Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/lYu1vs6ny4HBwPuTIKaoRHapwK4.roa
File: lYu1vs6ny4HBwPuTIKaoRHapwK4.roa (raw, json)
Hash identifier: jSGVrrY4ETWhamVS8w5E+dpElhjBS038lX7hgk6MW1k=
Subject key identifier: 95:8B:B5:BE:CE:A7:CB:81:C1:C0:FB:93:20:A6:A8:44:76:A9:C0:AE
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018571D7BC7BDB500C422D0461EF47932478
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/lYu1vs6ny4HBwPuTIKaoRHapwK4.roa
Signing time: Mon 02 Jan 2023 09:37:21 +0000
ROA not before: Mon 02 Jan 2023 09:37:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13127
IP address blocks: 2a07:3501:1081::/48 maxlen: 48
2a07:3501:1080::/48 maxlen: 48
2a04:9a00:1118::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:bc:7b:db:50:0c:42:2d:04:61:ef:47:93:24:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 09:37:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=958bb5becea7cb81c1c0fb9320a6a84476a9c0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:79:80:a0:3b:12:d9:0f:0d:57:9a:3a:e2:54:
45:66:79:f5:85:09:00:87:99:ca:17:10:28:76:bc:
8b:72:09:af:d4:03:7b:db:ba:84:8f:7f:33:28:d8:
e1:3c:de:6e:55:04:9d:50:e0:cc:b1:f2:39:0d:5e:
44:ec:1d:c1:f3:0d:16:67:2f:8f:56:07:01:73:81:
11:06:e1:b9:9e:89:c0:82:b2:59:84:7d:74:37:39:
4d:4f:be:43:88:ba:2e:35:49:b4:7d:e2:6f:7a:ed:
c6:fe:e4:51:43:3a:93:5a:4a:c5:6d:93:e3:01:b0:
0c:84:59:19:49:5c:af:24:5a:a4:04:a6:4e:9f:f5:
69:1a:b2:bb:b9:3e:f0:de:c7:6f:24:44:67:5b:95:
99:c0:a0:11:6b:e7:8b:32:6c:31:3d:35:93:12:fa:
98:8d:42:4a:15:83:1c:a4:93:6c:8d:a0:5a:91:c2:
13:fc:86:50:06:64:07:95:ba:d6:97:2a:de:45:93:
13:f7:fd:ec:14:e5:7d:94:44:d2:c3:96:e5:50:b0:
da:da:29:70:b8:29:1b:e9:c8:09:05:1c:66:ba:56:
29:bc:49:5c:79:c4:de:31:83:df:4b:27:63:5a:4d:
d0:d2:5f:7c:aa:5b:ba:c1:0b:7b:ca:f5:eb:69:74:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8B:B5:BE:CE:A7:CB:81:C1:C0:FB:93:20:A6:A8:44:76:A9:C0:AE
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/lYu1vs6ny4HBwPuTIKaoRHapwK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a00:1118::/48
2a07:3501:1080::/47
Signature Algorithm: sha256WithRSAEncryption
ba:bc:da:69:fc:ef:d6:64:33:0f:84:6e:52:be:af:11:ab:79:
b7:d6:5d:5d:94:47:1b:2d:04:f4:5e:dc:4e:e2:e7:34:9c:c0:
92:73:28:ef:22:7c:92:9d:88:8b:15:c3:8f:70:e8:3f:78:a5:
5c:ee:5d:a2:eb:d6:4a:72:bf:d9:1b:d7:b8:3d:dc:c4:34:78:
fc:45:11:da:bd:82:80:5a:8e:0e:4f:c8:3e:31:79:08:8d:28:
8a:70:da:5f:46:b5:09:38:fc:46:d1:f8:09:fb:38:47:ed:36:
a0:9b:9e:1f:fb:5b:9e:59:e0:a0:8c:ac:5b:f6:c9:f9:85:6d:
62:63:40:d3:46:0d:94:4e:09:eb:e6:b4:23:e4:f6:d9:42:b1:
03:11:be:02:bc:5e:15:69:72:8a:7e:3e:40:fa:60:b0:19:12:
ba:2e:89:4b:af:d2:e8:e2:09:d0:b1:02:f6:63:35:7a:57:10:
ee:fe:fc:30:7b:fe:a6:a7:a1:25:5a:17:7e:94:44:e9:4e:be:
57:4f:a5:2d:bc:5d:2c:d7:54:4d:92:04:a5:2a:a9:95:e4:2c:
6d:bc:ef:9a:6f:89:ec:69:c5:55:b6:7e:65:6e:fe:ab:58:36:
80:02:82:96:c9:d5:4e:23:43:db:e3:72:64:37:c9:86:c0:9f:
d0:ad:a5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:44 2025 by rpki-client