Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a37303a3a2f34342d3434203d3e203135333533.roa
File: 323630323a666131313a37303a3a2f34342d3434203d3e203135333533.roa (raw, json)
Hash identifier: x61oBd/cIaOWVjZe4jYo/MpURGwJ9amQycNdee4/gL0=
Subject key identifier: A9:E9:6E:30:A5:B3:A9:84:D6:15:2D:1B:9A:07:03:78:44:42:B9:F6
Certificate issuer: /CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Certificate serial: 7810BFD95DE901C9D7A59957A5E1BCD1C43A8876
Authority key identifier: BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a37303a3a2f34342d3434203d3e203135333533.roa
Signing time: Thu 04 Jan 2024 05:15:00 +0000
ROA not before: Thu 04 Jan 2024 05:10:00 +0000
ROA not after: Thu 02 Jan 2025 05:15:00 +0000
asID: 15353
IP address blocks: 2602:fa11:70::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:10:bf:d9:5d:e9:01:c9:d7:a5:99:57:a5:e1:bc:d1:c4:3a:88:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6
Validity
Not Before: Jan 4 05:10:00 2024 GMT
Not After : Jan 2 05:15:00 2025 GMT
Subject: CN=A9E96E30A5B3A984D6152D1B9A0703784442B9F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:9b:f0:3c:e9:61:71:aa:b7:e2:a2:46:87:
88:3e:66:cb:c8:35:43:d7:64:e1:2e:ec:96:87:8a:
1a:1f:77:34:5d:db:bc:59:d7:4b:51:00:17:5d:81:
0c:77:c2:5f:54:af:36:99:b1:7b:a8:a6:ea:ba:95:
04:1e:bb:7f:de:bc:8e:73:ed:d3:c9:cd:ac:40:ca:
84:3a:c0:55:cf:9c:9a:22:77:2d:9e:de:8d:64:23:
b1:cc:a5:f4:ce:a1:0b:c9:c9:ba:2c:d2:1c:33:ca:
b4:9c:6f:44:76:d9:33:cb:c5:97:9c:ea:42:e0:c4:
37:7a:41:12:e6:1c:5c:79:95:75:38:a6:ea:3b:1b:
de:f5:32:cb:2a:13:c4:f0:68:b2:a8:27:e6:5f:54:
ec:9d:3e:d0:19:77:7d:c0:8d:d0:26:c5:20:52:0f:
7d:d4:f7:5c:26:22:01:fa:e3:ca:4f:26:47:ba:19:
ed:17:20:60:1e:ac:36:77:cd:19:8b:54:92:43:1a:
c4:77:4e:40:3d:97:72:a5:f5:0c:b8:a3:cb:7c:21:
c5:82:b6:ee:0c:5c:32:cb:95:a7:ed:ae:f9:13:16:
14:83:b9:e6:ae:e1:4d:56:d5:ef:6f:ee:37:f6:61:
d3:b6:da:7c:ea:9a:61:59:3d:a3:ca:85:22:dc:ac:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E9:6E:30:A5:B3:A9:84:D6:15:2D:1B:9A:07:03:78:44:42:B9:F6
X509v3 Authority Key Identifier:
keyid:BB:26:2D:2D:06:A5:BB:F4:FF:22:26:5C:7B:4F:55:1F:F0:37:43:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/BB262D2D06A5BBF4FF22265C7B4F551FF037433D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef940ae283a399bf40b888b424ed0322e0ce02dad6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/6/323630323a666131313a37303a3a2f34342d3434203d3e203135333533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fa11:70::/44
Signature Algorithm: sha256WithRSAEncryption
89:52:69:4e:07:94:72:77:20:3e:9d:9f:86:e9:b4:3f:de:e0:
36:bc:01:ac:7c:82:2e:74:6d:10:ab:52:f3:56:78:8a:29:ab:
83:80:bd:c4:0a:69:3c:b4:f4:29:4d:e3:8e:b5:35:c3:32:d4:
7a:21:31:ff:59:5a:e9:29:18:71:08:d4:d7:be:b5:ae:1b:b6:
c2:ed:43:ba:ee:6b:aa:5b:e4:b3:23:73:2f:93:19:0b:24:8e:
5a:f0:56:ec:20:a3:5f:83:1c:ec:ec:57:77:8e:4b:0a:1c:be:
42:d8:17:8c:9e:b0:f2:39:68:b1:fb:95:45:db:61:7d:49:59:
46:36:88:51:6a:9c:43:91:04:9e:2c:1b:09:6f:9b:70:6d:38:
39:12:04:1d:78:72:0d:b6:c3:5a:97:32:59:39:70:e6:d3:ef:
b8:0d:25:90:5d:82:3b:14:8a:e3:ec:37:ae:50:1e:19:b3:db:
1c:4c:96:1d:36:c5:c9:5b:90:3c:9a:fb:8b:1b:c9:5a:8c:cd:
b2:99:1d:20:26:bc:3a:39:45:5d:fb:d8:9d:ce:21:8d:47:fc:
19:16:9a:59:5c:6f:ea:50:0c:ad:cc:a9:6d:0c:ce:14:5f:c4:
f4:8f:a2:26:c7:fe:97:f0:73:98:de:00:50:9b:83:f6:bd:e2:
52:6b:9c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:03 2025 by rpki-client