Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/wZFps0_x9jlMtl_D7eWwR2nS-zA.roa
File: wZFps0_x9jlMtl_D7eWwR2nS-zA.roa (raw, json)
Hash identifier: 1k44jN3ku52BdR9Zaa9t2HNCXeuMbR0C9Op7TLePr40=
Subject key identifier: C1:91:69:B3:4F:F1:F6:39:4C:B6:5F:C3:ED:E5:B0:47:69:D2:FB:30
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018BD465B65C460243E28541A7C8BE1ADA30
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/wZFps0_x9jlMtl_D7eWwR2nS-zA.roa
Signing time: Wed 15 Nov 2023 19:11:57 +0000
ROA not before: Wed 15 Nov 2023 19:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20063
IP address blocks: 2a0f:e900::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d4:65:b6:5c:46:02:43:e2:85:41:a7:c8:be:1a:da:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Nov 15 19:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c19169b34ff1f6394cb65fc3ede5b04769d2fb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:62:7d:72:c7:64:28:fa:f5:0a:b7:7c:73:80:
49:7b:bb:26:c1:1d:fd:e4:ba:f5:f8:1e:64:0f:12:
1e:f0:a4:31:0a:fb:34:24:df:49:9a:16:98:21:76:
60:c7:18:37:c1:ea:02:7a:34:4b:28:35:d0:f2:d2:
0a:0a:c1:96:bd:5e:9c:5c:fa:78:1c:88:1c:df:ca:
f3:78:eb:70:18:71:91:68:84:9b:b5:b4:22:07:bc:
4d:04:56:bf:f1:8d:af:42:2a:a1:e2:f4:0c:6d:49:
16:53:4d:08:96:4f:be:8a:8d:ba:b0:e0:b2:bc:d0:
b3:57:0b:07:17:42:17:c3:d5:9a:5b:b7:59:b0:6a:
43:ee:7a:5e:e5:32:b0:6b:37:e5:f0:0d:41:9f:82:
c2:6a:13:02:4a:41:92:8b:e7:93:74:03:10:38:d0:
37:cc:1a:2d:f5:c9:94:22:2d:06:7c:7f:45:31:c2:
98:69:f3:be:0a:42:73:81:1e:6f:e2:08:92:cf:60:
34:4a:64:40:4e:99:52:fe:31:6c:76:92:19:56:06:
fc:4b:38:8f:cc:47:d2:b2:a4:25:6b:a6:cd:e1:3f:
ee:43:5b:75:1e:26:63:b4:68:48:ec:4e:a3:ce:65:
9a:c7:05:2f:3f:17:8b:ed:33:21:87:d4:5d:90:7b:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:91:69:B3:4F:F1:F6:39:4C:B6:5F:C3:ED:E5:B0:47:69:D2:FB:30
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/wZFps0_x9jlMtl_D7eWwR2nS-zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e900::/29
Signature Algorithm: sha256WithRSAEncryption
87:da:ed:2d:a6:57:00:6b:77:12:d6:3e:dd:20:1d:34:2b:5f:
24:6d:e5:5b:3a:d4:8e:9c:30:9b:40:27:b9:49:2b:54:75:3f:
fb:2b:da:c3:42:8d:d0:bd:c6:51:a7:ab:ff:68:e2:c1:d8:18:
65:ab:01:5a:aa:6d:98:a4:4e:e0:40:0e:ea:98:c2:ba:79:2c:
47:3c:15:a9:59:7a:3e:34:52:7d:7a:64:c7:87:e3:7e:48:c6:
61:f0:90:b0:34:14:f9:af:67:8f:02:c8:48:26:39:23:b8:04:
50:31:b2:05:7f:00:c5:e2:68:5b:46:6c:df:e3:21:90:d5:9b:
f7:7d:f8:fc:1f:1a:63:aa:04:6b:6b:8b:a7:d8:4c:4a:3c:ab:
7e:72:5f:de:c0:ea:e1:7b:9c:b6:07:b8:be:fc:84:07:95:9d:
a8:17:d7:8d:1c:d9:3a:c2:4a:c0:00:81:e3:85:a2:26:90:01:
44:a9:7f:f1:f0:7d:fe:a2:3a:11:25:61:eb:93:1e:01:77:b2:
cb:f9:6b:8e:88:ec:f4:6e:8e:bb:f2:fd:e2:69:0d:e3:24:1e:
59:ce:bd:4e:79:44:88:a3:f5:2d:dd:1e:92:1d:ac:33:ba:bd:
99:c5:25:54:f8:f7:61:13:7a:2a:1f:1f:f8:d8:84:f8:e6:2f:
f9:9f:4d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:53 2025 by rpki-client