Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/i3Ujs_o6KoSqPxPwf4EjBLUqxjQ.roa
File: i3Ujs_o6KoSqPxPwf4EjBLUqxjQ.roa (raw, json)
Hash identifier: t5NARqVL5Iyg48iyW+Ou7k0+/PdKX0fNBXDN7S9kipM=
Subject key identifier: 8B:75:23:B3:FA:3A:2A:84:AA:3F:13:F0:7F:81:23:04:B5:2A:C6:34
Certificate issuer: /CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Certificate serial: 018BD29F9B69CC0CE10DFBA2A0C082ADF252
Authority key identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/i3Ujs_o6KoSqPxPwf4EjBLUqxjQ.roa
Signing time: Wed 15 Nov 2023 10:55:57 +0000
ROA not before: Wed 15 Nov 2023 10:55:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39257
IP address blocks: 2a13:d500::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:9f:9b:69:cc:0c:e1:0d:fb:a2:a0:c0:82:ad:f2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Validity
Not Before: Nov 15 10:55:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b7523b3fa3a2a84aa3f13f07f812304b52ac634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3b:88:0a:07:bc:0d:19:ef:61:e3:44:97:ca:
22:22:d4:62:09:7c:f6:f4:65:29:a4:74:02:98:0c:
23:4b:0c:84:cc:37:bc:e9:0b:fe:52:79:dd:1a:56:
72:bd:f7:95:af:8e:25:ba:a0:ff:e1:dc:06:a2:d1:
93:ff:8b:1a:bd:7f:99:a9:93:db:ab:e5:6d:06:b0:
73:42:04:f3:49:0b:d8:c8:c6:4e:fe:b7:3e:f1:d8:
cc:b1:75:1a:f4:d5:d5:21:b4:3f:00:f7:d8:5f:3a:
5a:d7:d9:d8:3e:2e:c7:fe:f9:d5:a7:0d:db:de:3a:
c9:94:cc:b0:14:83:ae:e2:d0:f2:b5:4a:02:ac:01:
d3:d7:bd:2a:9d:58:bc:25:cb:fe:19:23:ea:a1:d4:
af:07:5b:87:a0:e2:12:73:81:a8:71:bd:bd:42:c7:
c7:ee:e6:93:ed:b1:56:31:50:09:4d:bf:dd:14:43:
32:f1:f3:cb:c6:ec:52:2c:a7:c8:17:d4:bd:1d:62:
a1:98:e1:d3:a0:ae:2c:3c:f7:a0:4e:a8:09:60:03:
b8:9c:fa:a6:79:9f:05:9b:46:45:e0:de:bf:62:f1:
c1:1e:56:12:d8:9c:ee:9e:3a:cf:05:cb:8c:27:f4:
f2:bc:4b:24:f5:e1:64:28:89:06:8c:9d:b4:56:43:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:75:23:B3:FA:3A:2A:84:AA:3F:13:F0:7F:81:23:04:B5:2A:C6:34
X509v3 Authority Key Identifier:
keyid:AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/i3Ujs_o6KoSqPxPwf4EjBLUqxjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d500::/32
Signature Algorithm: sha256WithRSAEncryption
5a:c3:ec:bc:5a:a4:e8:46:f5:6f:54:db:f0:8e:d6:e2:79:77:
60:5c:66:3e:6d:bf:03:50:90:5a:74:0f:30:9b:73:bc:74:09:
d9:66:53:7e:2b:fa:a2:d4:0a:55:95:25:cb:09:d5:d1:e6:1a:
64:fb:54:75:e7:ea:44:7a:0b:19:48:be:c7:97:a6:46:44:b6:
b0:7a:b6:fa:93:79:8a:96:c5:b6:a7:74:b6:56:b6:c0:73:5e:
fd:32:e5:e5:9e:9c:7f:6f:f7:af:31:6d:70:a6:f1:c7:82:5c:
6e:1a:39:fd:74:4a:6d:d3:fb:3e:41:e3:56:3b:22:34:52:bf:
4a:59:cc:9a:a5:91:b3:07:85:fe:1a:34:b4:b3:1a:06:44:bb:
63:76:4b:1e:a9:36:af:33:91:e5:f7:a8:28:b4:b7:c7:5c:e6:
b8:0c:72:0e:52:54:7c:09:e3:93:c8:fd:b2:23:c5:01:6c:fb:
6d:47:38:93:bf:2e:d2:0a:20:cf:97:03:7c:4d:57:51:12:ab:
0a:54:44:28:5b:d9:fd:d1:15:a7:3f:5a:05:9e:62:7d:96:b8:
8c:a0:0a:30:20:a9:0a:33:e2:f8:c9:b2:21:f6:19:0f:aa:01:
64:97:81:4d:4c:8a:4e:2c:d4:10:b7:dd:ac:af:7e:b2:b8:b0:
a4:08:9c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:11 2025 by rpki-client