Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6gGGxP8IegJ0njDC6uxvjWjZyGg.roa
File: 6gGGxP8IegJ0njDC6uxvjWjZyGg.roa (raw, json)
Hash identifier: S66p6yadP3N1g8AFeSxUdlObsvLVO/e8qEWCZfJXRjo=
Subject key identifier: EA:01:86:C4:FF:08:7A:02:74:9E:30:C2:EA:EC:6F:8D:68:D9:C8:68
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246E1BC9E5B4A69A0DE294ABE7A596D
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6gGGxP8IegJ0njDC6uxvjWjZyGg.roa
Signing time: Mon 02 Jan 2023 11:38:45 +0000
ROA not before: Mon 02 Jan 2023 11:38:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211738
IP address blocks: 2a0c:9a40:82d0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:e1:bc:9e:5b:4a:69:a0:de:29:4a:be:7a:59:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea0186c4ff087a02749e30c2eaec6f8d68d9c868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d5:36:9f:43:a9:5b:f5:89:3c:0f:c4:8b:db:
cb:c6:c2:9e:b7:2a:ed:0d:b1:30:d0:93:0b:47:86:
b4:47:d8:76:cb:bb:b4:b2:24:20:e2:04:9c:22:55:
ed:96:e4:30:ae:15:2c:8d:96:27:fc:00:40:e6:b3:
f1:b0:fb:8c:d0:ca:88:75:1d:e7:86:a9:dc:05:7b:
b6:e4:53:21:98:99:55:92:37:00:c7:71:96:48:24:
fb:f4:fa:86:6f:cb:0a:fe:13:0c:cb:5d:d1:e3:80:
b7:da:fc:20:b5:51:9b:16:9e:88:ff:55:d7:85:64:
09:3a:98:5a:fa:ef:e0:3c:19:dc:ff:a5:20:2c:32:
f2:e2:8a:65:1c:44:3e:31:a5:f5:3c:6f:99:de:cc:
d4:11:68:ac:b7:d2:05:78:69:00:2a:aa:39:48:a4:
79:cf:38:50:94:b1:c4:31:c9:17:70:13:7f:b3:1f:
b2:01:25:4d:82:bb:2e:88:8c:78:45:b6:f8:99:e6:
6e:f2:10:21:54:bd:de:4b:96:b9:68:43:17:c9:0e:
08:14:f6:fe:0f:31:89:94:43:6d:eb:11:38:b4:d2:
49:2d:03:b5:df:89:55:dd:30:47:b9:25:18:db:c0:
29:0f:28:2f:92:5b:87:7e:85:3b:34:ba:34:87:9b:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:01:86:C4:FF:08:7A:02:74:9E:30:C2:EA:EC:6F:8D:68:D9:C8:68
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6gGGxP8IegJ0njDC6uxvjWjZyGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:82d0::/48
Signature Algorithm: sha256WithRSAEncryption
60:4c:7a:f0:1e:83:c7:09:f2:46:a9:c2:fc:a7:b2:b1:34:de:
1b:2f:5b:bb:fd:2f:17:c4:aa:80:ee:7e:8b:44:78:43:6a:5f:
43:93:f4:93:b6:2f:fb:0b:ae:f3:7d:3b:74:45:b5:29:3a:2b:
6c:9d:77:c2:66:c5:9f:da:b1:4a:ae:11:72:82:dd:91:57:41:
6a:8e:9b:65:51:af:a2:45:7c:23:8b:72:66:27:28:56:78:e8:
08:5b:50:c2:94:7b:5d:54:e0:22:f8:0a:a6:f3:63:9c:db:6f:
31:99:94:c7:34:07:90:1d:f0:f2:b3:c8:55:77:ee:a7:b6:64:
aa:58:2d:9e:e4:88:79:43:5b:9c:22:7e:65:2e:8f:cc:8d:e8:
59:31:cf:e9:a3:95:05:ee:96:35:22:70:b0:66:2b:44:03:da:
8f:6d:43:5b:fd:8d:77:09:9b:d2:f7:99:a2:47:55:26:15:2b:
9a:59:d9:a7:e9:d3:3b:7b:8d:e1:5a:4c:d3:99:b6:2d:c1:2f:
47:a9:c6:f2:6a:7f:40:40:c4:7e:3a:f2:20:a0:98:6e:52:34:
83:56:f1:a7:e3:9c:85:97:b1:35:10:1c:f9:e8:d3:e7:7f:5e:
64:9e:9e:20:b9:b3:00:74:35:28:cb:dc:85:77:6a:45:78:10:
e6:5f:bd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:38 2025 by rpki-client