Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/taAiXofLspZChQcqqVpXMvj22Hs.roa
File: taAiXofLspZChQcqqVpXMvj22Hs.roa (raw, json)
Hash identifier: enulZ2pMxiqIBf2MKbMecL4EasiaIQ0GIlpcSnzcZ3I=
Subject key identifier: B5:A0:22:5E:87:CB:B2:96:42:85:07:2A:A9:5A:57:32:F8:F6:D8:7B
Certificate issuer: /CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Certificate serial: 018571B0D98ADD325ABE6E4618207B1702B8
Authority key identifier: FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/taAiXofLspZChQcqqVpXMvj22Hs.roa
Signing time: Mon 02 Jan 2023 08:54:53 +0000
ROA not before: Mon 02 Jan 2023 08:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212034
IP address blocks: 2001:67c:2918::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:d9:8a:dd:32:5a:be:6e:46:18:20:7b:17:02:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Validity
Not Before: Jan 2 08:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5a0225e87cbb2964285072aa95a5732f8f6d87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:46:a2:2f:df:03:1a:5e:9d:32:6b:c3:c5:
23:89:5f:a7:1a:12:d9:fe:b5:87:bd:3e:37:9b:96:
cc:a9:ac:59:6b:b6:93:3e:de:ab:9b:5d:12:61:77:
52:2f:e9:ab:43:b8:12:75:d9:62:ae:b6:bd:20:96:
14:f9:ed:1a:67:86:bb:d7:a3:53:40:86:b3:26:ac:
c9:9e:21:ea:4d:5c:7b:71:e2:32:61:c8:a0:41:20:
73:3c:17:06:aa:a7:d7:21:90:e6:43:5b:98:bf:28:
8c:8d:65:cd:3d:b7:28:02:cc:9c:f5:1c:7f:bb:d4:
03:57:89:60:b8:6d:5a:81:84:71:cc:ac:c0:9c:9a:
49:01:0e:43:de:cf:3c:38:1b:1d:7a:4d:fa:ae:c3:
d8:14:c8:13:8c:31:2f:10:9c:f8:17:62:4d:de:58:
30:eb:e6:98:0c:86:78:5d:0b:a4:61:89:59:da:90:
da:05:1d:89:af:07:17:32:25:c8:e8:48:fa:89:cc:
d4:13:8a:58:4f:85:c0:51:e1:f5:df:49:ab:66:2a:
94:50:a7:ef:3c:60:6c:54:39:b9:b9:32:e5:a9:c3:
66:cf:0b:81:44:93:1f:b1:cb:f0:c0:8f:d5:f2:ab:
3a:ff:8a:a2:6e:20:b5:75:f8:44:97:1e:37:3c:6c:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A0:22:5E:87:CB:B2:96:42:85:07:2A:A9:5A:57:32:F8:F6:D8:7B
X509v3 Authority Key Identifier:
keyid:FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/taAiXofLspZChQcqqVpXMvj22Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2918::/48
Signature Algorithm: sha256WithRSAEncryption
b2:3b:02:bf:83:37:66:70:13:44:fe:47:e1:62:75:7c:86:98:
f2:c8:a7:52:71:66:1f:10:d9:c0:9f:df:6e:3f:df:f3:50:ba:
78:3d:3c:08:3d:ce:d5:d7:a5:9e:15:0e:a7:78:1b:1a:cf:77:
82:a7:91:d7:cc:80:35:d9:b7:5c:2a:c9:a0:22:dc:dc:d8:9f:
31:f1:c9:fd:2c:06:6c:72:0d:81:b1:83:68:c9:f7:eb:4c:1c:
ea:69:f8:7b:d3:a7:24:dc:2c:da:26:af:90:13:83:a5:1b:ea:
0f:c5:61:e6:cf:3f:83:86:fd:3d:12:41:e7:c4:42:72:8a:48:
97:5c:f8:27:09:8a:cf:61:04:1d:b5:18:ac:19:c0:db:8c:17:
df:b0:ad:b8:3b:0f:ea:b9:ec:89:9a:16:b8:66:63:95:90:11:
71:31:31:1f:df:ee:5d:50:ba:3e:f8:e1:89:38:e7:bb:54:26:
c3:53:72:44:03:c2:ab:50:74:40:4c:51:29:ac:c3:94:1a:ca:
03:ae:86:08:c1:62:5a:2b:bc:00:ca:cd:a3:07:23:6c:4e:51:
3a:be:4a:d9:c3:ec:b0:89:66:46:72:cf:0d:d3:a5:88:ab:e0:
a9:1b:b7:c5:a7:94:57:84:01:11:53:f1:ac:c9:65:4d:c4:db:
49:64:74:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:38:36 2025 by rpki-client