Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/0e3U0s-doC4X4rIW_TMPS3vwDps.roa
File: 0e3U0s-doC4X4rIW_TMPS3vwDps.roa (raw, json)
Hash identifier: RTkFtd8KhlQcp1hARxHX6bCUnJQMpFxcP//8EBreYew=
Subject key identifier: D1:ED:D4:D2:CF:9D:A0:2E:17:E2:B2:16:FD:33:0F:4B:7B:F0:0E:9B
Certificate issuer: /CN=b691d00bdb626ae57307d5cd4e8addd9475680b3
Certificate serial: 7DF808
Authority key identifier: B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/0e3U0s-doC4X4rIW_TMPS3vwDps.roa
Signing time: Sat 01 Jan 2022 03:51:08 +0000
ROA not before: Sat 01 Jan 2022 03:51:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207583
IP address blocks: 2001:67c:2d34::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8255496 (0x7df808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b691d00bdb626ae57307d5cd4e8addd9475680b3
Validity
Not Before: Jan 1 03:51:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1edd4d2cf9da02e17e2b216fd330f4b7bf00e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:81:a6:08:fe:28:f2:da:50:5c:21:da:7d:b3:
a6:29:ff:bd:00:00:7a:8d:f8:2f:09:e0:c0:56:12:
ba:d4:c7:bb:b5:6c:d6:5f:c5:29:23:74:2f:f8:2b:
9b:a5:34:22:9b:a7:1d:16:23:be:55:dd:43:70:86:
de:f0:cc:40:bf:07:e4:a7:f6:85:64:e5:3e:eb:8b:
b4:b3:f4:3b:90:a0:46:7e:9a:ef:15:a2:3c:f6:f1:
c8:07:99:fe:33:2f:af:53:a7:22:4d:d7:97:fa:8a:
ba:b4:9e:35:c2:b7:6a:e4:12:50:9f:ea:ca:16:d2:
06:43:8f:2a:a8:46:b2:4d:37:75:e1:71:06:10:dd:
35:90:8d:37:ac:a7:c8:9b:a7:7b:12:28:11:f4:73:
03:dc:88:bf:91:0d:85:8b:9c:4f:40:49:53:ef:2a:
c2:ef:e8:e3:46:a0:a3:66:17:c6:4d:ab:d7:c8:20:
5d:0f:69:89:ce:e6:49:b0:2e:19:de:00:ea:8e:bb:
48:10:87:d8:2d:c8:88:cb:36:c6:44:65:74:e5:0d:
1a:7f:dd:6d:bd:35:f4:87:56:2b:57:1a:46:7c:fd:
b5:55:86:cb:db:f9:dc:5a:9d:be:1b:00:30:76:a9:
c7:d0:5b:68:ce:8a:16:f1:00:cb:b4:e8:1d:70:94:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:ED:D4:D2:CF:9D:A0:2E:17:E2:B2:16:FD:33:0F:4B:7B:F0:0E:9B
X509v3 Authority Key Identifier:
keyid:B6:91:D0:0B:DB:62:6A:E5:73:07:D5:CD:4E:8A:DD:D9:47:56:80:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpHQC9tiauVzB9XNTord2UdWgLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/0e3U0s-doC4X4rIW_TMPS3vwDps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3e3d08-e4c5-4f3d-be01-450ad55d325a/1/tpHQC9tiauVzB9XNTord2UdWgLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2d34::/48
Signature Algorithm: sha256WithRSAEncryption
18:46:35:aa:63:c9:09:6e:03:42:86:3a:43:0f:42:f5:f3:c1:
b7:7b:57:c4:59:c1:05:cd:a1:a0:35:d2:aa:c7:d5:46:bf:7c:
7f:6b:6f:db:ab:14:a8:41:08:87:21:13:28:c5:38:f6:6e:99:
f1:a0:45:50:b5:13:83:d2:12:96:5a:bf:b8:d7:4f:98:06:22:
27:b8:81:17:7e:c5:22:e6:cf:92:d7:db:91:76:f3:3c:1f:e2:
e9:96:cc:3b:0f:9c:6c:17:c8:b5:26:76:fd:a7:e0:de:56:0d:
77:e3:43:80:ce:0c:02:4d:d4:97:93:d7:b2:47:94:10:d7:ef:
d9:b8:64:06:05:b4:eb:dd:91:1e:91:ff:36:3e:93:c5:71:38:
b1:f9:70:0f:46:21:ab:78:8c:3e:b6:65:e0:55:9e:fd:51:4a:
d3:82:ac:20:ae:84:6c:95:cb:7f:b9:e3:78:41:b7:76:e3:0d:
8b:9c:7c:30:5a:21:5f:c2:a2:a8:4a:e9:d1:f1:f9:e3:b2:ca:
d2:d2:2d:80:87:a0:6c:fe:91:00:4d:98:ef:76:37:80:49:9a:
75:b8:1e:53:bf:74:fe:c5:65:c0:83:10:1c:1a:8e:f7:b9:5f:
47:0c:ec:10:0b:0f:19:57:40:bb:ab:17:a3:74:fd:46:61:33:
34:d9:5d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:24:22 2025 by rpki-client