Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ntTyKx2OLlKj1dJMctDdu9b4z0E.roa
File: ntTyKx2OLlKj1dJMctDdu9b4z0E.roa (raw, json)
Hash identifier: uBVptGl4+FW3xunnx9cwjLsVuSEc8HZJ65D8n0sQ7OE=
Subject key identifier: 9E:D4:F2:2B:1D:8E:2E:52:A3:D5:D2:4C:72:D0:DD:BB:D6:F8:CF:41
Certificate issuer: /CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Certificate serial: 060D40B9
Authority key identifier: 79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ntTyKx2OLlKj1dJMctDdu9b4z0E.roa
Signing time: Sat 01 Jan 2022 12:56:58 +0000
ROA not before: Sat 01 Jan 2022 12:56:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208633
IP address blocks: 2a0e:1dc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101531833 (0x60d40b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Validity
Not Before: Jan 1 12:56:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ed4f22b1d8e2e52a3d5d24c72d0ddbbd6f8cf41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:bf:ab:43:94:5b:75:48:4d:44:da:b0:2a:
52:86:b7:20:1e:b7:2c:6e:ac:7c:4c:4e:48:59:38:
64:2e:63:fa:df:c6:91:2f:56:00:87:3a:d0:7d:dd:
12:43:a9:0e:62:68:95:f4:5e:f0:62:35:e8:aa:e6:
d9:91:4f:4d:08:a1:5f:7a:b1:9e:93:59:ec:c1:9f:
1e:81:0c:18:d0:c8:39:3b:9e:1f:7b:b2:69:1b:9a:
76:05:ad:77:09:72:3f:c4:50:64:1a:a4:24:e5:64:
f2:7f:4a:a6:63:ee:94:ab:eb:07:b2:74:9f:ca:ed:
b9:e8:ef:32:52:a5:12:2d:3a:dc:c5:df:01:bb:53:
a3:32:c0:4c:82:a2:56:4f:4b:ed:4c:c1:06:41:6f:
e0:ea:bd:59:0e:f4:5e:a3:c7:14:9f:7c:5e:66:48:
a9:1d:ed:94:c4:78:9f:fc:10:45:4f:38:0e:40:21:
b5:af:8a:fa:3e:e7:a4:71:ac:d1:d7:e4:fc:71:10:
e3:f8:93:6b:e7:bd:f8:79:72:68:b5:9d:64:fd:d2:
55:54:30:47:05:21:57:5c:50:da:72:63:a2:3d:52:
61:9c:ab:0b:78:80:e1:17:98:d5:15:01:b1:c6:66:
64:ba:6c:13:48:f2:01:ae:38:14:69:52:08:61:aa:
73:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D4:F2:2B:1D:8E:2E:52:A3:D5:D2:4C:72:D0:DD:BB:D6:F8:CF:41
X509v3 Authority Key Identifier:
keyid:79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ntTyKx2OLlKj1dJMctDdu9b4z0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1dc0::/29
Signature Algorithm: sha256WithRSAEncryption
90:48:b1:d2:42:0a:f2:20:a2:83:4a:b7:e1:25:90:60:0e:57:
b5:03:6b:27:ac:db:1e:40:e7:57:64:9e:bc:0f:ac:cf:9c:1a:
9a:b1:52:a8:62:ed:96:63:ac:35:fa:d1:17:2c:ed:0c:80:15:
f9:a3:f0:2e:2e:f0:d2:7b:5f:b5:37:1b:fe:d5:1d:3f:cf:43:
2e:5e:5d:4f:47:13:15:48:04:4e:52:04:81:93:13:50:b2:21:
1d:08:20:f3:ef:76:0e:97:5f:b0:5d:ab:5a:80:1b:5d:68:2c:
3e:ce:67:77:ca:67:da:73:8d:61:91:55:b6:9c:81:b8:61:fa:
97:4b:84:93:10:89:3f:61:33:3a:00:11:b6:fd:ef:b2:1c:6f:
e0:9a:64:cf:3f:ca:01:6d:a9:7e:4f:1b:49:dc:d5:0a:05:38:
84:49:26:59:fc:67:4a:f3:1d:20:13:22:bf:59:cf:45:2c:83:
77:78:f7:74:3c:d3:8b:8a:e2:34:dc:7a:ef:56:0a:6f:0b:7a:
88:ff:9f:d6:9a:48:51:e9:5c:12:bd:14:76:13:b5:94:ba:33:
cc:68:66:fe:da:eb:86:36:00:39:f6:4e:3b:69:c4:94:89:18:
59:65:7f:e4:72:44:78:f2:24:ee:45:05:5e:a7:8d:92:04:1e:
88:9b:7c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:08:58 2025 by rpki-client