Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/6yBFT_CKgVsQVMJdeAjnZi_0seI.roa
File: 6yBFT_CKgVsQVMJdeAjnZi_0seI.roa (raw, json)
Hash identifier: 0aAS9cZHbg44zyRt42QqonULco6YFJkM808fSZp8YWU=
Subject key identifier: EB:20:45:4F:F0:8A:81:5B:10:54:C2:5D:78:08:E7:66:2F:F4:B1:E2
Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Certificate serial: 01856D4A99968F23A421921C7E77436F8EF3
Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/6yBFT_CKgVsQVMJdeAjnZi_0seI.roa
Signing time: Sun 01 Jan 2023 12:24:43 +0000
ROA not before: Sun 01 Jan 2023 12:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209878
IP address blocks: 2001:678:f9c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:99:96:8f:23:a4:21:92:1c:7e:77:43:6f:8e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Validity
Not Before: Jan 1 12:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb20454ff08a815b1054c25d7808e7662ff4b1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:b8:31:1d:36:8e:ed:e9:cb:ad:ca:d3:0a:
ba:85:aa:e6:00:ce:26:27:c4:78:f3:56:5d:10:78:
98:6b:e5:71:bc:d7:ed:cb:d2:d5:dd:02:c1:25:fd:
a2:68:bd:bf:b2:ef:df:0a:c9:1f:17:82:f9:85:58:
b0:6e:90:e4:c5:62:42:33:a2:b1:e6:19:af:42:07:
0f:06:2c:63:cc:ec:67:25:14:d2:a8:7f:09:b1:78:
e3:b0:d3:02:02:fd:13:c3:23:47:35:92:76:c2:23:
72:6d:21:50:cc:7a:85:d7:9d:48:54:ad:83:bc:3b:
e0:81:d0:4c:5e:10:00:68:ce:31:dd:5e:5f:04:c2:
2f:55:43:f6:e1:fd:99:83:38:06:92:7d:3f:6a:54:
3d:70:76:2d:54:34:a3:8e:d2:59:a2:71:97:95:db:
fe:f5:89:6d:c4:74:89:d7:47:d7:aa:fa:80:0e:6d:
5c:fc:2b:69:2c:12:88:92:82:f6:e0:5c:38:be:12:
aa:45:41:58:52:59:c3:58:28:bf:30:96:3d:43:6e:
ba:cd:a3:1d:a2:f5:19:93:b2:f9:24:30:3b:3d:73:
51:23:bd:a9:39:fd:3c:4d:80:db:71:03:65:a3:2a:
d5:8a:12:d6:61:d6:56:cd:40:7c:c7:f7:a4:e6:84:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:20:45:4F:F0:8A:81:5B:10:54:C2:5D:78:08:E7:66:2F:F4:B1:E2
X509v3 Authority Key Identifier:
keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/6yBFT_CKgVsQVMJdeAjnZi_0seI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f9c::/48
Signature Algorithm: sha256WithRSAEncryption
5f:18:94:c4:92:4d:c3:cf:8d:4d:35:ea:17:31:b0:f7:90:f5:
bf:81:68:89:e9:4e:3a:21:66:b5:a9:39:e5:c8:9c:49:3e:25:
7c:53:73:fa:0f:19:c7:c5:dd:89:9e:4b:62:29:6f:ca:37:ab:
92:6a:d4:39:e8:a7:5a:0e:5d:29:96:fd:6c:a9:a1:fb:be:0d:
a8:4d:4f:f9:57:17:fe:df:a3:42:b8:5f:6e:9e:1a:7a:8e:ed:
bc:f5:00:83:6b:34:a8:cb:3c:17:eb:ab:ee:ea:b0:4f:a9:86:
dc:dc:f4:0a:a6:5c:a6:51:a7:d8:82:11:db:85:19:7a:0f:13:
9e:12:bb:45:c2:50:e8:0c:28:47:40:d5:b8:2b:3b:9e:e5:8a:
f3:4b:36:2c:dd:9f:90:30:df:d4:70:8d:64:db:7f:a6:b8:32:
04:24:6a:37:27:55:a6:0d:e8:be:1f:4e:bb:f5:ad:21:d3:aa:
c6:e9:73:3c:37:21:0d:2d:1d:06:ba:e4:df:f5:9f:95:b4:65:
af:94:0b:9e:10:68:61:61:5e:15:db:fc:91:d0:57:db:e9:26:
a6:ad:f1:97:36:49:d0:f9:4c:75:f8:3d:da:9d:92:99:98:52:
8f:66:22:2b:15:8e:3a:67:ae:e1:8e:51:df:09:d9:35:35:22:
f1:b3:6c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:26:09 2025 by rpki-client