Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/0a2vamD4tWAqolVmOg2Xs9LMn0E.roa
File: 0a2vamD4tWAqolVmOg2Xs9LMn0E.roa (raw, json)
Hash identifier: oeSVfV3kvBla8coMRyXUKZ+EjLyh4Sb0TRMO8vsl18Q=
Subject key identifier: D1:AD:AF:6A:60:F8:B5:60:2A:A2:55:66:3A:0D:97:B3:D2:CC:9F:41
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0188514C261024E322C9583617443156884C
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/0a2vamD4tWAqolVmOg2Xs9LMn0E.roa
Signing time: Thu 25 May 2023 05:05:24 +0000
ROA not before: Thu 25 May 2023 05:05:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 2a13:3884::/30 maxlen: 30
2a13:3880::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:4c:26:10:24:e3:22:c9:58:36:17:44:31:56:88:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: May 25 05:05:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1adaf6a60f8b5602aa255663a0d97b3d2cc9f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:d5:b1:87:03:b1:20:cd:9e:01:05:4c:fb:
f6:5a:53:c2:8f:8b:ba:bf:42:43:38:0b:2b:ab:52:
53:43:bf:d8:83:97:47:11:00:f7:03:d8:7c:5b:04:
16:4c:09:69:be:57:ae:f8:59:23:56:55:5d:1d:46:
44:fb:f8:b7:6f:30:54:14:89:9d:2c:81:8d:57:87:
ae:03:88:c9:06:17:86:7a:bf:49:fa:b4:70:89:b7:
09:36:2a:20:be:c4:46:48:8d:a0:b2:8c:9d:b2:18:
31:86:4e:56:bc:bb:35:32:e0:02:15:11:dd:47:56:
6e:79:49:a9:82:be:c3:38:c7:33:f7:31:6a:54:87:
f8:d6:0d:ca:7d:2d:6a:dc:79:5d:06:75:8d:1f:c1:
17:87:68:4a:a1:88:d0:63:17:29:a5:45:db:c3:72:
10:fd:8c:16:cc:7f:c0:88:c4:fd:a1:bf:1f:c5:6b:
b2:7b:70:d1:ba:93:ad:a4:ff:e2:b8:a7:2c:79:05:
2b:8d:2c:1c:32:be:ec:e6:51:45:03:76:f5:02:5c:
76:4b:57:da:de:8f:71:e0:78:67:14:b9:52:0b:a1:
71:ad:a0:6c:c9:75:4b:81:4a:a1:62:08:10:da:10:
16:02:d9:30:c0:82:67:0c:df:2e:0d:8a:64:77:5d:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AD:AF:6A:60:F8:B5:60:2A:A2:55:66:3A:0D:97:B3:D2:CC:9F:41
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/0a2vamD4tWAqolVmOg2Xs9LMn0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3880::/29
Signature Algorithm: sha256WithRSAEncryption
4d:1e:01:06:3f:cb:38:06:8d:9e:c0:15:e9:ee:87:fd:50:d0:
f8:63:a0:4a:ff:4a:e6:e2:41:11:f9:4f:ac:be:de:e6:85:8e:
9f:c9:54:f8:a1:23:07:fc:47:12:e7:45:ae:ad:ae:58:51:44:
0e:63:a0:90:85:f8:2c:ee:49:4c:c5:68:eb:1f:d3:b2:b5:0e:
ce:f1:cc:95:6f:14:82:bf:7b:92:6b:2b:cc:c3:9e:9c:c7:75:
47:13:cf:84:d3:d4:4c:62:3b:0d:f4:84:56:af:88:9b:67:1e:
88:83:37:d4:50:c6:fd:1c:01:e4:2b:32:a6:08:ee:05:0b:a0:
e2:d5:08:03:2b:c5:b6:86:c9:31:a2:aa:22:d6:ab:4b:8d:3f:
42:1e:75:66:72:04:11:16:34:97:57:40:7e:f6:6c:9d:34:a5:
32:81:a0:82:2c:3e:89:ed:80:0f:12:fc:58:dc:1a:3e:34:7d:
e3:ef:04:c9:85:d4:41:8a:13:53:a5:15:dd:8c:4d:a9:e2:4c:
6a:47:c1:99:19:bf:d0:7e:4b:b9:d0:4f:23:d1:66:73:12:75:
af:f6:fa:0d:40:9f:8f:17:a0:55:c8:c6:71:eb:64:44:ba:93:
49:be:9b:2c:86:9b:fb:7b:25:bf:a5:35:ab:e1:02:1a:d7:4e:
e7:2a:b1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:55 2025 by rpki-client