Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/8U_yVugWFporbC9sntroTWkEFsw.roa
File: 8U_yVugWFporbC9sntroTWkEFsw.roa (raw, json)
Hash identifier: BhThPfW4LwL7co56houRn5Zjprpuy9VvepS28L1pGNA=
Subject key identifier: F1:4F:F2:56:E8:16:16:9A:2B:6C:2F:6C:9E:DA:E8:4D:69:04:16:CC
Certificate issuer: /CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Certificate serial: 0187985AD2171EFBAF3A5F2FEC3180A37CF8
Authority key identifier: FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/8U_yVugWFporbC9sntroTWkEFsw.roa
Signing time: Wed 19 Apr 2023 07:11:41 +0000
ROA not before: Wed 19 Apr 2023 07:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48652
IP address blocks: 2a13:d080::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:5a:d2:17:1e:fb:af:3a:5f:2f:ec:31:80:a3:7c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Validity
Not Before: Apr 19 07:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f14ff256e816169a2b6c2f6c9edae84d690416cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:bd:cd:5f:80:8c:d6:f9:6f:97:3d:84:16:
39:4d:d6:2e:1c:4a:01:71:03:37:ab:8c:2c:ee:ac:
24:7c:0c:59:46:18:83:4a:d2:45:48:65:b3:18:cf:
17:0a:33:ea:3e:7e:ed:a4:52:2f:2a:3c:b5:35:87:
98:37:f3:24:bb:51:e7:26:1e:8b:a3:19:35:2b:2b:
47:a3:16:30:1a:5c:95:fe:6e:88:6f:c8:70:6e:41:
a2:85:c3:a7:80:10:46:f7:f8:a4:4a:6c:a1:a6:a8:
09:26:22:2f:f0:11:67:6c:4f:e3:f1:ab:e8:0f:ea:
cf:83:3c:5d:3b:48:da:b3:88:84:b4:65:e7:d3:3d:
35:b5:58:af:b3:1f:b3:ee:2d:e0:ae:a4:ab:4d:be:
6b:c6:90:5c:4f:11:a3:ec:aa:66:42:c6:b7:64:4b:
c8:67:b8:58:8b:e2:64:92:39:8b:0c:bf:5e:cb:2f:
cc:b8:8a:3e:b6:d1:ad:30:78:21:71:d9:62:f3:20:
ab:97:03:30:a1:7d:b9:0b:7d:83:3e:74:a3:39:8c:
e2:2f:1d:b0:c5:96:e4:78:e0:fa:04:46:bd:a9:d0:
94:f5:ae:13:ea:73:4d:3b:26:af:66:c3:6a:60:56:
7b:c1:69:f4:6b:bf:1b:4e:c1:96:c5:55:22:95:17:
e8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4F:F2:56:E8:16:16:9A:2B:6C:2F:6C:9E:DA:E8:4D:69:04:16:CC
X509v3 Authority Key Identifier:
keyid:FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/8U_yVugWFporbC9sntroTWkEFsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d080::/29
Signature Algorithm: sha256WithRSAEncryption
06:bf:61:f4:d7:40:35:37:0c:a7:8e:49:37:1e:a2:fe:51:04:
2f:aa:f8:8d:46:46:78:27:74:85:7f:ba:82:3d:c1:2d:7e:ab:
5a:0f:f9:f3:42:48:c2:79:8c:1d:56:f4:64:1c:c7:06:1b:6f:
db:c2:10:e8:ee:59:46:1b:8c:14:3c:0c:cc:9f:4d:76:ec:73:
ef:3e:49:2f:10:60:99:3a:64:7c:55:85:8f:f3:83:5c:85:45:
0f:e9:ab:49:de:4b:0b:da:c2:13:35:3e:a1:28:4e:bf:0a:52:
98:af:c5:d8:0a:37:b9:f6:d3:c0:7e:d6:1e:a8:c6:33:b2:f6:
a8:d0:e9:d5:ad:75:98:83:71:36:b2:3e:3e:c6:dc:d7:a8:a4:
db:18:c5:af:4f:ec:8f:a9:0e:3f:e5:d4:f3:ce:fd:01:43:a9:
8d:19:22:a4:b0:71:a1:0b:75:e6:04:47:e3:58:dc:f2:d2:15:
d9:9e:98:73:08:38:4b:6e:e5:1e:48:1e:f8:c9:dc:ea:46:f7:
90:17:13:7d:82:7a:04:c3:b7:3e:f8:b4:7b:74:1b:93:8f:d0:
d5:f0:cb:6d:c7:8e:95:61:57:11:e5:7a:86:f4:e9:c5:a9:9f:
8b:43:47:19:73:fe:dd:f2:87:dd:29:d2:56:d6:23:54:a7:75:
29:4f:0e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:46 2025 by rpki-client