Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/ouuAGdyU8AVg6IVsIV_DzO3HIbs.roa
File: ouuAGdyU8AVg6IVsIV_DzO3HIbs.roa (raw, json)
Hash identifier: xEouRCPZIJ8wF39TRfOO62FBXkRLixdXUEkZCrVz7tE=
Subject key identifier: A2:EB:80:19:DC:94:F0:05:60:E8:85:6C:21:5F:C3:CC:ED:C7:21:BB
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018920376B9A16AC5CE64B0C7C4771D08A1C
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/ouuAGdyU8AVg6IVsIV_DzO3HIbs.roa
Signing time: Tue 04 Jul 2023 09:24:10 +0000
ROA not before: Tue 04 Jul 2023 09:24:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29311
IP address blocks: 2a04:9a04::/32 maxlen: 36
2a07:3506:4c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:37:6b:9a:16:ac:5c:e6:4b:0c:7c:47:71:d0:8a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jul 4 09:24:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2eb8019dc94f00560e8856c215fc3ccedc721bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:dc:77:3e:ac:f3:ab:5a:d4:e8:2d:82:a1:
aa:ba:80:28:8f:b6:66:81:c2:3b:86:60:a6:24:f3:
2a:8e:15:be:ac:0a:31:db:16:17:dd:77:76:a2:0c:
b0:98:80:4c:41:83:b8:0d:e3:a0:1a:63:3b:c8:80:
6a:a2:9a:e0:d8:21:1a:c4:69:10:b2:d1:77:32:55:
93:0f:c9:d3:a9:11:15:9d:55:62:ea:b2:a7:77:ae:
6d:37:43:be:34:15:06:5a:94:90:17:9c:fb:17:33:
2c:af:2c:17:97:97:87:61:41:32:10:f4:17:3a:f5:
92:68:a4:23:39:84:e5:82:26:fb:67:63:39:56:5c:
6a:68:c7:a3:2c:78:3c:25:12:6a:b4:05:f6:99:08:
b7:0d:a0:4f:96:ad:9c:26:66:f2:e8:80:ac:04:cd:
2d:5a:56:22:ed:b0:88:11:d5:84:09:4e:0a:d8:b2:
74:23:c9:5a:e8:88:59:17:7d:0e:cd:fb:ea:7d:d9:
85:33:44:7e:4b:c5:62:67:86:a4:3d:cb:55:0a:4d:
f1:da:66:4a:d4:ed:9b:fa:7c:97:f1:d5:d5:d7:2b:
d7:49:0a:93:a3:3b:25:82:e2:68:0e:2a:93:f6:63:
42:d8:46:4c:e6:45:0f:cb:7d:1b:38:24:ed:41:51:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EB:80:19:DC:94:F0:05:60:E8:85:6C:21:5F:C3:CC:ED:C7:21:BB
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/ouuAGdyU8AVg6IVsIV_DzO3HIbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a04::/32
2a07:3506:4c::/48
Signature Algorithm: sha256WithRSAEncryption
69:24:37:62:48:ba:bc:1c:8a:aa:0d:b6:a2:63:17:6c:89:c2:
81:94:59:c0:ea:e7:56:63:9c:97:40:62:50:1b:4e:83:8f:78:
13:7c:b1:53:de:54:ad:ce:06:2b:98:45:ad:86:8e:f2:11:61:
ca:19:32:d0:2d:80:b0:0c:2d:cf:b5:56:45:f3:94:c3:b8:86:
bf:ad:94:58:cd:16:26:ba:3e:a1:60:cc:1b:a5:96:eb:69:f8:
b8:6f:f1:87:51:a8:25:6d:36:e4:fb:22:58:1d:33:4f:36:6e:
6b:ef:47:e2:47:08:ef:b6:ef:11:2f:e6:25:28:84:36:94:f2:
0b:83:c7:08:d3:36:75:af:1e:5c:dc:78:45:4f:54:78:f5:96:
53:c4:b6:df:f6:31:bf:3c:d9:c2:2b:6a:44:8c:04:6e:56:e0:
f6:cf:a5:f0:86:ea:51:fb:b4:7b:10:5a:c5:87:40:bb:01:73:
f7:b0:9c:23:57:e8:8b:f4:3f:42:d6:b1:a2:bb:2b:a6:ea:3a:
be:27:b4:de:9a:e5:c8:fa:60:a0:79:08:6c:07:b7:70:61:21:
ef:72:20:ea:98:11:1d:df:a7:31:8a:19:d8:ee:ed:0a:7c:95:
e9:ad:16:83:ea:a8:ac:4c:65:af:66:ab:bf:0b:6e:63:27:f1:
84:c7:5b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:09 2025 by rpki-client