Route Origin Authorization
$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a3a2f33362d3438203d3e203438353831.roa
File: 326130373a353463313a3a2f33362d3438203d3e203438353831.roa (raw, json)
Hash identifier: /1qPKuHGOEWdd+JHKHTXXx3cpMb1MFN6YHHzeFTbgZY=
Subject key identifier: AF:44:DC:45:4D:31:88:1C:02:3B:44:C8:BD:D9:95:94:E7:35:9E:16
Certificate issuer: /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial: 136FA601A270538BBE8CAD2C940CB3A41B3EBD0B
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access: rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a3a2f33362d3438203d3e203438353831.roa
Signing time: Thu 19 Oct 2023 03:04:46 +0000
ROA not before: Thu 19 Oct 2023 02:59:46 +0000
ROA not after: Thu 17 Oct 2024 03:04:46 +0000
asID: 48581
IP address blocks: 2a07:54c1::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:6f:a6:01:a2:70:53:8b:be:8c:ad:2c:94:0c:b3:a4:1b:3e:bd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Validity
Not Before: Oct 19 02:59:46 2023 GMT
Not After : Oct 17 03:04:46 2024 GMT
Subject: CN=AF44DC454D31881C023B44C8BDD99594E7359E16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:19:79:7b:aa:7f:45:ac:dc:ce:1d:78:42:d3:
71:8b:eb:48:93:62:de:4f:67:13:de:c1:08:f0:b6:
cd:1a:ea:02:4c:a4:a5:07:6c:9f:5c:a0:ea:8c:93:
84:a1:c6:c6:22:cb:84:7d:47:f5:b0:96:b8:aa:df:
8c:dc:86:73:8a:c0:26:2b:ec:f8:fa:d7:60:e1:33:
b4:91:2e:5e:b0:b6:c2:14:f9:65:10:3f:0d:c9:64:
bd:ec:17:f1:8b:f9:ce:d5:a7:b5:2a:8c:18:91:71:
b0:09:aa:30:ff:47:af:53:d6:61:fd:65:42:d5:1d:
1f:52:9d:19:ff:58:d4:e4:f2:ed:6b:e2:30:03:6b:
c3:e8:40:59:49:dc:a5:f7:c0:a5:41:00:63:45:18:
3f:b0:8c:00:74:25:59:f5:e8:b8:e7:f4:33:44:93:
89:76:e9:2b:2e:ff:c9:f9:f0:c8:c5:d4:df:aa:33:
c2:4b:43:6e:0c:bb:00:09:1c:86:1a:03:a7:95:fd:
b0:da:6e:f0:56:2e:b0:d2:99:f6:8e:90:4f:10:b4:
0d:c0:d3:05:6c:96:20:1d:a3:0d:9a:d8:dd:a7:73:
a4:79:50:6a:9d:50:b7:f4:f8:e2:40:9b:75:cf:d1:
c6:df:5b:28:db:d0:3b:4d:22:52:3a:e0:b5:f7:f5:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:44:DC:45:4D:31:88:1C:02:3B:44:C8:BD:D9:95:94:E7:35:9E:16
X509v3 Authority Key Identifier:
keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a3a2f33362d3438203d3e203438353831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c1::/36
Signature Algorithm: sha256WithRSAEncryption
84:c9:95:28:b7:09:b3:0b:6b:fa:53:2b:15:c6:0c:89:89:87:
10:ed:02:3e:bb:78:ca:e2:49:d7:3e:f7:39:71:1d:85:48:d6:
b7:07:e8:8d:ea:bc:a9:8b:43:b2:11:4d:9a:e5:08:44:02:c5:
e3:15:37:16:6d:87:8d:88:e9:9b:c6:48:9b:c7:c1:7d:c0:3e:
9e:1c:0e:a0:2d:30:38:01:10:69:ac:29:3a:d1:02:f9:6a:4d:
78:9e:71:13:fb:83:34:7e:90:2f:5c:98:f4:5f:99:28:4e:db:
99:c6:f5:41:dd:74:d7:a4:c1:d1:48:7c:8e:1f:ce:f1:40:15:
83:77:d7:81:70:19:bf:c4:e4:20:3e:7c:05:47:37:e4:09:de:
82:49:02:2f:72:ce:e7:cd:da:f7:ff:c9:69:ac:8e:d0:2f:6b:
db:90:39:b9:73:6a:a1:9f:74:cf:84:05:8b:17:f2:3f:ba:a8:
8f:4c:8f:c2:3e:6b:1e:7a:48:33:a5:65:59:25:81:d7:f8:8c:
ed:e4:d4:6a:55:ca:91:d3:4a:1e:1c:22:2d:c6:b8:97:23:55:
72:47:4e:b8:48:8e:d2:14:06:9e:28:e2:53:36:52:e3:5d:4f:
e6:c2:c1:f4:24:46:94:3b:f9:99:44:39:18:48:ab:18:17:6a:
cc:cf:0f:c1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 20:49:49 2025 by rpki-client