Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/p3neAln2-TS8CA5F36BqsJ2W1_A.roa
File: p3neAln2-TS8CA5F36BqsJ2W1_A.roa (raw, json)
Hash identifier: Tpd/6dWOuXSw8NVXmy/Dt7t5byIHS9V4jsggCPem41o=
Subject key identifier: A7:79:DE:02:59:F6:F9:34:BC:08:0E:45:DF:A0:6A:B0:9D:96:D7:F0
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018ADF309E29D124BEF63CCF2ED141421052
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/p3neAln2-TS8CA5F36BqsJ2W1_A.roa
Signing time: Fri 29 Sep 2023 04:26:59 +0000
ROA not before: Fri 29 Sep 2023 04:26:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 2a0f:7803:fec0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:30:9e:29:d1:24:be:f6:3c:cf:2e:d1:41:42:10:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Sep 29 04:26:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a779de0259f6f934bc080e45dfa06ab09d96d7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0e:c2:03:30:2f:2f:44:4c:46:d4:a2:14:7a:
1e:80:c8:4f:56:55:34:4b:8a:98:1f:78:cc:4e:3b:
cd:ba:cd:70:86:fe:49:d5:72:8a:22:e6:e0:7c:62:
68:82:39:7c:57:ce:b5:b3:d5:d0:62:22:a8:76:d8:
88:6b:75:6c:06:52:e8:2c:ac:5e:39:5c:fe:3f:cd:
d9:f1:34:fd:2d:3c:59:a8:76:17:7b:2f:e5:c0:94:
20:65:84:01:f6:3d:14:f0:48:4d:83:3b:8f:50:f9:
5c:9a:89:6c:bf:24:c9:45:3a:96:ae:1d:23:bf:73:
7a:de:48:aa:b2:61:7c:e9:34:ea:d0:d8:68:64:4a:
19:8c:62:aa:72:12:ef:2c:ad:fc:04:48:25:10:3c:
77:b9:3c:1a:f3:55:a7:cc:26:18:21:18:b5:ec:f2:
9b:e1:f7:f5:f1:af:81:e6:9f:8b:ed:c6:af:30:28:
46:a2:9c:53:e3:c4:eb:3b:35:a7:ab:bc:e7:4c:a0:
b9:7b:b2:93:68:ce:05:29:67:17:92:43:cd:da:d6:
b9:c4:10:b0:99:a7:60:2a:41:c5:21:99:fc:3b:05:
05:c1:2f:ef:26:66:ea:f5:05:c0:3d:f6:5f:20:15:
4d:aa:40:eb:00:fa:e4:07:53:e7:10:d1:b5:bc:8e:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:79:DE:02:59:F6:F9:34:BC:08:0E:45:DF:A0:6A:B0:9D:96:D7:F0
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/p3neAln2-TS8CA5F36BqsJ2W1_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fec0::/44
Signature Algorithm: sha256WithRSAEncryption
a1:64:9c:a8:25:e9:72:82:da:2d:de:4c:bb:c7:6b:75:92:0d:
c2:ee:0d:b9:6c:3c:de:5b:93:9d:25:2d:6f:53:90:6c:ec:0d:
5d:03:5f:37:2a:7e:65:4a:bb:df:bf:69:35:2f:6e:50:04:96:
02:9e:9c:47:1b:2c:92:13:8f:2b:a7:5f:14:04:e8:4a:a6:96:
5c:36:b9:56:31:7f:b5:f7:3d:22:49:f5:fa:2f:4f:0a:25:a0:
0f:f8:d8:7e:20:56:65:e4:eb:b2:e4:40:0b:3a:aa:4e:ef:98:
bd:15:0b:29:db:af:0f:12:5d:d9:84:41:29:9e:a7:91:e2:b4:
98:26:a2:1e:f1:1a:d1:c0:25:bd:27:4c:73:86:fa:d6:63:aa:
1b:c5:bf:c1:81:b7:32:82:b2:4b:3a:4a:42:77:aa:73:85:34:
ca:64:d0:ed:47:fc:bb:e4:4a:44:96:f5:03:07:c3:7b:e7:4e:
45:fa:7b:78:eb:b7:a1:8c:c3:4b:45:29:78:bb:6c:18:63:f2:
3a:60:71:ee:59:4b:c2:23:be:2a:1f:cc:aa:7d:00:42:b9:63:
c7:8b:e6:87:ea:35:8e:ca:ac:74:db:75:60:da:49:87:7f:85:
d2:f1:9e:24:d7:61:e6:34:19:75:07:f6:2b:d5:ae:dd:e8:5d:
58:35:be:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:39 2025 by rpki-client