Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/V7BqcYDuXzPyIgHgPV4yLQjGajY.roa
File: V7BqcYDuXzPyIgHgPV4yLQjGajY.roa (raw, json)
Hash identifier: 4zFLN4x0IJ56W0+xNYtF/EPoM3q/Y0/El2pGjDDyBX4=
Subject key identifier: 57:B0:6A:71:80:EE:5F:33:F2:22:01:E0:3D:5E:32:2D:08:C6:6A:36
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018571D7BD13C45D3A8A59F963AC65DE14F3
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/V7BqcYDuXzPyIgHgPV4yLQjGajY.roa
Signing time: Mon 02 Jan 2023 09:37:22 +0000
ROA not before: Mon 02 Jan 2023 09:37:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24595
IP address blocks: 2a04:9a01:1000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:bd:13:c4:5d:3a:8a:59:f9:63:ac:65:de:14:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 09:37:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57b06a7180ee5f33f22201e03d5e322d08c66a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:21:46:2e:46:b7:e4:60:e5:9f:f5:4d:e1:86:
c3:61:bf:8d:87:e7:95:f9:d9:8a:38:57:25:fb:e9:
33:45:24:64:9a:4f:fc:e3:50:01:4c:7b:39:ea:cf:
e8:ee:77:e1:27:db:f9:c9:66:15:82:f0:71:c5:b9:
97:87:d5:c4:79:67:c3:45:17:22:ed:25:79:bd:63:
4c:0c:3a:20:64:0c:51:a9:b2:84:2e:62:c2:4c:3f:
3e:e0:94:62:dc:e0:47:fa:4e:3b:15:16:e3:84:3d:
af:52:f2:fb:b2:02:02:46:a7:c2:46:f8:c7:38:54:
af:97:55:9e:75:57:8c:a4:5e:35:2c:3b:1a:d3:fb:
24:d4:cf:c8:0c:d9:4e:36:e6:2c:ee:7d:a4:6b:17:
f0:fc:39:2a:b6:6d:64:bd:d9:42:3a:c2:fb:a2:16:
34:39:7f:1e:7e:c8:a9:f5:11:23:ad:4e:62:a2:8d:
fd:ad:81:ea:97:34:3c:14:09:dd:0f:17:ae:b8:6f:
2a:ad:15:5f:ac:19:ad:7f:31:2a:e2:e4:24:94:86:
c2:00:bc:4d:fc:a3:2f:f1:f7:bd:76:50:ce:b0:7a:
36:f7:73:5e:a5:d6:76:6a:33:f9:2a:1d:94:55:3a:
fd:2a:0e:c3:b1:49:7d:18:5d:5c:49:73:bb:6f:3b:
fa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B0:6A:71:80:EE:5F:33:F2:22:01:E0:3D:5E:32:2D:08:C6:6A:36
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/V7BqcYDuXzPyIgHgPV4yLQjGajY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a01:1000::/36
Signature Algorithm: sha256WithRSAEncryption
98:25:fe:04:1d:80:65:54:f5:6c:09:2c:ce:62:1e:04:ac:7b:
a4:6a:01:1f:2b:e8:55:07:a3:8c:af:57:d1:52:47:1e:ba:f8:
69:ff:dc:a9:a0:7c:4b:50:d2:48:1b:c4:0e:da:14:d0:7c:b5:
95:a4:f7:8d:ec:8f:18:a9:8b:33:26:3f:59:43:09:82:ca:f2:
e7:26:c8:08:2b:0e:da:2a:41:26:5a:75:aa:54:dc:64:bd:65:
ed:61:cb:b1:b1:6c:7b:86:26:04:67:06:db:c8:43:30:86:7e:
16:8d:8b:d3:c6:00:1f:f3:55:a3:da:46:87:05:8c:22:b1:58:
21:c4:6b:31:80:2e:09:6c:bc:78:48:01:01:67:1a:23:23:13:
30:8d:4b:d1:5b:c5:a3:d2:88:0d:56:97:38:80:5e:89:a6:1e:
78:01:3c:8e:ff:1d:db:79:60:0b:7d:0d:a5:9a:f7:5f:38:48:
f7:2a:d3:f4:b8:6b:04:67:db:4a:33:d3:4d:84:74:5c:ab:63:
3f:1a:b5:9f:54:b2:a5:ec:cc:a0:12:76:fb:00:48:31:56:e0:
92:0f:75:8d:1e:e3:56:5e:d0:70:94:55:de:29:44:c1:de:1e:
b5:6a:62:8e:91:13:bc:ce:91:50:d1:fa:cf:f2:24:7b:99:59:
38:18:71:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:10 2025 by rpki-client