Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/3aEwsBhs-Iyk_ZuUxLoZDoKqPIM.roa
File: 3aEwsBhs-Iyk_ZuUxLoZDoKqPIM.roa (raw, json)
Hash identifier: bzF9Xh8LM4wZ8uC4Zab3EQtCyk1jECI6Y/n2fza5GKM=
Subject key identifier: DD:A1:30:B0:18:6C:F8:8C:A4:FD:9B:94:C4:BA:19:0E:82:AA:3C:83
Certificate issuer: /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Certificate serial: 074DA7D9
Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/3aEwsBhs-Iyk_ZuUxLoZDoKqPIM.roa
Signing time: Sat 01 Jan 2022 10:03:53 +0000
ROA not before: Sat 01 Jan 2022 10:03:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199926
IP address blocks: 2a03:dc40:ffef::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122529753 (0x74da7d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Validity
Not Before: Jan 1 10:03:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dda130b0186cf88ca4fd9b94c4ba190e82aa3c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6b:33:56:83:61:a3:bd:a0:be:92:e8:b6:fa:
2e:a7:00:23:ae:b5:fe:74:3e:c7:c2:82:4f:ee:b1:
15:de:9d:67:2c:a5:bc:1f:ff:0e:dc:4d:33:bc:66:
1f:04:64:eb:12:d3:2f:fe:68:2f:bd:3d:76:d0:e3:
2e:0e:0a:7c:ea:e6:22:c4:34:24:60:b7:bc:59:de:
5f:45:21:bc:1f:35:96:42:4e:3d:ea:85:12:66:9e:
e8:93:f8:39:c9:58:08:63:6d:ff:4f:26:83:f4:be:
98:22:13:4c:48:87:c4:ab:59:b8:06:99:69:2f:41:
10:07:83:b1:c1:5b:7c:1c:03:6d:96:53:ba:30:c7:
38:20:8a:93:55:2b:2f:31:e9:c9:4b:89:3a:69:e7:
b2:82:8c:f7:33:d0:09:f5:c3:50:c7:7b:92:63:89:
17:60:44:6d:2a:fa:31:62:49:1b:29:0f:c7:0d:b1:
12:8b:1f:90:23:88:ab:09:d3:d0:e3:be:f7:1b:4c:
a1:e3:eb:e6:f4:4b:ad:3a:00:c3:97:7e:86:71:af:
b0:d7:64:76:cc:06:17:2c:db:35:fd:6f:8f:0d:ae:
cb:9e:3e:1b:59:10:a1:e5:ca:4a:4c:8a:a6:96:56:
bd:b2:39:6b:1c:16:52:8d:a3:be:4e:74:34:a4:22:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A1:30:B0:18:6C:F8:8C:A4:FD:9B:94:C4:BA:19:0E:82:AA:3C:83
X509v3 Authority Key Identifier:
keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/3aEwsBhs-Iyk_ZuUxLoZDoKqPIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:dc40:ffef::/48
Signature Algorithm: sha256WithRSAEncryption
7c:a4:97:47:3a:2b:8e:6c:95:9e:02:51:a1:dd:fd:55:9c:c5:
f8:76:ad:6a:b7:85:8e:fb:5c:c5:5a:d8:03:5c:c0:26:03:e1:
56:d9:6e:a0:95:1e:10:3d:e0:43:59:1b:86:a6:15:17:7c:70:
31:82:d2:32:83:8f:4e:66:c3:75:89:9b:d0:dd:5e:7d:5d:3f:
85:cb:66:09:cb:3e:32:82:cd:ba:6c:a1:f7:92:64:b6:b1:8d:
45:89:dd:43:6e:46:f7:85:64:3b:c8:a1:78:69:3d:2d:76:f5:
54:e0:51:08:38:d2:ea:04:b5:ad:75:8b:f8:0f:92:39:b7:21:
02:11:a5:bc:fb:e6:db:77:fc:3e:91:1a:e7:05:e8:88:a4:ec:
73:1a:fa:f7:78:3a:2a:ae:ce:92:32:c4:e9:bb:39:b9:f9:e9:
67:46:c9:d2:f2:c3:f6:3c:eb:45:d6:1d:58:88:b8:e7:76:9f:
31:14:f7:23:db:5c:f5:d1:07:86:93:96:0d:b7:97:72:1d:18:
08:ce:eb:bc:a7:f1:f0:45:4a:14:bb:bd:5d:03:96:39:81:da:
fd:85:d8:08:15:a3:10:33:10:26:f5:99:27:a9:c8:19:de:53:
e9:8f:e5:e9:ba:60:9b:50:a9:aa:a4:aa:82:13:19:9e:0e:2f:
15:57:ab:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:14 2025 by rpki-client