Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/t5Qi5BuVMLzH2hMKCgqVzgQzQCc.roa
File: t5Qi5BuVMLzH2hMKCgqVzgQzQCc.roa (raw, json)
Hash identifier: ir4Ru1agCHmfS5Vpvjmu36XsJLgH8sfbhqn2JGGcoWg=
Subject key identifier: B7:94:22:E4:1B:95:30:BC:C7:DA:13:0A:0A:0A:95:CE:04:33:40:27
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 0188DEA6D8E4539809AAB0350647F93521CE
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/t5Qi5BuVMLzH2hMKCgqVzgQzQCc.roa
Signing time: Wed 21 Jun 2023 15:50:56 +0000
ROA not before: Wed 21 Jun 2023 15:50:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140096
IP address blocks: 2a0f:7802:f000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:a6:d8:e4:53:98:09:aa:b0:35:06:47:f9:35:21:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jun 21 15:50:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b79422e41b9530bcc7da130a0a0a95ce04334027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ec:5b:da:90:62:d4:fe:28:c7:a9:02:b1:08:
c4:4c:8b:f6:01:6c:b0:c6:73:07:3e:cc:d9:8c:a3:
27:28:4a:7d:d6:cf:c4:96:dc:e4:7b:71:95:ed:8d:
d0:6d:77:1c:03:e9:cc:4d:e4:45:58:21:eb:4a:47:
7a:8d:62:f5:28:f6:f2:1f:8c:c2:73:de:6a:a0:31:
cd:78:9f:c1:20:36:bb:e3:a2:9e:76:1b:6a:94:aa:
00:0e:68:75:04:49:4f:51:c2:26:cc:8c:78:85:31:
1d:ee:30:0b:47:6b:f0:fe:aa:59:74:ae:30:89:19:
db:49:54:f3:bc:0a:4e:8b:b2:78:8d:ba:fa:92:ff:
40:e0:07:4c:ab:ba:10:94:af:28:a1:8f:15:9a:fd:
ed:8a:aa:41:e6:6c:2f:7a:2d:39:93:d2:d1:07:90:
d3:39:74:48:e7:82:7c:ed:55:b2:26:90:8e:13:07:
b3:a2:af:36:09:d9:0a:a9:c4:97:0c:fd:1a:df:55:
99:71:7a:e1:be:3c:5e:d4:90:2c:4b:d6:ab:2d:05:
3d:a6:76:3b:ed:d3:51:d6:1f:d9:ea:de:93:ab:66:
c7:b1:9e:60:70:12:83:b4:89:61:e6:43:1b:64:ba:
0e:45:0a:2c:5f:be:74:da:a0:27:b6:5f:16:89:1f:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:94:22:E4:1B:95:30:BC:C7:DA:13:0A:0A:0A:95:CE:04:33:40:27
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/t5Qi5BuVMLzH2hMKCgqVzgQzQCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7802:f000::/36
Signature Algorithm: sha256WithRSAEncryption
5b:07:40:00:e0:86:8c:29:34:e7:37:f4:cf:6a:f1:3e:fc:06:
4f:80:0a:2b:6d:68:06:09:b0:ea:44:8d:ca:a7:c6:52:59:6a:
79:ba:ff:9b:fb:e5:b2:79:3b:3f:8d:82:d0:8f:ee:3b:78:0f:
fb:47:0c:3c:c3:5c:61:43:4c:97:a7:78:e0:b6:d3:ba:d4:23:
b7:94:34:79:2a:d2:5e:2f:85:2a:c3:27:d6:47:84:a8:8d:1d:
66:0a:c1:2c:70:bc:b4:f1:83:ee:6e:4b:1b:0b:32:be:9b:a1:
6b:eb:8d:a4:01:fc:46:f4:20:b1:19:31:3d:c7:4b:42:2d:70:
44:e2:df:9a:4a:2c:41:96:97:f0:ec:68:e2:bb:5c:52:16:2b:
97:8d:cb:05:32:d4:5d:d0:a9:b5:22:6d:04:91:d4:fc:d1:49:
d3:40:fb:57:99:ee:de:47:ce:95:27:03:b4:99:2c:47:aa:1a:
80:6c:06:65:bf:90:25:f2:95:e1:38:1b:16:19:ea:55:64:81:
0b:d3:d6:04:1d:48:69:93:92:54:67:6f:a6:21:17:be:d9:bf:
43:d3:0e:46:e9:65:a8:72:a3:f7:b4:c9:32:51:31:9b:59:92:
4f:c6:95:05:1e:74:d1:20:b1:e6:33:6a:d5:52:0e:3d:dd:4e:
0e:99:bc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:43 2025 by rpki-client