Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/cAjSxZ_JVb9hWQEWFYQD3gT7yAY.roa
File: cAjSxZ_JVb9hWQEWFYQD3gT7yAY.roa (raw, json)
Hash identifier: yYc0i5YRXvE+ECaDWs5fkG/HqvNtTDs/I+SQ0XJOygA=
Subject key identifier: 70:08:D2:C5:9F:C9:55:BF:61:59:01:16:15:84:03:DE:04:FB:C8:06
Certificate issuer: /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial: 0943F2B4
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/cAjSxZ_JVb9hWQEWFYQD3gT7yAY.roa
Signing time: Wed 11 May 2022 07:54:02 +0000
ROA not before: Wed 11 May 2022 07:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209432
IP address blocks: 2a0e:cc0::/48 maxlen: 48
2a0e:cc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155447988 (0x943f2b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Validity
Not Before: May 11 07:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7008d2c59fc955bf61590116158403de04fbc806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5c:fe:ba:17:92:94:00:06:f0:9f:9a:e7:0d:
34:7c:c2:0a:dd:d2:87:c9:8e:b2:1c:c9:a2:2b:3a:
eb:56:0a:e3:b7:97:d2:2c:e5:52:8e:46:94:b5:5c:
41:3c:fb:ac:37:6d:1a:3c:1b:5c:8d:65:9c:30:56:
7a:98:13:02:c9:dd:ca:a0:d6:29:6b:34:df:7f:6c:
4a:c8:40:a2:8d:60:9a:32:e5:c6:bf:c6:1f:6c:4a:
53:d7:e0:04:13:08:13:ac:75:06:40:74:d3:d7:37:
4e:f7:b7:46:cd:16:a4:ed:19:1c:c4:66:b8:2e:31:
d3:14:08:e5:e2:c0:e0:48:4b:ad:c6:bc:72:15:1d:
8a:3d:1f:71:b7:0c:23:fa:02:43:90:cf:d5:06:99:
e3:b9:f2:16:41:94:19:ad:b9:96:71:36:64:dd:25:
90:8b:23:be:a9:cb:b3:a1:16:83:b7:c6:9c:2f:0e:
f5:5e:a8:45:44:91:36:e9:69:56:f0:5d:f2:21:17:
a8:dc:4b:2c:54:e8:0e:bf:44:96:81:bb:d1:31:24:
8b:64:95:ec:c9:98:03:a5:cd:83:17:24:7b:6a:f4:
c5:e2:d5:79:f9:be:a6:1a:e9:1a:77:34:38:af:1c:
eb:80:f7:04:69:b1:f7:45:78:21:1c:cc:05:97:83:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:08:D2:C5:9F:C9:55:BF:61:59:01:16:15:84:03:DE:04:FB:C8:06
X509v3 Authority Key Identifier:
keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/cAjSxZ_JVb9hWQEWFYQD3gT7yAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:cc0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:f3:72:e8:86:7d:c2:a8:a4:43:73:fa:c2:6f:20:fb:51:68:
d4:d5:ad:d7:38:31:cf:c2:94:68:d4:00:b2:d1:b1:a9:81:a4:
da:31:bd:f7:bd:46:0f:a3:ad:0d:d0:61:cf:cc:86:d8:40:65:
e6:2d:95:1c:02:76:12:ff:e9:9d:0f:89:90:7f:f3:ef:f9:ec:
3a:09:77:8e:93:c2:11:46:76:09:85:76:b8:c7:e3:54:19:ba:
e6:2e:12:c7:2b:12:d1:d2:30:f6:96:4e:43:2c:72:d3:d1:45:
77:26:92:46:c7:82:dc:6e:77:b2:f9:a2:2f:f1:cb:20:07:f4:
c2:ec:55:95:1c:d2:57:d2:b7:fa:7d:4d:13:2a:d5:5b:3f:5b:
85:57:f4:6c:cd:4b:0e:27:0d:28:96:e3:b3:bf:08:09:a0:66:
c7:67:00:e3:1a:cd:aa:e1:f1:a3:52:c2:3c:90:d4:c1:38:83:
3b:a3:ec:ad:39:75:08:19:ad:86:00:59:af:7e:f1:d9:d6:63:
0c:92:47:35:37:19:8b:00:6a:5c:b1:f6:b7:2e:7a:ac:50:ec:
56:d3:fc:21:bc:41:85:54:9c:08:a4:30:7c:17:ce:43:2d:dc:
2b:24:85:d8:9a:f4:e5:0a:b7:c5:87:80:78:f7:e0:f3:96:45:
79:1d:df:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:08 2025 by rpki-client