Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/r_DOwK_T1lOwaVxgpX5ZjLNwse0.roa
File: r_DOwK_T1lOwaVxgpX5ZjLNwse0.roa (raw, json)
Hash identifier: 30aCygqyvpMO/x8ZABSQDhG0li7erhaclgjgmFsGQdQ=
Subject key identifier: AF:F0:CE:C0:AF:D3:D6:53:B0:69:5C:60:A5:7E:59:8C:B3:70:B1:ED
Certificate issuer: /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Certificate serial: 0185704BBCA433AFCE3E8F9B41964F3AF5F7
Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/r_DOwK_T1lOwaVxgpX5ZjLNwse0.roa
Signing time: Mon 02 Jan 2023 02:24:49 +0000
ROA not before: Mon 02 Jan 2023 02:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35205
IP address blocks: 2a05:3700::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:bc:a4:33:af:ce:3e:8f:9b:41:96:4f:3a:f5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Validity
Not Before: Jan 2 02:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aff0cec0afd3d653b0695c60a57e598cb370b1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:b6:17:dd:35:be:b2:c1:e4:3f:09:fb:70:
8b:3a:a5:dc:37:4c:d2:05:de:eb:f1:ba:3b:a4:5b:
0b:3b:09:81:f9:94:c1:b3:d3:8d:20:1f:dd:d6:46:
07:87:c3:b2:0d:e1:15:c3:c4:5e:5c:03:46:71:f5:
e0:e8:5c:18:5d:59:b9:8d:ba:71:f3:1f:f4:70:bb:
b0:53:ee:d7:db:51:e5:00:70:19:d1:54:24:ce:2c:
f4:9b:d7:56:5a:4d:a7:95:4d:91:60:b2:ba:13:14:
d7:e7:94:b5:10:52:d2:91:50:a0:80:66:b3:7d:c9:
81:4f:aa:d0:ef:b0:ce:e1:83:39:20:a2:e4:57:39:
1d:c4:96:63:f5:ee:d9:4a:35:85:d1:14:88:ce:a2:
aa:d4:41:33:65:9b:0f:fb:22:61:25:42:08:ae:c9:
b7:c8:0d:76:72:d1:68:34:f6:71:67:00:f4:2c:f5:
fb:7d:ec:b5:c2:87:42:61:0b:3a:8b:88:73:32:31:
77:ff:7c:6d:90:f4:42:53:96:42:37:fe:3b:94:5b:
9e:77:e3:b1:55:bd:d4:59:ba:4d:83:22:88:53:7f:
8e:c6:11:86:52:13:67:d5:f9:34:cb:1d:e6:48:c1:
df:3e:88:31:dc:d8:d9:21:37:8a:e4:f3:29:71:d0:
5b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F0:CE:C0:AF:D3:D6:53:B0:69:5C:60:A5:7E:59:8C:B3:70:B1:ED
X509v3 Authority Key Identifier:
keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/r_DOwK_T1lOwaVxgpX5ZjLNwse0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:3700::/29
Signature Algorithm: sha256WithRSAEncryption
2f:48:94:e4:fd:f1:17:8a:d0:85:f6:89:b2:8a:85:d1:81:68:
93:93:52:49:54:1a:00:d7:75:14:90:f3:9d:3b:be:38:28:46:
b7:9d:e1:a5:2f:c5:80:07:2b:09:d9:a8:d3:8d:09:1e:27:ad:
af:d7:72:47:df:05:40:35:33:7d:4a:f0:a7:8a:89:61:af:ec:
c8:cf:b4:5f:60:e6:26:e0:55:02:68:2e:17:1a:e1:7e:d6:1e:
05:fa:70:b0:eb:06:cd:8f:fa:00:da:ab:af:89:f0:5f:32:9e:
02:95:84:f4:95:01:6c:da:e2:61:b5:14:f2:a6:c1:f0:16:9d:
f3:98:5e:b4:e1:b6:a4:50:d1:e4:1c:0d:c5:02:c6:93:3f:d4:
af:01:70:8e:f7:dd:90:10:87:06:40:ef:2f:ac:24:88:89:95:
ae:66:b0:13:ea:93:2d:6e:4d:2e:f2:4c:1f:96:c1:5c:99:35:
a1:b0:57:02:f0:e5:e7:29:c6:94:77:8f:4f:e8:e2:8e:6d:f5:
b6:29:c3:e0:93:e6:f6:08:08:f1:8e:b9:b8:67:36:e4:22:9d:
36:c5:1b:4b:78:88:ab:02:0b:6a:38:e0:cb:61:d9:e8:54:6b:
48:b4:b4:1e:33:77:5c:78:80:31:35:ab:d4:ad:c8:7d:a2:4f:
f9:a0:92:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:59 2025 by rpki-client