Route Origin Authorization
$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a363030303a3a2f33362d3438203d3e203438353831.roa
File: 326130373a353463313a363030303a3a2f33362d3438203d3e203438353831.roa (raw, json)
Hash identifier: ZdfBjqSs7b9T3DWp5wapDNPihse/6uJe1tjqiGCP9rY=
Subject key identifier: AF:65:85:A7:F4:1D:CC:22:84:C4:A1:51:0F:AE:C4:31:54:EB:2B:BB
Certificate issuer: /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial: 413C70FD4BF10953A8C4190810836515A7FCD04D
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access: rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a363030303a3a2f33362d3438203d3e203438353831.roa
Signing time: Mon 06 Nov 2023 08:55:40 +0000
ROA not before: Mon 06 Nov 2023 08:50:40 +0000
ROA not after: Mon 04 Nov 2024 08:55:40 +0000
asID: 48581
IP address blocks: 2a07:54c1:6000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:3c:70:fd:4b:f1:09:53:a8:c4:19:08:10:83:65:15:a7:fc:d0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Validity
Not Before: Nov 6 08:50:40 2023 GMT
Not After : Nov 4 08:55:40 2024 GMT
Subject: CN=AF6585A7F41DCC2284C4A1510FAEC43154EB2BBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:d2:de:a6:31:c4:fa:d9:c1:ab:ec:ea:4b:
31:e5:4c:9b:91:02:b1:ae:8e:67:89:ff:33:e9:f7:
b3:f9:df:18:51:54:e4:e1:bb:9a:74:58:5b:1b:02:
ec:65:5d:64:fc:93:b3:4f:8d:1e:83:f5:77:12:43:
a0:96:ec:9b:b0:63:24:9a:72:2e:e5:52:4d:50:dc:
af:c2:b1:3a:66:de:4a:3c:0d:90:6a:13:80:bb:eb:
fb:46:11:27:0a:4b:dc:0d:15:2c:b1:e3:71:4e:4d:
1f:00:11:f8:96:9f:56:4a:f2:6f:cf:00:c4:3f:76:
42:04:56:8c:5b:d4:4f:03:5b:f6:40:46:cc:04:82:
a6:f0:e1:4d:4d:ac:e8:df:a9:e5:77:b5:dd:fb:18:
e7:a9:ae:46:a7:97:c4:13:da:45:0f:54:ac:8d:b8:
60:15:b2:0b:a2:5e:35:55:67:14:5e:70:b2:e2:47:
48:31:93:b8:19:10:f8:36:f5:7f:fd:cd:f7:14:73:
a8:84:73:e2:b1:a7:71:c4:c8:c7:25:81:be:04:e2:
a9:d8:d0:46:06:3f:a4:33:fa:4c:9e:be:f1:8e:cd:
85:06:f5:b9:eb:d6:fc:a3:6d:00:0e:6b:ec:1e:9f:
0c:38:dd:a1:b4:d2:25:4c:5c:9b:25:72:b7:56:d9:
85:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:65:85:A7:F4:1D:CC:22:84:C4:A1:51:0F:AE:C4:31:54:EB:2B:BB
X509v3 Authority Key Identifier:
keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a363030303a3a2f33362d3438203d3e203438353831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c1:6000::/36
Signature Algorithm: sha256WithRSAEncryption
96:11:c1:5e:e9:c8:9b:95:18:90:40:70:42:e2:71:00:ba:4c:
b6:99:15:e4:7b:34:dd:30:48:46:be:1c:26:48:05:25:40:9d:
ba:49:f2:12:ea:aa:fa:89:12:30:bd:29:e0:89:f1:c8:4a:4b:
82:41:fc:6c:df:70:8d:58:ba:9c:cc:c1:a7:ed:b4:6f:35:26:
15:e3:0a:96:a5:c0:48:d5:9f:49:4b:e8:5f:89:5f:ae:5d:e1:
5d:93:9f:61:32:ba:a4:90:ab:b8:6d:15:3e:17:99:09:1f:4a:
d9:89:14:d5:3f:48:ea:3e:b2:4f:63:8d:f9:99:84:7d:6c:1b:
f3:cf:b7:d7:1e:d9:0c:cc:29:c6:57:71:17:36:57:ff:b1:90:
48:6d:8e:37:16:fb:c6:cc:5d:f5:11:98:ac:4d:71:d3:ed:25:
40:5c:04:5a:6b:a8:b8:fd:4f:b0:01:d6:08:92:a8:58:41:30:
06:d2:f8:7e:96:85:6e:7f:0f:a2:d9:31:1e:de:a3:46:b0:f7:
81:79:2f:7d:9f:c7:7d:52:50:87:8f:f9:1e:cb:f9:df:e1:04:
4a:41:39:20:26:fa:cd:f5:03:18:2c:23:5a:e4:34:5d:03:5c:
4a:ff:60:2d:bc:7e:52:1e:cd:cd:b4:70:15:d0:bf:69:05:53:
99:74:60:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:58:19 2025 by rpki-client