Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/xh9a4HHM3nxVKe2orTOXYWc6P4E.roa
File: xh9a4HHM3nxVKe2orTOXYWc6P4E.roa (raw, json)
Hash identifier: ZgtFyzg4B+NWF/sPQSBFRNkhfucJ6Uwa1FOxC/sSJVY=
Subject key identifier: C6:1F:5A:E0:71:CC:DE:7C:55:29:ED:A8:AD:33:97:61:67:3A:3F:81
Certificate issuer: /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial: 01C5797A
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/xh9a4HHM3nxVKe2orTOXYWc6P4E.roa
Signing time: Sat 01 Jan 2022 09:55:29 +0000
ROA not before: Sat 01 Jan 2022 09:55:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50399
IP address blocks: 2a10:dac0:100::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29718906 (0x1c5797a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Validity
Not Before: Jan 1 09:55:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c61f5ae071ccde7c5529eda8ad339761673a3f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:6c:91:3e:91:a8:56:ab:33:83:50:c5:7e:
1d:b6:3c:10:67:88:b9:41:69:fc:74:3a:97:1b:2c:
71:89:10:fb:ff:d7:47:a0:1f:e6:13:b4:d1:c4:bb:
e8:6a:d3:c7:0d:12:77:d5:ba:3c:d4:c4:6a:d4:22:
28:0e:6f:de:a4:dc:ee:50:85:0a:17:19:62:46:c6:
0b:3e:53:b4:d2:d7:33:37:39:a3:a4:5a:95:0f:0a:
79:c6:8a:66:d0:48:9d:8f:af:3d:b2:5c:4b:e5:28:
c8:c8:ba:fc:fe:05:3f:57:2b:7f:7b:a9:d9:77:a1:
33:fd:1a:b6:84:6c:f5:6a:d2:5a:77:45:40:3c:29:
f0:00:d5:aa:f2:ea:1e:d3:01:40:dc:25:24:a0:bd:
35:b6:34:75:7d:e4:7c:f4:3d:c1:7d:a9:95:1c:f5:
16:c2:8f:41:4f:15:12:a9:9b:99:ab:6c:1d:9a:95:
b6:1c:56:37:0c:49:c3:a7:b5:2a:8a:18:0b:7b:46:
0c:eb:93:98:78:0d:6e:0d:91:39:81:b6:41:02:98:
e0:c7:a6:d5:58:ca:c3:c1:4b:e4:dc:90:5c:2a:d5:
3e:45:87:d6:9f:c6:15:3e:4e:a4:de:cf:d5:86:13:
35:f8:49:50:2e:d6:08:7f:00:0d:83:18:16:b3:a7:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1F:5A:E0:71:CC:DE:7C:55:29:ED:A8:AD:33:97:61:67:3A:3F:81
X509v3 Authority Key Identifier:
keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/xh9a4HHM3nxVKe2orTOXYWc6P4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:dac0:100::/48
Signature Algorithm: sha256WithRSAEncryption
55:d7:3c:fa:07:72:a2:3e:ca:f8:59:ca:f7:bf:9c:58:a0:d6:
6f:93:7f:c1:47:a2:ca:83:2a:3f:3f:75:e8:39:26:65:f6:2e:
be:42:3b:7d:55:d2:72:b4:e0:b8:93:56:a4:64:cc:81:80:00:
57:1c:37:ee:a9:85:37:b5:b6:25:29:e3:9c:b3:03:04:76:07:
4e:a6:d2:1c:50:e9:6b:73:84:cb:43:2f:17:b5:19:c5:2c:58:
6b:28:3a:40:55:a5:01:b5:34:1d:b9:40:d9:8c:75:da:b6:01:
a3:7d:32:32:22:f9:cb:3b:5c:d4:03:b3:70:8b:98:18:f3:8f:
a0:c3:40:c8:07:e2:fb:31:a2:e3:bf:7b:12:91:04:45:f9:75:
82:91:8c:6b:3a:10:e1:e6:10:bb:f9:52:b4:67:c6:78:5d:48:
c4:76:b8:47:94:e4:70:dd:ef:0b:62:b7:69:9f:37:83:14:7f:
8d:f7:c3:fe:13:47:93:1f:59:31:2b:cb:0e:e2:c9:9b:4c:e0:
2a:eb:66:99:07:73:4e:18:d8:9d:13:2f:ca:1e:a2:41:ad:75:
8c:e5:65:7f:63:68:5a:85:63:67:b5:6a:43:c5:3b:43:d4:38:
53:29:d4:8a:2a:eb:d3:87:a6:7e:96:ae:b2:51:02:e7:3d:20:
ba:6f:41:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:05:29 2025 by rpki-client