Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/krGPQdU6WAJUg2lAatBhfRrWDKw.roa
File: krGPQdU6WAJUg2lAatBhfRrWDKw.roa (raw, json)
Hash identifier: emSV7oVpI1vJ7M2uf7qvSQtgWfZYT7wQroUE2FRce3A=
Subject key identifier: 92:B1:8F:41:D5:3A:58:02:54:83:69:40:6A:D0:61:7D:1A:D6:0C:AC
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 01856F1DCA712085E8BB662B6AD910E5521C
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/krGPQdU6WAJUg2lAatBhfRrWDKw.roa
Signing time: Sun 01 Jan 2023 20:55:01 +0000
ROA not before: Sun 01 Jan 2023 20:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59542
IP address blocks: 2a02:a43f:9800::/37 maxlen: 37
2a02:a43f:9000::/37 maxlen: 37
2a02:a43f:9000::/36 maxlen: 36
2a02:a43f:f000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:ca:71:20:85:e8:bb:66:2b:6a:d9:10:e5:52:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Jan 1 20:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92b18f41d53a5802548369406ad0617d1ad60cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:ec:89:88:21:94:c4:aa:c0:0d:17:a8:71:
c8:a7:28:a3:e3:e4:88:e3:88:b3:45:74:4f:3f:97:
7f:7f:1a:42:e3:df:15:f9:e6:a4:40:73:f6:5e:82:
31:68:92:72:92:78:bc:c9:00:43:08:4b:02:70:b1:
1e:2b:ae:b3:19:eb:3a:71:6e:f5:6d:21:a9:a3:e6:
a1:47:76:ae:32:d2:dc:ea:c9:40:15:38:f4:53:08:
09:05:65:e5:78:2a:5d:e5:8a:bc:09:0c:d2:a2:c9:
58:66:19:2a:56:4d:92:aa:c9:a0:33:cf:03:ed:51:
3f:fd:7c:dd:ce:ee:0d:98:5e:07:cf:82:85:d4:5b:
be:82:e6:1e:37:23:65:5c:16:bd:96:36:80:3a:1e:
01:d4:cf:7b:b1:d4:ec:22:c0:4d:6d:1b:54:0d:52:
8c:4c:d6:6f:81:0b:53:3f:28:8d:6c:75:04:f0:62:
b1:52:45:a1:52:1a:e6:2e:c3:89:18:b5:95:a5:97:
7c:e6:ae:95:48:64:de:50:92:d0:12:66:91:56:90:
d6:55:e6:e3:08:61:a4:15:87:57:74:e3:e1:9b:e3:
ce:14:26:35:ea:27:88:4e:0f:7f:4c:7f:9d:ca:70:
82:23:fa:47:68:4e:e9:1f:68:b7:70:88:61:b4:4d:
af:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B1:8F:41:D5:3A:58:02:54:83:69:40:6A:D0:61:7D:1A:D6:0C:AC
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/krGPQdU6WAJUg2lAatBhfRrWDKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:a43f:9000::/36
2a02:a43f:f000::/36
Signature Algorithm: sha256WithRSAEncryption
09:33:70:b3:69:9f:f1:ce:6d:1b:7e:40:b6:5b:98:d9:3c:3e:
80:84:0f:e7:4d:5c:6f:6c:21:69:7d:64:79:8d:c7:82:61:34:
1b:14:54:34:ae:70:3a:60:82:f5:8f:ce:f4:75:c0:3f:57:79:
6d:0b:54:f1:75:de:59:d5:20:cb:9f:48:7d:20:19:30:46:56:
58:bd:dd:27:a5:5a:23:32:52:2f:48:0b:4b:80:51:32:49:8a:
80:8b:02:37:9b:ef:67:57:f8:ae:a8:82:04:f4:15:16:93:b8:
d4:28:31:b4:b2:ef:85:18:5a:5f:d2:59:1f:87:bd:2c:b4:2b:
dd:3a:bf:cd:78:17:6e:be:d2:38:e8:4e:fb:55:e3:f6:50:3f:
dd:0b:ce:7e:55:c5:5b:51:39:33:99:f7:d6:d0:49:a1:b4:d6:
65:59:4b:23:47:4d:98:62:47:5f:d9:a6:1d:a2:0c:f6:af:d3:
70:af:b9:1a:a6:da:87:9f:10:3c:af:20:d1:e2:39:32:af:83:
c6:78:e8:0a:f0:0c:cc:c9:44:07:42:1e:0e:bb:e3:3c:2a:33:
2a:01:42:77:08:72:5c:0c:92:f8:74:a1:2b:1b:6e:fb:01:7e:
35:5a:64:29:dd:12:cc:db:6f:f1:a8:e6:6a:9c:61:84:c4:9b:
d0:3c:2a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:16:06 2025 by rpki-client