Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/DBXMriMK1R98-1vc_40OYuJQJ1I.roa
File: DBXMriMK1R98-1vc_40OYuJQJ1I.roa (raw, json)
Hash identifier: MBvRIdy5GeJBxMWFU3cTPoaqYp+Ggc7QljZygqou03U=
Subject key identifier: 0C:15:CC:AE:23:0A:D5:1F:7C:FB:5B:DC:FF:8D:0E:62:E2:50:27:52
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 22B70BC4
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/DBXMriMK1R98-1vc_40OYuJQJ1I.roa
Signing time: Mon 20 Jun 2022 09:37:44 +0000
ROA not before: Mon 20 Jun 2022 09:37:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1136
IP address blocks: 2a07:3500:1bc0::/48 maxlen: 48
2a07:3500:1b30::/48 maxlen: 48
2a07:3500:1b48::/48 maxlen: 48
2a07:3500:1020::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582421444 (0x22b70bc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jun 20 09:37:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c15ccae230ad51f7cfb5bdcff8d0e62e2502752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:e3:13:3b:c0:c4:3c:6d:31:9b:52:f9:f7:
38:7c:64:af:4a:38:54:33:e5:b0:a9:7a:61:ab:66:
14:68:88:12:f0:00:6b:69:bc:31:f6:44:90:37:8a:
ee:c1:9e:89:62:5f:ca:60:2e:dc:0d:7c:d2:e0:0f:
c5:07:73:28:85:d4:a4:98:00:52:ba:d9:5a:13:72:
96:9b:72:f6:b5:90:e7:c7:a0:4e:42:95:70:d5:16:
75:37:71:5c:14:5f:21:da:5b:80:10:33:74:eb:b4:
cc:f5:27:09:e7:73:f2:26:6a:99:93:83:25:cd:6d:
e0:b5:e6:3f:a0:b2:77:40:9f:3f:61:c2:4b:af:48:
ad:60:5b:bd:15:e1:01:2e:d5:aa:79:bc:1e:2c:85:
3b:eb:01:8c:16:fe:9e:dd:b4:9e:9e:d7:e1:6d:10:
ee:bd:5a:af:e2:c1:4a:cc:6e:6b:73:9d:43:86:82:
4f:24:26:9f:35:46:a5:26:7f:e1:7f:73:89:4b:6f:
9d:f7:32:96:2c:8a:50:df:1f:ce:44:32:0d:de:b1:
a3:ab:89:2d:3d:24:ec:97:cc:ce:d3:8d:d9:e7:4d:
a8:a0:af:76:38:ab:a5:6f:b8:a9:7b:53:8a:f0:2f:
e7:77:e9:dd:03:4e:cb:0b:be:52:84:f0:6e:14:c7:
04:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:15:CC:AE:23:0A:D5:1F:7C:FB:5B:DC:FF:8D:0E:62:E2:50:27:52
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/DBXMriMK1R98-1vc_40OYuJQJ1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1020::/48
2a07:3500:1b30::/48
2a07:3500:1b48::/48
2a07:3500:1bc0::/48
Signature Algorithm: sha256WithRSAEncryption
1b:0a:50:75:22:ae:7b:76:9f:ef:f7:b9:f8:20:12:8f:a0:9d:
76:b8:bf:4d:f7:ca:c9:db:d8:e2:02:a8:a4:8d:d8:7e:d6:34:
0d:2b:83:f2:35:ef:12:9b:40:6e:4d:cc:9a:44:45:e0:82:f9:
a4:55:01:60:d0:a5:ad:2c:c4:b5:b7:bd:94:ab:ab:77:e3:d6:
28:66:ec:d2:6f:80:97:2d:25:08:88:4d:20:8f:98:f4:d9:76:
3f:75:b0:4d:f9:78:80:fe:9e:06:42:2a:79:04:08:81:c1:e5:
1e:1e:78:ad:5f:b4:8a:5d:ef:93:36:58:b8:41:ea:ef:6a:33:
7e:ad:de:2e:1f:f7:cc:9b:6a:7a:8c:b5:c6:8b:c6:8e:0c:8c:
99:f8:5b:b7:d5:a9:87:e4:2d:39:65:eb:de:37:c5:a5:9d:34:
1b:14:44:d8:aa:4f:cc:2c:53:b9:e0:5a:0f:df:30:e4:32:cd:
b3:62:07:b3:63:d0:02:9d:25:a9:c8:61:e1:66:5f:ed:61:e4:
32:f0:f8:f7:f6:cf:89:88:94:42:c8:a4:33:22:8c:e0:5b:19:
7e:17:a6:c6:93:9f:59:62:49:c8:61:d8:f9:f3:c1:12:76:3a:
72:f4:e3:5c:5d:5d:54:c3:cf:6a:e8:a0:4b:98:dd:33:2c:9e:
1e:f4:3f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:23 2025 by rpki-client