Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/xvuk34vR5lLuvauka0M09qZ8Ttc.roa
File: xvuk34vR5lLuvauka0M09qZ8Ttc.roa (raw, json)
Hash identifier: MjWMowHGw1+FijFrH8rwsjPOPdyqUTVXIXTN5rtriEg=
Subject key identifier: C6:FB:A4:DF:8B:D1:E6:52:EE:BD:AB:A4:6B:43:34:F6:A6:7C:4E:D7
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 018BAEB98AED71C493182F263822837246BB
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/xvuk34vR5lLuvauka0M09qZ8Ttc.roa
Signing time: Wed 08 Nov 2023 11:37:57 +0000
ROA not before: Wed 08 Nov 2023 11:37:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206873
IP address blocks: 2a11:5a47::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:b9:8a:ed:71:c4:93:18:2f:26:38:22:83:72:46:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Nov 8 11:37:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6fba4df8bd1e652eebdaba46b4334f6a67c4ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:f4:87:ac:d5:59:47:8a:ff:75:0c:f1:8f:
86:f8:74:7c:56:1c:eb:21:f7:5a:6a:b8:99:4e:6b:
6c:2c:b8:7c:98:f0:bc:e5:48:1d:e4:70:e8:7e:7e:
b7:9a:98:79:1b:f1:3e:f4:d5:ec:62:ec:ce:50:66:
48:d9:10:4f:52:04:9a:f1:e5:59:c7:62:d6:24:42:
da:4a:a0:71:5d:39:32:68:bd:47:14:91:bc:9a:cd:
77:96:3f:08:77:bf:a8:c7:ba:5c:b5:5b:ce:59:3b:
67:1f:c4:b7:06:29:50:96:db:05:ab:22:41:2b:69:
72:00:38:f3:9c:5c:bb:4d:83:c4:ef:50:1d:50:14:
7c:17:96:38:71:34:5b:4a:0e:4c:67:c0:d9:30:cc:
e4:c9:8f:b7:15:87:ea:9a:5e:d5:16:b8:8c:6d:60:
03:0d:5f:64:2e:76:52:e5:84:83:0e:e6:6f:6e:18:
26:7e:a6:4b:87:15:a3:80:e7:c9:0c:1e:ff:47:ad:
43:24:be:ac:8d:62:ca:cb:72:93:63:94:a0:d1:37:
b8:98:5c:5a:5b:39:58:d1:4a:d0:f7:fa:d9:34:fe:
5f:f6:94:37:09:4c:80:e4:64:5e:3f:33:45:0c:58:
7d:45:e6:fe:60:d1:28:d9:ce:cf:ec:ed:f3:6d:2f:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FB:A4:DF:8B:D1:E6:52:EE:BD:AB:A4:6B:43:34:F6:A6:7C:4E:D7
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/xvuk34vR5lLuvauka0M09qZ8Ttc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5a47::/32
Signature Algorithm: sha256WithRSAEncryption
c1:5c:9c:74:c5:2a:92:a7:22:41:69:42:05:2d:af:a8:59:6f:
3b:0d:05:76:47:83:ad:36:65:f4:3f:6c:4a:c3:95:12:4d:8f:
15:1a:6b:e3:00:4c:1e:23:d8:65:58:e8:69:8b:5b:79:2b:10:
23:70:af:69:8a:68:e6:cf:62:cf:77:dd:e6:b2:e1:45:b0:b8:
9c:a7:1a:24:eb:ec:61:ae:fc:fc:5c:e5:86:5b:01:e0:94:0c:
02:63:06:a7:50:87:21:ce:a3:66:2f:51:59:ab:ca:8f:ea:4b:
7b:fc:ea:3e:19:24:e1:4a:69:2d:ae:ae:d8:cb:d5:f0:89:34:
ba:c7:60:4e:c4:9e:d5:e3:6f:b2:43:7d:ea:88:e4:39:22:11:
54:c2:14:65:aa:16:c7:e2:3b:51:a1:01:ff:27:a9:81:54:3c:
fc:e0:6e:77:dd:93:b0:af:a5:59:d9:b7:69:a4:bc:fb:5c:92:
c3:08:c2:ee:a7:95:7a:b6:1a:26:6b:db:53:16:41:d3:62:42:
63:97:3d:eb:87:fb:af:b9:fe:f1:73:6c:50:9f:9f:b5:d1:5d:
43:40:f5:df:ff:24:7c:07:8f:3e:36:bb:77:27:7b:54:b9:30:
54:07:5a:4a:15:20:1c:48:6a:78:bb:7d:ab:ed:c4:8e:07:a6:
98:ed:43:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:04 2025 by rpki-client