Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/8J_lk8nTLcB08bL-k77gRbCswE0.roa
File: 8J_lk8nTLcB08bL-k77gRbCswE0.roa (raw, json)
Hash identifier: 822tnXR25J/WwJbzeq6dCynxqJdUFsVTHD/xueoc4Xo=
Subject key identifier: F0:9F:E5:93:C9:D3:2D:C0:74:F1:B2:FE:93:BE:E0:45:B0:AC:C0:4D
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 018557AA88F774960D10F3A63B47B2980FFF
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/8J_lk8nTLcB08bL-k77gRbCswE0.roa
Signing time: Wed 28 Dec 2022 07:37:52 +0000
ROA not before: Wed 28 Dec 2022 07:37:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56841
IP address blocks: 2001:67c:acc::/48 maxlen: 48
2001:67c:2788::/48 maxlen: 48
2001:67c:ad0::/48 maxlen: 48
2001:67c:ac8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:57:aa:88:f7:74:96:0d:10:f3:a6:3b:47:b2:98:0f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Dec 28 07:37:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f09fe593c9d32dc074f1b2fe93bee045b0acc04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:87:c8:e2:78:73:8a:c2:f0:e2:6d:58:35:
e6:65:ea:ce:a7:aa:58:8e:aa:e5:56:22:df:79:1c:
21:53:16:ce:cb:41:8c:c2:64:27:c4:ab:a7:c8:5f:
42:de:92:27:5d:c5:72:50:bc:71:0e:98:7d:c2:5b:
52:72:59:f2:5a:44:e0:88:3e:4e:ae:09:0c:69:46:
c5:22:92:b0:f4:a1:d1:85:c4:92:ef:c5:99:93:13:
f6:08:98:f8:10:80:41:d1:c9:eb:31:27:67:65:0c:
33:31:2c:b2:31:dc:88:eb:10:5b:2b:86:0b:b5:8a:
d8:6a:31:f5:cb:18:39:36:32:2e:33:82:b6:37:be:
32:f4:01:6e:81:ae:0d:7d:79:16:83:67:8b:35:f0:
09:4a:ab:83:48:bd:ad:2a:f1:56:a5:35:b5:f7:77:
0d:10:d0:4a:d0:67:22:a8:cf:ce:bf:35:05:da:25:
37:60:09:86:1b:e8:de:2c:88:55:44:06:1d:cd:e7:
c6:54:95:5e:02:ea:7e:9d:81:12:d5:3c:05:3d:e4:
7b:12:09:50:ff:07:60:4e:12:0a:70:4b:29:8d:50:
f1:b7:14:8f:68:81:0d:26:b7:f2:73:0a:2b:79:e6:
9d:a4:94:ae:b5:c6:c7:d8:53:20:a8:84:25:0d:74:
70:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9F:E5:93:C9:D3:2D:C0:74:F1:B2:FE:93:BE:E0:45:B0:AC:C0:4D
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/8J_lk8nTLcB08bL-k77gRbCswE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:ac8::/48
2001:67c:acc::/48
2001:67c:ad0::/48
2001:67c:2788::/48
Signature Algorithm: sha256WithRSAEncryption
32:8c:4c:99:67:59:d9:98:4c:5e:e8:7c:95:9d:a1:72:d1:4d:
6a:16:f2:b5:c0:40:90:58:ce:56:11:03:60:f2:91:86:2e:19:
f5:0d:92:75:17:33:42:d3:c3:87:c0:2e:48:62:c3:07:5e:4b:
f7:1d:76:e3:7d:6c:b2:51:9d:f1:42:d5:dd:b4:17:93:88:62:
2c:0a:1a:89:90:c6:e5:99:fb:83:bd:35:11:09:45:63:c7:5d:
96:7d:53:48:e6:bf:e6:63:78:db:45:2e:8c:e6:a6:5a:ba:4e:
a7:7c:72:b2:40:67:2a:a5:4e:7c:7c:57:31:e3:17:a3:f2:84:
40:8f:97:96:6d:d7:25:10:9a:48:bf:62:7a:2b:1e:d6:8b:fb:
c7:cf:cf:f4:5f:aa:0d:e3:71:a8:93:fe:31:53:34:41:a8:48:
76:94:d2:c4:ce:43:7b:c2:b9:4d:45:01:cb:72:ae:a0:cb:f4:
c6:61:32:8b:92:4f:af:d7:ed:a0:91:fe:05:48:9f:08:60:44:
1c:10:ea:5f:9e:fb:44:de:95:01:3c:2a:3f:c1:77:a0:c1:6c:
2c:a7:f3:85:31:d0:ee:34:a1:e7:03:f6:00:5f:af:e7:c3:30:
be:78:4c:16:37:5e:6a:f3:ea:5a:13:d9:6e:eb:54:3f:8b:29:
69:58:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:06 2025 by rpki-client