Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/apS6unb-O7aJhEs_BzkVvAGsUEU.roa
File: apS6unb-O7aJhEs_BzkVvAGsUEU.roa (raw, json)
Hash identifier: oaw0YRPq7Fl+gX6GFC1JAY7l1kCCxeDnR97Ng2QpdPc=
Subject key identifier: 6A:94:BA:BA:76:FE:3B:B6:89:84:4B:3F:07:39:15:BC:01:AC:50:45
Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial: 1B30AEDD
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/apS6unb-O7aJhEs_BzkVvAGsUEU.roa
Signing time: Sat 01 Jan 2022 10:58:50 +0000
ROA not before: Sat 01 Jan 2022 10:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197872
IP address blocks: 2a00:ad40:20::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456175325 (0x1b30aedd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Validity
Not Before: Jan 1 10:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a94baba76fe3bb689844b3f073915bc01ac5045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:6d:9e:de:20:73:f6:20:11:8a:87:d1:f0:
ee:92:c0:9b:c3:3c:14:16:9c:af:67:7f:49:df:55:
14:eb:ab:dd:29:2f:4a:38:39:33:3b:95:45:31:05:
ed:cf:a1:e3:95:9a:b9:2d:d7:71:50:27:ba:e2:4d:
fe:37:5f:d7:34:6a:cc:61:0b:cd:87:f8:97:31:3a:
78:b0:0a:d2:62:db:69:c9:f8:5a:3d:e5:83:a8:5f:
3c:16:ed:9e:1a:53:19:b1:6c:8d:04:34:90:b9:2f:
45:3c:b6:06:41:a4:08:98:e4:b6:7d:ad:b7:e5:7c:
41:b3:78:41:78:06:bf:ca:f6:07:28:f3:13:4e:88:
eb:49:ee:9f:27:a0:28:c3:e2:cf:9a:b0:9a:94:7e:
92:b6:80:d2:48:3d:4c:66:5d:b5:f1:e0:42:60:fc:
ea:c9:1e:47:70:1e:d5:fd:05:24:0e:38:8c:ac:10:
7d:1d:a9:5a:e0:e5:32:93:75:20:7f:bc:1f:31:be:
a5:9c:e8:ee:a9:94:5b:38:0d:40:9a:75:8b:0e:4e:
86:ef:73:2a:0f:91:0c:e2:ff:fb:dc:3a:06:5e:b4:
ff:c3:98:6e:93:6e:ca:f0:f6:25:38:17:d5:f9:05:
ca:81:9c:d6:d6:82:b2:d2:0a:84:71:92:3a:ac:fa:
bb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:94:BA:BA:76:FE:3B:B6:89:84:4B:3F:07:39:15:BC:01:AC:50:45
X509v3 Authority Key Identifier:
keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/apS6unb-O7aJhEs_BzkVvAGsUEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ad40:20::/44
Signature Algorithm: sha256WithRSAEncryption
52:43:5b:c0:c2:24:03:0e:4f:a9:24:2a:0f:f1:99:37:98:66:
35:98:60:76:f4:af:5f:a9:c6:09:47:5b:2b:db:57:26:40:32:
8e:b4:20:48:f9:34:ab:2f:26:7d:81:73:91:5f:ed:da:52:8e:
92:fd:f4:cb:67:88:75:36:4a:e1:ed:35:d9:20:d7:0f:d9:22:
3e:dc:8f:67:af:60:e0:f0:db:d1:a3:c3:1d:bc:d0:be:bc:d1:
69:ff:23:6d:1e:da:5f:c6:27:ee:60:6a:a2:97:36:3d:3d:49:
86:fb:aa:eb:cb:6a:20:55:98:2d:ac:84:7c:ea:3f:a1:a3:f6:
05:cb:d0:ca:2f:34:e8:d8:30:36:17:6a:ec:b5:bf:04:7b:0f:
ce:87:5d:6e:92:04:48:ce:0f:43:46:49:5f:e1:fd:8c:74:db:
6f:2b:9e:e0:30:e6:e8:79:2c:7b:40:59:7c:cb:28:ed:a3:fd:
b2:c8:8a:97:f6:c2:43:2b:d4:c8:14:dd:cf:9b:9c:70:d0:bc:
49:7e:b8:e1:95:07:13:2d:4b:bb:fc:19:a5:cd:ae:18:6d:d6:
04:32:e7:29:eb:11:33:4f:90:e9:e2:61:f8:2a:51:1a:cd:d1:
8a:f2:bc:e6:8e:f1:1a:23:f9:bc:a9:93:00:64:58:d9:c2:bf:
ad:4d:28:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:43:10 2025 by rpki-client