Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/IJXviMnly8YIB3g4Kz9e5xq-ZtQ.roa
File: IJXviMnly8YIB3g4Kz9e5xq-ZtQ.roa (raw, json)
Hash identifier: FymxNHM3sNYIFUrPhZDivDTgRwXahS+6HTsIhE05+UE=
Subject key identifier: 20:95:EF:88:C9:E5:CB:C6:08:07:78:38:2B:3F:5E:E7:1A:BE:66:D4
Certificate issuer: /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Certificate serial: 01856F5497653256BD2E93D8A9CD26FB33FB
Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/IJXviMnly8YIB3g4Kz9e5xq-ZtQ.roa
Signing time: Sun 01 Jan 2023 21:54:52 +0000
ROA not before: Sun 01 Jan 2023 21:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212430
IP address blocks: 2001:67c:209c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:97:65:32:56:bd:2e:93:d8:a9:cd:26:fb:33:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Validity
Not Before: Jan 1 21:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2095ef88c9e5cbc6080778382b3f5ee71abe66d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:61:f5:6e:35:ba:6c:23:cf:a1:12:52:bc:55:
d6:b4:86:80:02:6b:59:53:cc:a2:27:b7:a9:52:e2:
3b:5d:b0:65:4b:fc:8d:64:e0:b3:fe:aa:8d:fb:a6:
f3:57:3c:3c:5e:b7:88:ff:8c:0c:fb:d5:84:01:c0:
60:81:09:e6:d5:5d:8d:b6:da:1a:7d:c2:d3:e8:27:
e6:d9:09:22:bd:96:ba:b2:3a:27:9e:1c:58:ac:a1:
63:b4:e9:4a:18:0b:6b:42:6c:83:aa:ac:5d:f2:a2:
f7:9a:a2:5c:3a:3f:46:94:7b:73:ef:6a:f8:6f:04:
35:0a:8a:95:26:5e:b4:ea:2f:59:a7:c1:56:52:66:
83:26:48:df:59:44:a5:38:df:a5:f2:4a:53:fe:cd:
f1:e0:88:b4:93:02:8d:c8:ff:ba:bf:8b:a0:a2:9a:
03:7c:23:bc:5c:c4:91:ce:cd:6c:c4:c8:70:c5:f1:
7a:ab:9e:15:c1:b6:48:cb:0f:ce:e2:06:26:f9:a4:
95:9a:47:eb:46:e4:2a:a5:dd:7c:97:38:5a:5c:77:
56:79:9f:cd:75:d9:46:d2:f5:48:f0:25:39:e7:6d:
f9:f4:a0:f4:d1:4e:01:e9:ce:92:b5:39:87:dd:f4:
dc:a1:79:84:02:86:b3:6c:7c:6c:b5:5f:09:6c:17:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:95:EF:88:C9:E5:CB:C6:08:07:78:38:2B:3F:5E:E7:1A:BE:66:D4
X509v3 Authority Key Identifier:
keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/IJXviMnly8YIB3g4Kz9e5xq-ZtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:209c::/48
Signature Algorithm: sha256WithRSAEncryption
04:66:0e:fb:bc:a2:d5:36:36:28:db:28:3c:80:fe:ae:06:29:
df:5c:d1:4d:ef:8c:42:da:da:81:16:37:7f:b2:22:f9:8b:2f:
60:59:13:86:93:ff:f1:6f:26:79:7f:5e:a7:21:d4:83:8b:12:
f9:04:49:1c:3d:e5:d3:f5:85:3f:e8:9f:60:2e:b4:0b:d0:46:
08:88:c5:da:44:65:2d:03:01:fa:8f:56:22:75:a8:75:37:5f:
f3:77:82:ad:de:b4:8e:e4:a9:c1:89:26:20:91:2b:61:6b:eb:
28:76:7b:fa:27:00:7b:2f:d1:5e:87:6d:67:ad:72:49:ea:2c:
5c:b7:8a:62:2d:9f:78:91:ac:4e:0c:4f:33:a9:4b:66:82:ac:
a3:eb:8e:3e:c3:fc:a3:67:3b:82:5b:e2:8a:46:69:4d:5a:f5:
47:43:83:71:d6:ed:85:bd:e6:91:b8:13:ef:b6:b7:0f:83:e7:
0d:42:68:04:c3:c4:9c:d1:e9:0d:62:99:2b:52:90:8e:8e:8e:
fc:0f:2b:e0:3b:37:64:ce:9f:84:b6:58:6b:13:fd:94:04:4f:
e7:73:fb:51:0f:47:6c:52:b0:5d:db:8e:c9:8d:45:8f:a1:5e:
ff:40:85:91:0a:04:28:43:cd:aa:33:51:ec:b3:45:75:10:49:
e0:39:53:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:45:30 2025 by rpki-client