Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/svqS_e3B8fh2rp2BwQVd44OzXyA.roa
File: svqS_e3B8fh2rp2BwQVd44OzXyA.roa (raw, json)
Hash identifier: KVYZZoHxJGnqkYjjY+U3FkRniNMRR7Yjh8jUAEdOsvs=
Subject key identifier: B2:FA:92:FD:ED:C1:F1:F8:76:AE:9D:81:C1:05:5D:E3:83:B3:5F:20
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 04FF55E2
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/svqS_e3B8fh2rp2BwQVd44OzXyA.roa
Signing time: Fri 06 May 2022 07:17:39 +0000
ROA not before: Fri 06 May 2022 07:17:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34762
IP address blocks: 2a01:8107:fff0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83842530 (0x4ff55e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: May 6 07:17:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2fa92fdedc1f1f876ae9d81c1055de383b35f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:98:6c:b5:1b:0d:91:2e:61:c0:37:9f:3d:
bf:40:cc:e2:63:aa:0d:ab:fb:21:49:8a:1d:ee:22:
94:9e:54:5d:8f:0b:f3:15:4d:08:40:c2:46:48:43:
52:70:43:9c:04:2b:54:f8:43:a1:54:c2:36:5b:5a:
af:dc:f3:3f:38:d9:2f:ee:3e:a0:d7:1c:5a:f9:cf:
23:cc:a9:46:21:27:0a:87:6a:e0:36:fc:6b:bd:72:
2b:5f:9a:d0:6e:25:2f:a3:16:ab:77:a6:dd:85:c4:
d2:5d:52:79:f9:17:30:50:73:7d:fa:bb:d8:b2:19:
eb:6b:05:3c:0e:7a:ba:4d:b6:e6:31:3c:2e:77:b2:
7d:1a:0e:fc:2e:e2:51:d9:8a:6b:81:66:f2:0b:a3:
14:cf:b7:32:a9:e5:46:b2:ff:cc:d3:84:5c:9d:98:
b8:4a:f2:05:c7:b7:ce:96:ca:06:80:12:9e:6c:aa:
77:e0:0c:1a:f4:46:1f:87:a6:d3:8d:18:89:81:05:
f1:ca:eb:ce:e0:85:2b:88:85:7d:51:8d:e2:b3:7e:
0a:57:b4:bb:6b:b9:d2:56:9b:00:55:4a:17:be:e5:
59:6b:62:1a:53:d0:1d:31:e0:8e:1a:09:43:c3:d8:
f9:b9:fb:ea:5c:d8:ef:31:62:08:90:25:89:ff:ab:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FA:92:FD:ED:C1:F1:F8:76:AE:9D:81:C1:05:5D:E3:83:B3:5F:20
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/svqS_e3B8fh2rp2BwQVd44OzXyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:8107:fff0::/44
Signature Algorithm: sha256WithRSAEncryption
cb:de:66:38:e9:35:e7:61:ac:93:90:6c:08:1a:6b:c8:42:9e:
ce:ac:6c:1a:7c:5d:4a:d9:1e:6c:26:e7:86:1e:c1:b1:83:fa:
f5:76:b3:70:77:85:36:aa:7f:88:8b:4b:61:a2:de:65:56:66:
fb:c4:cc:67:8b:ea:2a:db:e0:16:47:c6:7a:8e:a4:c2:69:ff:
b8:d3:1d:51:b1:5f:6a:bc:5d:b9:e7:02:56:e4:3d:92:94:d6:
85:6a:c3:00:8a:0d:d2:a0:4d:a8:59:05:e6:15:3e:9c:b3:5f:
a2:67:44:e0:a4:f7:8e:2a:95:7b:61:f7:0f:3f:dd:e7:e5:0b:
de:f7:62:dd:2d:42:de:2e:a8:12:12:8e:e2:94:13:35:55:b5:
8b:ab:39:a9:16:b4:72:29:b6:4d:df:4d:53:f3:ce:3c:c2:bd:
fb:3e:d7:1a:36:d1:22:1e:09:0f:8c:cc:4f:64:cc:71:ad:92:
9d:e4:e8:88:e2:ea:b9:2b:f6:8f:e4:b0:e1:3a:30:f7:03:43:
67:d8:55:3e:66:c7:01:ec:b5:44:1d:a5:13:58:9e:e8:d8:cd:
52:97:4d:9e:94:26:aa:84:d6:31:35:8b:a6:e6:4a:76:2f:cd:
d8:91:f9:e6:a2:5a:20:37:41:3a:55:4e:a2:dd:a8:9e:7e:e9:
aa:02:d8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:40 2025 by rpki-client