Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/t67d04-CCoHJQzdV3h8xZX-9YJY.roa
File: t67d04-CCoHJQzdV3h8xZX-9YJY.roa (raw, json)
Hash identifier: A7V4MajI5tBphEF2low/QnXrz1xuYsRPL+WHT/J6yoo=
Subject key identifier: B7:AE:DD:D3:8F:82:0A:81:C9:43:37:55:DE:1F:31:65:7F:BD:60:96
Certificate issuer: /CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Certificate serial: 0186655D978B2505BD21CA95C1367205E949
Authority key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/t67d04-CCoHJQzdV3h8xZX-9YJY.roa
Signing time: Sat 18 Feb 2023 16:31:17 +0000
ROA not before: Sat 18 Feb 2023 16:31:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207278
IP address blocks: 2001:678:cd0::/48 maxlen: 49
2001:678:cd8::/48 maxlen: 49
2001:678:cd4::/48 maxlen: 49
2001:67c:15c0::/48 maxlen: 49
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:65:5d:97:8b:25:05:bd:21:ca:95:c1:36:72:05:e9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Validity
Not Before: Feb 18 16:31:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7aeddd38f820a81c9433755de1f31657fbd6096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:b7:ea:6e:c8:b7:47:f5:f1:46:d3:cd:5d:
66:b2:f9:5a:8c:62:b6:89:ca:40:fe:1f:ea:53:e9:
7f:82:93:3c:9c:29:e9:aa:f3:37:7d:19:2a:18:d1:
65:cd:5b:d7:ab:78:2f:3a:54:78:a0:4b:df:00:c0:
bd:1d:32:ab:12:ba:31:18:3e:2b:27:da:22:21:05:
e2:38:b6:96:b3:aa:ba:b0:20:90:23:f5:0b:85:d7:
f1:88:11:9c:2b:56:71:ab:a1:b2:8b:35:df:d6:5d:
68:1d:ef:22:1c:5d:0f:3c:d4:5b:a4:5c:1c:ef:0d:
6a:c7:84:3d:ca:3a:fd:b9:6b:47:78:23:9e:65:65:
fa:5f:7b:f6:1d:8a:30:5f:ca:f6:36:fc:68:03:30:
27:a5:17:ee:ea:ae:6c:0a:35:ea:e1:7d:9e:b6:a3:
54:7d:d3:56:f9:dd:5a:f9:c4:e5:ff:06:c5:ed:6b:
77:33:7b:ec:94:a9:60:0e:2a:05:26:5f:4a:01:d1:
89:98:74:f2:3a:5e:86:84:ac:0b:4d:4e:19:5a:42:
c9:ae:d7:f1:95:b1:d4:87:a0:4c:0d:7f:e5:c5:4c:
7d:64:77:f8:d1:4a:07:a3:8d:69:87:d5:ee:46:1e:
e6:59:86:66:1a:be:af:c0:7b:2a:06:01:97:3d:34:
37:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AE:DD:D3:8F:82:0A:81:C9:43:37:55:DE:1F:31:65:7F:BD:60:96
X509v3 Authority Key Identifier:
keyid:AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/t67d04-CCoHJQzdV3h8xZX-9YJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:cd0::/48
2001:678:cd4::/48
2001:678:cd8::/48
2001:67c:15c0::/48
Signature Algorithm: sha256WithRSAEncryption
8f:70:d8:13:63:9f:0f:ef:92:08:bd:27:ea:e6:39:2a:07:12:
77:66:d3:5c:d6:b9:74:4b:f3:19:1b:42:79:23:ce:9e:b0:ea:
e6:73:a3:c4:4f:98:5f:3f:aa:43:2f:5f:eb:74:96:1a:5c:20:
b0:7b:d9:ea:24:59:27:7c:c6:eb:27:7d:d1:3d:d9:57:00:36:
31:75:9b:6a:04:67:f8:06:00:3c:8f:9c:b1:11:42:23:d2:89:
bb:29:5d:5e:15:63:ed:d0:d0:de:f1:ad:39:ad:49:62:f5:00:
a0:ac:b2:ce:ba:73:c0:fa:dc:9c:e8:93:83:5b:7c:12:f5:c2:
16:f7:37:1b:e5:61:24:f5:5a:ec:7b:45:00:04:0c:df:12:4f:
09:c0:27:dc:0a:1e:f5:66:a7:49:07:64:09:9f:a9:5d:75:e7:
c7:32:20:14:97:66:cd:53:7f:a1:90:a8:b9:ee:3f:3f:59:21:
e0:8a:d0:6a:23:fa:45:0c:04:ab:f1:c5:69:f9:f0:5b:b3:e5:
35:d3:f0:3c:49:fe:40:a4:9a:60:84:91:e0:e9:e4:1b:73:0d:
a1:a3:f2:a3:47:14:f0:c3:7f:a3:b3:82:4a:0e:07:cc:41:e9:
0c:6f:df:01:35:95:41:03:48:09:b3:78:d4:3f:f4:83:b0:ad:
b5:e3:ad:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:41:56 2025 by rpki-client