Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/pXrD1uKkaVMLQbqmEu2xO_LhFrs.roa
File: pXrD1uKkaVMLQbqmEu2xO_LhFrs.roa (raw, json)
Hash identifier: V2TH9NDFC8lkqJxjn+TjgGkZ6eo5pSrgQf9UYXtlM7Y=
Subject key identifier: A5:7A:C3:D6:E2:A4:69:53:0B:41:BA:A6:12:ED:B1:3B:F2:E1:16:BB
Certificate issuer: /CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Certificate serial: 0F40FC71
Authority key identifier: 5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/pXrD1uKkaVMLQbqmEu2xO_LhFrs.roa
Signing time: Sat 01 Jan 2022 08:58:52 +0000
ROA not before: Sat 01 Jan 2022 08:58:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200544
IP address blocks: 2a07:ad00::/30 maxlen: 30
2a07:ad00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255917169 (0xf40fc71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Validity
Not Before: Jan 1 08:58:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a57ac3d6e2a469530b41baa612edb13bf2e116bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:66:79:40:06:a8:6a:31:72:61:23:f1:e1:ff:
05:07:72:01:0b:0a:3c:49:a1:92:42:be:5d:24:ac:
19:86:5d:98:57:a2:cf:5d:f2:0a:bc:ef:19:34:b1:
fd:bf:9e:92:c0:13:6a:bc:b5:68:07:f6:73:d3:7b:
09:b2:cc:c1:b6:80:ed:31:7e:60:85:4a:be:2d:26:
9b:b9:ac:8e:ce:a7:84:78:be:c9:35:03:3c:72:4f:
fd:30:30:35:83:c9:ba:55:96:05:c2:38:ad:d4:e8:
04:64:c1:20:49:63:79:51:78:23:d6:a8:46:24:b7:
25:74:ce:92:f0:0c:7c:c8:15:a0:9e:10:9a:d5:3b:
9d:1e:f5:16:f3:ca:93:72:d3:42:57:df:73:df:2d:
d1:24:86:9b:43:f9:2e:48:e6:33:b2:4e:81:9f:12:
c3:e4:db:92:09:82:70:62:30:e9:88:2d:1c:49:e8:
20:93:6f:f8:14:46:9b:5d:ac:8e:b8:17:e3:f5:39:
99:40:af:cf:c1:74:e0:f1:c6:94:75:6d:fe:56:bf:
32:d7:4a:dc:9a:01:3f:f6:2a:ce:60:c9:7c:db:5f:
62:a0:d1:42:2b:12:ce:ea:f2:dd:d7:a9:78:48:0c:
c8:5c:01:94:e6:c4:be:c0:83:f4:5f:02:3c:d4:c5:
0f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7A:C3:D6:E2:A4:69:53:0B:41:BA:A6:12:ED:B1:3B:F2:E1:16:BB
X509v3 Authority Key Identifier:
keyid:5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/pXrD1uKkaVMLQbqmEu2xO_LhFrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:ad00::/29
Signature Algorithm: sha256WithRSAEncryption
8b:45:d3:56:75:ba:08:04:38:3e:78:af:13:d5:91:31:f4:f4:
67:4d:9f:c3:5c:fd:e1:53:64:32:13:88:b7:ad:eb:aa:cc:ba:
ac:3e:d3:80:6c:c7:1e:fe:85:90:ec:b0:59:da:6e:00:d2:3e:
15:1f:9c:7a:25:65:2f:e7:53:42:c8:14:20:92:62:0d:42:3b:
68:75:fb:21:d3:30:fa:8b:cc:75:56:a9:b5:fd:3b:10:96:30:
03:44:49:64:04:43:de:26:73:46:df:07:7a:89:20:b6:0f:91:
f3:04:8d:91:43:60:f3:dd:98:ae:9c:16:ed:91:81:b9:94:1c:
c8:44:2a:79:3d:51:21:39:23:a1:cd:61:5a:dc:50:10:99:8b:
8d:86:16:38:b2:79:86:0e:44:cc:24:08:d3:62:17:e5:89:ef:
d8:5e:e9:cc:49:4f:87:9b:6e:f8:53:53:2f:70:8d:a0:63:e7:
8e:78:51:ee:56:0c:53:04:ac:a3:82:80:15:73:0a:94:49:45:
c3:f5:97:44:91:3d:7f:cf:af:f6:22:a7:8d:3a:4d:ac:23:91:
86:70:ee:55:b5:7c:c6:7f:c4:3b:19:dd:93:0d:4b:da:13:1f:
e9:7e:c3:3d:48:7f:38:ba:3f:09:d1:28:57:ba:c7:9f:55:dd:
1f:a0:9c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:04 2025 by rpki-client