Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/My7Wf3g6tM3XOF-jF9G5eWe9dKE.roa
File: My7Wf3g6tM3XOF-jF9G5eWe9dKE.roa (raw, json)
Hash identifier: HyNfHnitBHEyWfp5O4bgIGJuGcfpKjPn475A28D5Xfs=
Subject key identifier: 33:2E:D6:7F:78:3A:B4:CD:D7:38:5F:A3:17:D1:B9:79:67:BD:74:A1
Certificate issuer: /CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Certificate serial: 018650CFFBA52F4316B6B9ED841F9721CEA0
Authority key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/My7Wf3g6tM3XOF-jF9G5eWe9dKE.roa
Signing time: Tue 14 Feb 2023 16:44:12 +0000
ROA not before: Tue 14 Feb 2023 16:44:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207278
IP address blocks: 2001:678:cd8::/48 maxlen: 48
2001:678:cd0::/48 maxlen: 48
2001:678:cd4::/48 maxlen: 48
2001:67c:15c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:cf:fb:a5:2f:43:16:b6:b9:ed:84:1f:97:21:ce:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Validity
Not Before: Feb 14 16:44:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=332ed67f783ab4cdd7385fa317d1b97967bd74a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:47:b0:18:be:2e:87:ee:17:cc:be:bf:f8:
ae:68:09:9f:21:c8:3f:bf:ff:73:75:09:2d:df:72:
50:65:a2:f7:c1:f3:8b:6b:ee:00:b4:b4:db:22:94:
d4:5e:a5:55:6c:27:73:93:2f:f4:e4:68:9c:00:e0:
9b:a7:32:b4:49:f7:e3:36:12:c4:65:f4:97:e5:3a:
4f:5f:4d:28:7b:0c:ba:6e:55:ab:28:70:8f:70:69:
f6:c0:67:07:5b:6a:14:dd:30:4b:10:7c:fb:4d:87:
6b:36:08:ea:57:90:dc:7f:fb:7c:b4:4c:0c:d2:eb:
e3:58:9c:84:1e:5d:33:1e:35:65:26:e0:63:71:f8:
61:d4:df:84:4b:9d:a4:ff:65:8d:9a:d6:30:57:53:
d4:d4:44:24:1f:cd:77:40:82:c4:a8:9c:46:6b:3f:
89:97:ee:10:d2:1f:92:29:ea:96:68:a7:18:c2:eb:
b9:9d:5c:51:c5:7b:8d:11:a4:14:92:42:61:2c:eb:
3b:75:e7:d6:d1:fa:a1:5d:71:98:e9:5e:cd:d2:fd:
c8:d4:d6:a3:1a:2d:9f:8a:1a:77:91:a5:8a:dd:e8:
c1:ed:ac:87:21:e8:3b:b5:e7:4e:4a:85:92:5f:a2:
83:c4:15:79:d3:2b:d9:fd:98:64:47:ee:ed:f4:7b:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2E:D6:7F:78:3A:B4:CD:D7:38:5F:A3:17:D1:B9:79:67:BD:74:A1
X509v3 Authority Key Identifier:
keyid:AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/My7Wf3g6tM3XOF-jF9G5eWe9dKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:cd0::/48
2001:678:cd4::/48
2001:678:cd8::/48
2001:67c:15c0::/48
Signature Algorithm: sha256WithRSAEncryption
5e:20:eb:57:24:61:6f:50:33:10:a9:1e:0c:bf:4f:2f:8c:7a:
ac:34:5c:a3:39:be:e8:74:3a:8b:71:45:1e:09:60:f1:4c:97:
3b:a0:3b:d1:5c:f1:a2:cc:74:d1:c5:91:ca:f7:9e:5a:c3:39:
cc:89:1a:b9:d7:8d:0f:3d:87:c0:a1:f3:ec:cc:3f:d4:f8:6a:
e7:5c:00:39:b7:30:93:3e:0d:ef:14:e9:86:9c:38:38:f5:23:
0d:9d:ea:4a:99:cc:62:d8:15:dc:12:d2:91:17:70:37:d9:e6:
6a:36:b8:17:4f:2d:f4:0a:25:a2:a3:98:7b:80:55:ec:87:4c:
5a:b7:24:88:2d:58:e2:54:4d:17:90:82:92:f9:f3:e3:cd:11:
41:10:35:71:6d:54:76:33:95:1c:b9:46:70:42:ca:62:55:0f:
0c:ed:59:06:68:d8:0e:8b:27:ff:77:ad:84:1d:9d:ba:d8:e0:
21:c1:87:ed:d5:f0:24:85:01:f5:e5:98:22:b3:22:cd:50:2c:
63:c0:1a:23:56:4b:f8:b7:08:d7:d8:eb:ec:e6:96:77:91:12:
06:86:d9:c7:5f:6d:05:48:1f:21:e9:fe:8e:1d:1d:de:3d:7d:
f9:ee:62:1d:f5:84:0f:3d:fe:a0:76:fe:6d:85:7a:46:f8:54:
eb:4d:26:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:32:50 2025 by rpki-client