Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/DdvQ7-uHwpn5cbi-KoDNNXEMlJ4.roa
File: DdvQ7-uHwpn5cbi-KoDNNXEMlJ4.roa (raw, json)
Hash identifier: cFWzDhgDi2J1Z3M0xWQUNQ6jsYDgRZz0fQc9JeyJGXg=
Subject key identifier: 0D:DB:D0:EF:EB:87:C2:99:F9:71:B8:BE:2A:80:CD:35:71:0C:94:9E
Certificate issuer: /CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Certificate serial: 01856CE612C606CFD2CBE9A07CA59F23D16F
Authority key identifier: C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/DdvQ7-uHwpn5cbi-KoDNNXEMlJ4.roa
Signing time: Sun 01 Jan 2023 10:34:55 +0000
ROA not before: Sun 01 Jan 2023 10:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208818
IP address blocks: 2001:67c:277c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:12:c6:06:cf:d2:cb:e9:a0:7c:a5:9f:23:d1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Validity
Not Before: Jan 1 10:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ddbd0efeb87c299f971b8be2a80cd35710c949e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:13:0b:e5:8e:a4:f6:42:6b:3f:81:e0:81:71:
7c:d8:71:ba:b5:12:68:13:98:d0:1c:29:d0:88:f0:
90:a6:1e:2e:e8:93:be:93:5d:70:3b:ea:31:5f:a8:
35:68:2e:fd:01:06:13:3e:bc:bd:38:f9:bf:59:1e:
f5:44:a8:59:14:c4:9f:8c:07:72:a3:05:e7:b7:fe:
1f:74:4b:35:93:5d:24:a8:94:bc:a3:3f:a0:b5:54:
df:69:37:ea:c3:7b:d7:c9:f1:86:1d:d4:85:12:ec:
72:5c:06:ae:a7:79:b4:9c:d7:cb:ed:7b:5f:c5:29:
06:d5:1c:25:88:66:78:88:72:41:60:27:48:23:48:
9c:dd:fe:6a:62:11:b6:ac:0c:3e:40:f1:0d:c2:04:
00:f9:36:0c:01:b9:89:1e:a8:c0:6b:86:0a:40:8e:
e5:96:ef:56:3f:c2:d0:fa:fd:e2:8f:ae:04:f6:a8:
62:3c:81:c7:1b:72:33:0d:80:ce:cf:5c:83:31:0a:
c0:21:1e:c3:84:50:cb:c6:8b:f8:4f:cd:c3:8f:3c:
53:44:26:4e:b2:31:ac:b6:ae:c1:6c:2b:a7:04:83:
e4:df:de:74:33:b9:d1:f4:28:a5:1e:f5:dd:bf:82:
53:a9:35:37:4f:08:3f:22:c7:f0:e5:b8:44:ea:7f:
4c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DB:D0:EF:EB:87:C2:99:F9:71:B8:BE:2A:80:CD:35:71:0C:94:9E
X509v3 Authority Key Identifier:
keyid:C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/DdvQ7-uHwpn5cbi-KoDNNXEMlJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:277c::/48
Signature Algorithm: sha256WithRSAEncryption
57:be:64:23:15:6e:bb:a6:04:5a:ac:b5:27:a7:12:bf:db:9c:
73:48:b3:66:e0:f1:ce:45:7c:7a:66:b6:bd:ba:b7:e4:bb:34:
dd:9c:4b:2d:ca:17:bd:55:f9:4b:e4:d6:86:58:0b:50:b9:63:
b1:54:bb:6c:1f:52:22:c3:e9:09:f7:7a:24:41:45:09:57:e6:
e4:3b:a8:15:89:ec:a0:90:5e:c6:18:f8:70:af:ef:f8:b5:e8:
6f:fd:e3:27:86:7d:7e:11:6b:af:ee:08:23:ca:dc:13:f3:10:
67:5d:80:19:86:7f:ab:42:24:aa:a6:20:32:81:72:87:f4:2e:
5e:05:76:09:04:2c:59:9a:47:15:4a:87:c1:9f:d8:1b:6e:79:
81:ea:1b:24:e5:79:00:1f:a5:c5:a4:9f:4e:20:b5:33:a6:2e:
59:a0:f1:a0:c1:2b:48:a0:28:45:ea:54:7a:c5:a2:67:76:45:
f5:6d:f0:43:1b:27:c5:a1:da:70:85:bb:5f:20:1a:a8:b9:21:
50:7d:3a:a3:39:f7:6f:44:5e:16:68:81:43:a9:5e:9c:50:18:
5e:17:e8:ab:84:e5:3f:f3:bc:68:cd:ea:e3:07:18:7b:14:27:
cb:6d:ab:1c:81:59:9a:7f:12:66:44:ca:e8:6c:c5:4f:7d:1a:
c3:95:9f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:57 2025 by rpki-client