Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/P41UQe1y_BablorGJAq7caAwvIY.roa
File: P41UQe1y_BablorGJAq7caAwvIY.roa (raw, json)
Hash identifier: 9wKv6o55gL141wZzgzlEz7/+pTuILyguYJLyjSdYg90=
Subject key identifier: 3F:8D:54:41:ED:72:FC:16:9B:96:8A:C6:24:0A:BB:71:A0:30:BC:86
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 018AFA7AF9C91A0A4389E6F3BC03EA79EF49
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/P41UQe1y_BablorGJAq7caAwvIY.roa
Signing time: Wed 04 Oct 2023 11:37:57 +0000
ROA not before: Wed 04 Oct 2023 11:37:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216435
IP address blocks: 2a10:500:1300::/40 maxlen: 48
2a10:500::/32 maxlen: 48
2a10:500:1700::/40 maxlen: 48
2a10:500:6700::/40 maxlen: 48
2a10:500:fe00::/40 maxlen: 48
2a10:500:9400::/40 maxlen: 48
2a10:500:4800::/40 maxlen: 48
2a10:500:6000::/40 maxlen: 48
2a10:500:5c00::/40 maxlen: 48
2a10:500:4900::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:7a:f9:c9:1a:0a:43:89:e6:f3:bc:03:ea:79:ef:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Oct 4 11:37:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f8d5441ed72fc169b968ac6240abb71a030bc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:cd:a1:fc:ac:9c:21:64:47:f4:ef:bd:cf:
63:0e:f9:1b:81:ab:c4:2b:b9:d9:b7:05:7a:74:ef:
c8:ba:3c:88:3b:2c:ee:8f:c3:04:77:d6:89:1d:b9:
02:b0:a8:5c:23:5b:1d:be:d2:a2:5b:45:56:78:53:
72:40:b4:8c:d0:38:29:c0:bf:3c:96:eb:45:ca:45:
2a:91:5e:a1:80:88:fd:98:a2:e0:86:5c:b8:51:98:
1e:84:5d:9d:df:7b:e0:6f:1b:20:42:a7:c0:7a:2c:
34:16:68:d8:d3:ad:84:0c:40:63:6c:cd:d4:12:13:
89:53:7e:82:08:9e:e8:03:f0:a4:07:b3:7c:8f:8f:
2f:c5:c2:73:60:17:e5:09:83:b5:5d:2d:54:5d:e2:
d8:ea:74:35:d7:11:2a:07:9d:2d:46:d0:c8:1f:0d:
cd:17:96:df:02:98:33:a8:ae:5e:56:91:2e:28:3d:
18:bc:8a:bc:32:bd:55:9d:4b:e3:bb:83:cc:2c:08:
03:67:6c:5d:3b:47:65:11:2a:c0:d9:c9:5f:6d:66:
eb:b1:f3:59:36:ce:84:24:1f:18:60:44:d1:92:d5:
b6:2f:84:98:93:49:a4:d4:48:46:11:42:9b:65:28:
b9:e6:7f:82:46:ab:14:b8:0c:87:bc:5c:ca:ab:a0:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8D:54:41:ED:72:FC:16:9B:96:8A:C6:24:0A:BB:71:A0:30:BC:86
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/P41UQe1y_BablorGJAq7caAwvIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:500::/32
Signature Algorithm: sha256WithRSAEncryption
07:01:83:6e:d5:e0:95:ef:ff:86:26:9c:74:71:a8:bd:fd:d7:
e9:60:aa:7a:85:8b:02:0a:ca:62:5e:b3:cd:5e:84:1d:b8:b2:
b2:40:fe:ff:1e:42:53:bf:10:4a:ff:22:73:f4:98:75:e1:58:
77:83:ea:e4:c1:b0:6b:be:94:c0:bf:04:92:93:6a:aa:5f:cb:
1c:22:c5:71:31:78:74:8c:93:ef:bc:ac:e4:ed:04:2b:8b:c8:
47:29:c4:6e:1c:f3:33:e0:03:f2:87:70:8a:29:4b:9a:21:6a:
52:e1:b0:14:c1:af:c7:a7:a6:27:f5:73:a5:4a:69:2b:53:2a:
75:d7:a7:c7:1c:5b:25:87:6e:35:13:65:94:5b:82:cd:42:7f:
0d:a8:55:ac:d8:6b:19:1c:32:0d:46:a1:b3:9f:7e:8e:a5:a2:
3b:66:e4:ff:dd:c1:bf:bf:d1:66:ba:19:bb:fd:26:d2:fb:8d:
00:8f:46:4c:91:07:4a:53:0e:70:0e:7a:92:7f:94:e1:7f:de:
f4:c6:c9:68:52:dc:40:6f:a5:6e:59:23:b3:ee:7e:3b:37:49:
12:dc:e8:29:83:4f:7e:3c:4e:26:3e:73:88:8c:88:77:7c:4e:
b8:ed:7c:b5:f4:e5:ca:67:aa:e9:75:83:99:ab:17:6d:be:57:
63:73:90:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:27:18 2025 by rpki-client