Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/3SC8YNee6IcG0c30dX-12ZRGhnw.roa
File: 3SC8YNee6IcG0c30dX-12ZRGhnw.roa (raw, json)
Hash identifier: OU/gHpRdPEVhx0lvChuR5oJuyfZCF7savF7Vy9dPWKw=
Subject key identifier: DD:20:BC:60:D7:9E:E8:87:06:D1:CD:F4:75:7F:B5:D9:94:46:86:7C
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 018570D51B4DB01790BD180D2B2F6708ECB4
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/3SC8YNee6IcG0c30dX-12ZRGhnw.roa
Signing time: Mon 02 Jan 2023 04:54:52 +0000
ROA not before: Mon 02 Jan 2023 04:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5607
IP address blocks: 2a0c:93c0:8002::/48 maxlen: 48
2a0c:93c0:c002::/48 maxlen: 48
2a0c:93c0:8000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:1b:4d:b0:17:90:bd:18:0d:2b:2f:67:08:ec:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Jan 2 04:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd20bc60d79ee88706d1cdf4757fb5d99446867c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:b8:d8:84:b2:09:d0:8f:c9:20:3f:fd:c0:
2d:b6:4a:3f:d7:1d:0f:cd:fd:fe:c2:87:ad:bf:aa:
47:b8:ba:70:1c:4a:79:78:2f:6d:7d:b1:58:2a:a9:
79:4a:6b:76:a3:df:3f:a8:17:9b:d1:26:b3:13:8d:
fb:0c:ec:00:52:47:8e:8d:62:41:54:ef:ad:4c:9a:
bd:8b:65:83:33:86:ef:2a:e0:fe:11:6f:3a:ed:a2:
01:29:2a:d3:c6:5d:59:97:55:1d:f8:d6:dc:3c:da:
61:d2:17:18:70:da:dc:b0:92:a2:af:42:3d:38:ce:
28:26:64:85:76:d7:8c:fe:2a:91:36:3a:7d:3c:58:
f1:80:2e:04:86:79:d8:fa:4b:e5:92:d9:4d:cf:43:
42:53:70:03:18:3a:50:26:c7:de:17:12:f1:2c:de:
b0:60:27:ca:3c:a4:20:04:06:ff:b8:56:ad:7c:fd:
55:a9:1c:76:d4:dd:89:f4:ed:8f:bc:9f:8c:40:72:
0e:0b:a6:36:7c:5c:a9:2b:ed:62:3b:a3:bb:72:45:
2c:16:dd:c3:bf:c7:62:c2:d9:b4:1c:24:47:74:3f:
68:a1:eb:29:03:08:61:b4:42:67:99:e0:c7:d9:bb:
4f:05:02:8e:30:31:a6:cb:23:ed:20:c6:05:e8:20:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:BC:60:D7:9E:E8:87:06:D1:CD:F4:75:7F:B5:D9:94:46:86:7C
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/3SC8YNee6IcG0c30dX-12ZRGhnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:93c0:8000::/48
2a0c:93c0:8002::/48
2a0c:93c0:c002::/48
Signature Algorithm: sha256WithRSAEncryption
8c:a7:63:b8:f8:05:5e:3b:53:b9:a6:b1:87:ad:ec:95:17:ae:
2d:84:2b:d9:43:c7:ec:4f:f2:08:3e:9a:a3:f5:a7:25:c4:c9:
5f:e2:c4:e3:bd:e5:df:95:1f:c5:e7:17:75:9b:a8:1a:40:9c:
20:74:a7:bf:bb:7a:c6:20:79:27:85:fc:2f:a2:21:83:24:0e:
af:fc:f8:61:38:e4:5f:90:95:4e:53:79:05:ee:1e:14:3d:e7:
77:33:ff:2c:e3:a0:d0:ca:3f:ae:79:cd:eb:c6:f0:48:7f:d6:
11:d9:ec:a3:88:20:94:f6:b9:a0:7e:41:97:8c:83:15:8e:1f:
50:1d:3d:4f:bb:30:02:4d:02:4d:1d:d4:f9:b7:2e:72:c3:bf:
6a:4a:a8:ae:81:e5:f3:5f:7d:f6:32:3a:3d:d5:e7:50:f7:5f:
8b:f4:a8:1e:74:95:c6:e5:e5:e8:80:3b:9f:9b:cc:40:c8:0a:
d0:42:1d:ec:67:b7:14:63:8c:7b:e8:94:3a:23:f6:72:b4:aa:
07:93:2a:80:12:1b:65:30:8a:c9:bd:95:c8:08:ee:b3:ed:2c:
31:9d:03:66:41:46:89:f3:4b:c9:c1:e8:ac:c5:9d:7b:9f:bc:
8a:48:1c:bc:5e:9d:32:fd:fe:ef:5e:0f:26:95:f3:95:17:cd:
88:d3:ae:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:55 2025 by rpki-client