Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/wSveqLEZpRJ5f0n6DgyTYytrQTA.roa
File: wSveqLEZpRJ5f0n6DgyTYytrQTA.roa (raw, json)
Hash identifier: XTNXRJ7B3yimh7nFxQz9i1Z9OH/uepVpLIO0D1wZXiU=
Subject key identifier: C1:2B:DE:A8:B1:19:A5:12:79:7F:49:FA:0E:0C:93:63:2B:6B:41:30
Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial: 01858218377C76632357A3848B1E92245232
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/wSveqLEZpRJ5f0n6DgyTYytrQTA.roa
Signing time: Thu 05 Jan 2023 13:21:43 +0000
ROA not before: Thu 05 Jan 2023 13:21:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208249
IP address blocks: 2a06:1e81::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:18:37:7c:76:63:23:57:a3:84:8b:1e:92:24:52:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Validity
Not Before: Jan 5 13:21:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c12bdea8b119a512797f49fa0e0c93632b6b4130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:94:93:81:88:cb:f5:90:f6:b6:71:4c:f3:
dc:6a:f5:2e:d5:29:06:b0:2c:5a:6e:52:a0:34:32:
e5:6a:55:65:7e:d4:43:1f:28:95:09:f4:9b:dc:fb:
b2:64:1a:28:bd:3c:a8:cc:ac:c5:6b:e7:c1:d2:47:
eb:6b:47:9b:dd:14:c6:e2:10:c2:ec:54:b8:5f:a5:
28:6e:82:bd:65:93:f9:3b:f5:91:ec:dd:20:21:30:
74:1c:54:ca:7a:a9:5a:c8:fe:10:63:79:1a:86:ab:
1f:f7:86:ba:12:be:5c:79:4f:95:14:22:18:eb:70:
9c:b9:92:35:70:7f:1e:26:8f:69:3d:1d:7a:9f:d7:
df:00:5e:ed:a3:90:95:c2:9e:7d:72:06:5d:3e:40:
37:fd:8e:61:f7:f8:8f:5b:76:65:4b:fb:c9:4e:0f:
70:0d:ad:5d:87:49:59:ca:0f:28:41:03:82:31:22:
df:ac:91:6f:f7:af:1c:21:84:5d:53:af:02:b5:e9:
6e:f0:da:e7:99:69:d0:82:43:fc:42:83:a5:65:74:
0f:b3:f1:76:47:27:c2:ee:ea:5c:24:a2:50:72:65:
1a:f3:fb:74:14:83:50:90:89:c8:94:3a:69:ab:31:
29:9e:b9:cc:f6:90:57:5a:67:b2:4b:8b:43:61:13:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2B:DE:A8:B1:19:A5:12:79:7F:49:FA:0E:0C:93:63:2B:6B:41:30
X509v3 Authority Key Identifier:
keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/wSveqLEZpRJ5f0n6DgyTYytrQTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1e81::/32
Signature Algorithm: sha256WithRSAEncryption
2a:d1:de:fe:12:27:1b:af:93:03:22:28:41:f1:02:6e:99:52:
cd:80:7a:28:c1:7f:29:1e:a5:15:51:eb:fa:32:39:9e:b0:b2:
83:67:2f:b9:b1:2c:5e:5f:66:df:0e:66:5b:6e:8b:bf:75:8a:
02:af:db:ff:eb:75:b4:95:00:a9:2d:04:3d:1b:b1:07:ce:9b:
74:51:00:dd:ee:fe:40:74:a9:6f:73:5a:6b:f3:0d:34:3c:05:
5d:53:53:de:9d:f5:09:0d:ea:39:d7:04:75:b4:90:da:ce:ce:
ee:64:0f:0e:bd:f5:c8:3e:65:0d:40:46:bd:dd:e9:f1:4b:56:
ab:59:4d:3d:15:36:7c:fe:98:66:9a:8f:d2:05:78:8f:19:9a:
46:ad:22:87:cb:21:c0:e7:41:18:7a:6f:5f:80:ac:26:e2:18:
38:14:b9:9a:67:2a:b2:9c:af:d3:92:bb:dc:dd:df:0b:a7:da:
56:fb:29:7d:ab:58:23:55:99:b0:49:cc:40:c8:e4:dd:8c:79:
72:c4:b7:ae:59:2b:ff:ac:79:9b:d4:3e:95:a4:fc:e5:12:f8:
0c:90:e6:84:1b:65:60:2c:4d:3e:47:d8:92:9c:48:d3:96:8f:
af:ef:69:2c:83:ea:3c:96:41:d0:ef:b8:16:4b:8a:19:38:a4:
b0:8d:3e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:28 2025 by rpki-client