Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O2keBV48tAogasQnJuCv8HDwGH8.roa
File: O2keBV48tAogasQnJuCv8HDwGH8.roa (raw, json)
Hash identifier: 9+ynNf3TBKije8raZJGrMq3EJ8TnLUdqTMfsM5OhFZg=
Subject key identifier: 3B:69:1E:05:5E:3C:B4:0A:20:6A:C4:27:26:E0:AF:F0:70:F0:18:7F
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 34982A5A
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O2keBV48tAogasQnJuCv8HDwGH8.roa
Signing time: Sat 01 Jan 2022 08:58:04 +0000
ROA not before: Sat 01 Jan 2022 08:58:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25400
IP address blocks: 2001:2020::/31 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 882387546 (0x34982a5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Jan 1 08:58:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b691e055e3cb40a206ac42726e0aff070f0187f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:2f:d9:7c:e6:85:63:b0:b1:55:3b:d5:c1:
cc:e2:a8:b9:1d:15:1e:65:e0:22:4f:3a:24:d6:d2:
dc:e0:4b:48:d4:28:9d:2f:9c:09:37:af:60:d1:6e:
85:e9:07:f9:4a:73:0f:73:b4:28:2e:3f:f1:26:ca:
18:ab:ae:d1:9d:62:a2:2a:68:1c:28:28:27:00:0f:
60:2a:24:6a:64:54:f0:36:ee:79:f8:70:db:a9:3f:
1f:a8:93:d3:a5:de:04:9d:52:69:4a:29:c0:99:76:
66:ff:37:14:6b:21:b2:08:b0:2e:88:26:ef:62:d8:
84:c9:8a:55:e9:cd:74:87:ed:06:d4:70:75:ff:73:
9e:1f:ce:64:2f:29:04:0c:c4:c9:45:4f:ab:39:4b:
e3:bf:dc:eb:ae:1d:b3:1e:63:cb:2c:9b:c3:e5:60:
4a:4c:75:02:47:ed:1a:91:9f:5e:44:e6:c2:81:49:
5e:02:ad:6c:91:da:1b:a9:46:44:1b:5b:f8:2c:7a:
54:01:c8:d0:55:a1:69:d7:2a:14:35:36:e0:42:11:
0e:41:b7:0f:1e:db:bd:c5:38:bb:7d:22:6c:e5:fb:
af:fa:3f:a5:db:5c:73:c5:31:57:da:31:6a:a9:21:
93:a0:e3:2b:eb:dd:b7:b1:20:2a:0f:f8:d7:b2:18:
b1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:69:1E:05:5E:3C:B4:0A:20:6A:C4:27:26:E0:AF:F0:70:F0:18:7F
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O2keBV48tAogasQnJuCv8HDwGH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:2020::/31
Signature Algorithm: sha256WithRSAEncryption
7b:99:d7:dd:01:92:47:ba:75:7d:a2:ea:2d:1e:b5:38:0c:a7:
dc:ee:48:e2:f8:a7:a1:ad:ac:48:5e:09:40:5d:c6:de:77:e8:
1b:3a:02:86:7e:f1:99:7d:19:87:7a:37:0a:57:ae:94:fc:3a:
92:56:dd:91:2b:fe:42:06:df:8e:9c:26:36:d4:0d:a7:a2:72:
37:72:d4:96:fe:36:3f:f3:32:ed:8b:a2:e9:24:f2:de:b0:53:
66:66:fa:e5:a0:c8:e8:b2:f5:15:ac:bb:50:94:d3:85:3e:82:
70:e1:b5:b9:ff:9b:f4:af:9c:10:ce:c5:d8:89:63:39:46:7a:
17:b5:e4:2a:36:9f:8e:83:b3:c5:9e:93:2a:70:a5:d5:8b:35:
40:a9:f7:fa:27:8d:1b:89:3f:7b:81:12:db:7a:54:cc:ed:5b:
ca:5b:50:92:47:c0:2b:af:0a:62:37:fe:56:63:e4:b8:66:15:
13:59:c8:c6:78:8c:40:38:54:a4:7f:d1:30:7f:03:bd:a7:26:
f8:c8:bf:58:8d:e3:4b:5e:08:24:cb:0b:8d:26:e8:d8:48:38:
98:45:58:d5:74:11:6d:ab:97:ed:b1:15:53:03:bd:ad:9a:af:
b9:ad:9d:7b:ac:89:05:ab:d5:10:5d:f4:d8:fe:6c:34:38:a5:
37:42:e4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:22:53 2025 by rpki-client