Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/zxrEemMoireS4WFPCDu9ZfPPqak.roa
File: zxrEemMoireS4WFPCDu9ZfPPqak.roa (raw, json)
Hash identifier: HQmKKFacqPhwcQ79bTEfjDZUey7V+pcxCLI8zmuLxCg=
Subject key identifier: CF:1A:C4:7A:63:28:8A:B7:92:E1:61:4F:08:3B:BD:65:F3:CF:A9:A9
Certificate issuer: /CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Certificate serial: 01856F9DC91A7DF6D48DB8E377DEE03D976C
Authority key identifier: FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/zxrEemMoireS4WFPCDu9ZfPPqak.roa
Signing time: Sun 01 Jan 2023 23:14:49 +0000
ROA not before: Sun 01 Jan 2023 23:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205078
IP address blocks: 2001:678:864::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:c9:1a:7d:f6:d4:8d:b8:e3:77:de:e0:3d:97:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Validity
Not Before: Jan 1 23:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf1ac47a63288ab792e1614f083bbd65f3cfa9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:26:d0:fa:48:c4:8f:d8:ea:d4:32:78:be:
ea:50:75:44:d5:76:a5:40:15:7e:a9:9f:ce:84:22:
63:41:b9:43:4d:2c:4c:f0:e9:74:20:33:bb:c4:2a:
5d:66:68:52:58:e1:2e:05:c5:0c:a6:6d:6f:03:22:
93:d7:1a:c9:55:6d:1a:0b:de:3a:cf:55:94:2e:44:
e2:e3:84:a1:b4:0a:77:a2:62:d7:ea:92:f7:6f:a0:
4c:b9:f3:08:79:c8:1d:7d:53:79:06:6d:0b:c1:e1:
30:4c:45:99:9b:98:79:aa:80:48:84:45:d7:ab:98:
0b:c9:fe:3c:23:a4:ca:62:39:ff:0a:f3:48:e9:61:
c5:ec:4f:ed:47:ae:ce:1d:da:ac:6b:1b:02:2b:58:
cc:36:13:81:61:95:c0:ae:bd:06:7f:fc:25:5f:70:
fd:e1:1c:81:18:5f:99:19:f5:a4:12:3f:30:dc:46:
0b:34:c1:7f:bf:de:c0:e9:97:1f:5a:ac:18:3a:8b:
89:a3:61:80:37:d7:ff:f6:aa:3f:96:f6:26:dc:ba:
a4:90:bc:da:76:13:13:d2:29:fc:8b:5b:52:1f:6b:
7a:7b:d4:1b:67:01:ba:3b:3e:6d:0c:98:2f:16:9d:
7c:ee:84:34:9e:82:23:44:0d:47:ed:e7:ae:a6:63:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1A:C4:7A:63:28:8A:B7:92:E1:61:4F:08:3B:BD:65:F3:CF:A9:A9
X509v3 Authority Key Identifier:
keyid:FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/zxrEemMoireS4WFPCDu9ZfPPqak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:864::/48
Signature Algorithm: sha256WithRSAEncryption
53:3c:f6:85:e2:57:cf:bd:4d:62:c0:36:16:c2:19:0b:65:5a:
13:d9:89:71:df:ae:b5:5c:67:95:6c:4d:b2:8f:3d:1b:1d:bd:
b2:b0:4b:c7:3c:06:e1:52:ab:7b:eb:27:a0:eb:ab:e7:95:0d:
db:a9:09:0a:f3:8a:c0:a6:d9:c4:a9:a6:f2:ba:af:13:7d:b6:
f9:99:8e:a1:03:6f:14:cd:a9:f1:c7:60:19:7e:54:48:92:cf:
62:e7:fe:b5:8d:d1:d8:c6:28:2e:2b:71:f0:c4:cd:78:2c:bc:
a0:1b:48:ad:c0:ca:d0:1e:c7:09:25:19:41:d5:58:ca:c6:02:
6c:dd:c6:53:e5:15:ca:89:8a:c4:96:1e:ff:e3:26:10:3e:d0:
4b:cd:8d:d1:c0:da:3b:ed:6e:19:f9:85:c5:97:a2:64:6b:8f:
85:32:09:82:4d:f5:1f:66:f4:f9:2f:78:94:ac:9e:cd:bc:5a:
cb:70:54:ad:f4:81:fb:d1:13:78:a0:eb:fa:8e:03:3a:9f:cf:
d8:48:93:0d:3b:40:fa:c4:63:b8:a8:24:bb:b6:e4:53:58:60:
bd:b6:2c:bf:87:c3:37:32:dd:87:b5:34:aa:56:d5:ed:6d:52:
bc:b7:ab:54:7a:5d:f2:e4:1c:d6:47:5b:b8:52:3a:a7:39:cd:
1b:08:43:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:47:40 2025 by rpki-client