b9:27:7f:
a5:37:eb:29:99:89:9f:cb:fc:eb:9f:5a:9b:3c:24:
a0:fb:cd:8a:43:f6:81:b2:c2:cb:2d:43:46:97:ed:
51:16:08:f9:6e:21:00:64:20:bd:5c:ba:da:de:fe:
f3:ce:5a:7b:47:bc:16:7d:67:13:24:df:00:e5:38:
dd:22:bb:c6:06:50:d9:69:6d:ba:2e:f6:43:4e:71:
a3:92:5f:45:ad:21:50:25:07:a3:03:4a:48:4f:01:
ef:93:76:69:d8:1c:b4:0a:61:76:3c:a3:6d:72:8a:
c3:80:1b:c6:23:52:94:2a:29:9c:42:3e:7c:f1:f8:
74:e5:e3:d7:e7:8a:8f:5c:5c:5d:45:37:3c:e1:61:
d5:36:3a:05:d7:e6:cb:ae:0d:a1:e6:76:37:4b:33:
42:50:ab:60:9e:ce:b1:23:cd:01:a2:a0:3b:99:62:
26:dc:82:54:2b:3d:20:2a:f6:19:2f:ed:37:d1:7f:
36:22:93:0f:c2:a6:d1:0b:d4:57:b7:65:af:42:de:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:95:73:54:58:CE:54:73:0B:F6:EB:48:EB:17:59:81:BB:D5:63:3E
X509v3 Authority Key Identifier:
keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/DpVzVFjOVHML9utI6xdZgbvVYz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ad40:10::/44
Signature Algorithm: sha256WithRSAEncryption
66:30:51:ea:fb:69:65:bd:e9:b9:a9:e7:96:c3:33:f6:1a:fd:
63:56:83:59:bc:f1:8d:57:bd:03:a8:3c:3f:9b:06:09:f0:b9:
f6:96:6d:33:f6:fb:7d:f7:ff:86:0c:fb:cc:54:6e:20:ab:fa:
1e:bb:ee:eb:2e:09:b8:76:d8:ae:80:56:a7:cf:9d:3f:dd:96:
28:24:fd:b2:4d:6d:de:3e:1b:1d:b2:69:91:34:93:6f:d7:86:
b2:74:2e:09:86:d0:dc:3d:43:79:73:4b:af:0e:b7:b0:7a:51:
7a:6f:6a:c3:20:06:a0:03:19:34:16:f7:ba:ef:42:60:b6:08:
31:db:9e:01:21:21:37:3c:fc:1c:b5:d1:fc:89:d2:f6:6b:5d:
1d:b4:0b:84:26:c2:d8:6d:e0:29:22:9e:d1:7c:33:d5:ba:68:
7d:7b:e3:81:eb:fc:7e:8e:08:76:af:ad:ac:9b:0e:70:22:c6:
17:84:ad:20:e2:cf:e6:6f:c4:65:3f:d8:74:39:6a:09:50:29:
ad:d0:5c:08:c0:4a:90:08:7e:b4:0b:9c:cd:a1:6e:07:b8:93:
87:26:5a:3f:55:3d:30:7c:d0:85:78:64:17:4d:67:8e:df:30:
fe:50:45:95:46:bb:e2:16:ca:3c:67:29:fd:6c:df:37:2d:e9:
18:15:6b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:05:20 2025 by rpki-client