Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS199691.roa
File: AS199691.roa (raw, json)
Hash identifier: gV80tmHJlx8oFRTO2wlKw882KtvlGqhF+R6ezP0ZRUA=
Subject key identifier: 97:57:F3:94:8E:1C:E2:97:83:1A:B5:46:85:1C:E2:89:39:E9:90:55
Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial: 1268268D2A847270F9397470E5F361F681DF283C
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS199691.roa
Signing time: Tue 26 Sep 2023 10:42:44 +0000
ROA not before: Tue 26 Sep 2023 10:37:44 +0000
ROA not after: Tue 24 Sep 2024 10:42:44 +0000
asID: 199691
IP address blocks: 2a07:54c7:3000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:68:26:8d:2a:84:72:70:f9:39:74:70:e5:f3:61:f6:81:df:28:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Validity
Not Before: Sep 26 10:37:44 2023 GMT
Not After : Sep 24 10:42:44 2024 GMT
Subject: CN=9757F3948E1CE297831AB546851CE28939E99055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:f2:b0:ec:9d:5c:99:81:4d:dd:30:d7:db:
9e:f9:57:b9:f7:e8:72:39:87:80:f1:4b:3e:76:c2:
2b:c4:81:90:57:28:24:6d:83:07:b9:e4:e2:7f:5c:
00:46:22:5b:90:be:af:8d:c3:f2:bc:04:d3:80:c4:
63:45:5d:57:ef:6d:d3:de:b4:0d:1a:07:9f:32:70:
e1:4c:4e:4e:37:c2:b9:ce:5c:ad:88:0e:5d:89:06:
5b:32:4c:5c:dc:f6:65:01:3c:bf:92:c6:32:c3:33:
28:26:84:ef:48:ce:ac:fa:85:c2:db:eb:4a:10:57:
b0:ba:64:97:e6:45:fd:e5:4d:97:ef:32:64:62:e1:
db:c0:9c:c4:e7:3f:61:4c:38:f3:01:d8:a2:a7:03:
6c:a4:d0:57:23:18:0e:86:3b:de:17:59:f4:bf:90:
51:c1:39:fe:1b:ac:a8:8f:8d:c7:a8:2a:2b:89:bd:
7d:98:6a:c9:3d:de:a7:76:64:86:00:df:cc:55:5e:
70:16:93:00:7f:9c:c5:d3:60:e9:11:42:dc:a0:21:
e8:88:b4:20:83:1d:96:e5:c6:4a:d9:d3:cc:83:a0:
f7:cd:61:0c:cf:8b:48:74:be:de:77:92:ca:fc:43:
fd:c1:fd:ba:14:f9:0b:65:d5:d8:63:94:77:c5:30:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:57:F3:94:8E:1C:E2:97:83:1A:B5:46:85:1C:E2:89:39:E9:90:55
X509v3 Authority Key Identifier:
keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS199691.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c7:3000::/36
Signature Algorithm: sha256WithRSAEncryption
36:27:62:02:71:d5:ce:4b:8b:d7:6b:67:e3:a2:7b:36:91:7d:
b4:50:c2:03:41:ba:0d:98:0d:03:43:36:ed:cf:0b:37:5c:f6:
1e:a6:18:61:a2:c8:b7:71:f3:85:13:dc:97:95:f5:55:a2:8d:
e8:89:e5:8c:83:8f:83:95:2f:61:6c:8d:82:b4:f1:21:83:3a:
7c:76:8b:34:23:9f:9f:69:5d:af:59:45:63:c8:01:f8:11:7b:
b6:0b:c1:bf:28:f4:e2:5a:ab:10:87:93:04:4b:a9:33:e0:2c:
2d:21:b6:19:79:30:14:c3:f1:40:3f:80:1e:c6:83:09:1c:22:
0b:d4:7a:89:74:08:d1:fa:b1:e5:7a:e9:c6:9b:4e:93:44:35:
7d:35:a7:4f:88:bb:bb:11:47:ee:82:56:89:93:bb:b7:09:cc:
29:f9:74:b4:bc:81:1e:16:4d:b8:15:be:c3:4f:0b:b5:cf:9a:
35:07:73:e1:95:a8:b6:fb:2a:42:48:e7:d8:cd:5a:db:7e:c6:
6b:8c:83:f7:de:5e:a7:57:35:ff:f2:a5:f3:e4:ad:ac:70:a8:
c9:35:8b:b7:38:50:6a:48:32:13:06:96:70:d8:e2:1f:7f:a7:
43:7a:6c:0d:95:46:19:b9:b4:1a:95:53:6e:72:07:69:46:97:
c3:67:fe:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:27 2025 by rpki-client