Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/Vi4a-XZY_8PCYuxmz4wz3XYOQTE.roa
File: Vi4a-XZY_8PCYuxmz4wz3XYOQTE.roa (raw, json)
Hash identifier: LW1nP8ZSNMsIY7QqEcjz4kSaSSbFtCe5qDkNgXI6ba4=
Subject key identifier: 56:2E:1A:F9:76:58:FF:C3:C2:62:EC:66:CF:8C:33:DD:76:0E:41:31
Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial: 018872986CB6E7FEB8DA7D8D4F1A25115866
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/Vi4a-XZY_8PCYuxmz4wz3XYOQTE.roa
Signing time: Wed 31 May 2023 16:16:11 +0000
ROA not before: Wed 31 May 2023 16:16:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26073
IP address blocks: 2a0d:1a40:edef::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:98:6c:b6:e7:fe:b8:da:7d:8d:4f:1a:25:11:58:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Validity
Not Before: May 31 16:16:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=562e1af97658ffc3c262ec66cf8c33dd760e4131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:3d:84:d1:18:be:7f:7f:35:7c:e3:34:ea:
4e:b3:26:90:97:c1:2e:29:c1:00:20:15:23:18:27:
89:9f:1f:f7:ff:75:91:63:ec:ce:13:45:fa:bc:85:
2f:01:6a:27:9d:fe:cb:f7:af:e1:c3:61:d1:29:85:
f1:56:26:88:41:42:52:a7:da:d2:4d:f4:fa:e6:9e:
fb:13:d7:62:93:4e:39:22:9e:b8:2d:42:c0:25:60:
43:4d:af:1d:fc:ef:6c:64:b7:36:d1:66:e6:e0:15:
32:e1:eb:54:f5:69:34:5c:b9:7e:0c:dc:94:25:2b:
b6:92:db:64:85:92:09:ed:d6:07:95:4c:1d:47:6e:
6c:aa:a6:e6:a1:ed:00:1a:2d:c1:a1:57:14:29:86:
26:c2:a6:e8:f1:20:e2:88:52:e1:7e:ff:da:f2:00:
09:8c:68:c8:fc:66:ce:ac:e9:24:39:a6:13:5a:c6:
7c:a1:f2:50:44:56:88:43:ff:5a:c7:28:29:d4:af:
b3:b5:95:4a:6b:1b:6a:fd:97:cf:1a:6e:18:85:a0:
20:bb:1e:f8:93:f0:66:0e:42:2b:b7:f0:c1:7f:7c:
42:dd:94:f1:6a:03:ce:79:77:8a:c8:6e:2a:73:ee:
30:4b:ec:1d:49:22:f2:ff:63:4a:9d:8b:4c:63:dd:
32:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2E:1A:F9:76:58:FF:C3:C2:62:EC:66:CF:8C:33:DD:76:0E:41:31
X509v3 Authority Key Identifier:
keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/Vi4a-XZY_8PCYuxmz4wz3XYOQTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1a40:edef::/48
Signature Algorithm: sha256WithRSAEncryption
2e:f1:29:2d:c0:c2:cb:ba:36:da:17:0e:43:e1:5d:86:ca:9c:
a2:76:3d:75:c2:9a:65:b3:7f:6d:bd:97:82:80:6f:e6:0f:00:
ad:4d:19:f2:19:21:de:cd:00:ec:2f:67:37:98:81:8a:4f:28:
a1:61:84:0a:c6:ed:33:2d:78:5e:cf:b3:c4:70:11:0a:a8:f4:
2b:d0:d5:fb:b0:8f:9b:31:c3:9d:d2:d6:a7:95:bf:7a:86:87:
c8:b5:49:d0:50:5e:d2:b7:4f:20:d0:00:75:96:4d:58:33:ee:
dd:9d:2b:59:e5:5e:fd:7a:90:0e:32:74:61:64:33:c3:80:65:
ee:51:d6:6a:25:72:18:d9:84:36:18:7e:1f:71:0e:70:60:49:
0e:b3:a4:c6:9c:31:51:a1:f6:c2:b4:8a:f5:02:3f:8f:29:75:
72:5c:fe:b2:cc:04:90:e6:c4:d4:03:5d:1c:c4:80:58:61:1b:
10:98:7e:e8:39:08:27:a6:8b:50:ca:8c:9e:44:06:1c:91:39:
33:3e:80:4d:93:82:17:52:78:38:69:2e:9b:e7:0a:a3:76:7c:
bc:1c:67:1b:f1:ae:d2:1d:c4:09:e4:43:dc:28:07:3d:3b:a1:
53:43:fa:eb:02:5a:50:f5:ea:e4:b2:e7:3f:eb:fb:9b:94:99:
00:38:7f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:53:36 2025 by rpki-client