Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/EeteTvtWCfKwEtUGMEaDEawF4lQ.roa
File: EeteTvtWCfKwEtUGMEaDEawF4lQ.roa (raw, json)
Hash identifier: GwSK1/VJuxWMCx40RK9bs+z7DwW9n5nECg1ChN5zSGs=
Subject key identifier: 11:EB:5E:4E:FB:56:09:F2:B0:12:D5:06:30:46:83:11:AC:05:E2:54
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018572BA808E4CACDD07DD47531F872B5C4A
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/EeteTvtWCfKwEtUGMEaDEawF4lQ.roa
Signing time: Mon 02 Jan 2023 13:45:03 +0000
ROA not before: Mon 02 Jan 2023 13:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57723
IP address blocks: 2001:1a68:21::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:80:8e:4c:ac:dd:07:dd:47:53:1f:87:2b:5c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 13:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11eb5e4efb5609f2b012d50630468311ac05e254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:54:eb:5e:d7:d5:98:8a:92:04:dc:9e:ee:
96:78:41:39:d3:87:15:66:fb:00:7f:a7:f9:66:7d:
92:f7:2d:1f:f3:8b:92:c8:4c:29:df:eb:f5:dd:84:
c8:e6:ba:8a:d1:af:da:5f:9c:c5:9b:eb:bd:49:8c:
73:a1:28:41:4a:4b:c2:f1:9d:de:2a:6b:78:59:6b:
fe:6c:cf:50:25:b6:25:12:d4:c1:6c:d1:f7:b4:36:
10:d8:63:d5:72:94:6e:b2:c7:31:52:f1:9f:14:b7:
3c:19:7d:3b:47:a7:99:63:48:77:7d:45:1f:d7:2f:
6b:ba:bc:2c:f8:96:f0:ad:05:f7:f4:ea:f1:6c:6d:
47:fd:fb:17:f0:2b:c9:ae:21:9c:3c:98:44:b8:ee:
bc:2b:89:fb:cf:43:db:9e:d4:31:35:ca:8c:d3:a8:
ea:16:c7:11:d6:fe:b4:98:db:0f:6a:ce:04:27:8f:
d0:06:61:8f:0a:d8:3b:e9:90:df:56:93:9c:0b:29:
db:14:a2:bb:80:fc:fd:57:1a:24:91:c0:a6:27:a1:
3a:03:48:cd:30:32:16:77:14:eb:60:31:59:74:12:
4e:cb:4d:80:37:03:fa:52:5f:92:eb:d3:47:9f:9a:
70:b2:36:37:ec:cd:89:6b:7b:af:73:95:71:6a:46:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EB:5E:4E:FB:56:09:F2:B0:12:D5:06:30:46:83:11:AC:05:E2:54
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/EeteTvtWCfKwEtUGMEaDEawF4lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1a68:21::/48
Signature Algorithm: sha256WithRSAEncryption
a2:25:e6:3b:8d:2e:1b:81:e7:5f:cd:72:b3:0f:66:4d:ff:e8:
0c:31:a6:e0:e1:95:33:2f:d7:be:b8:2f:e1:e0:2f:c3:ca:99:
82:dc:52:b1:c7:e5:48:91:33:13:ec:bb:58:7d:fe:55:d2:03:
6c:8e:bb:fd:b3:db:32:af:1f:dc:c4:20:6c:4b:6c:79:32:fd:
98:24:e9:b4:47:99:20:45:4e:ab:4a:25:f1:53:6d:5c:54:d9:
96:2b:e5:e0:43:d9:ad:16:be:80:c4:32:c5:06:5b:04:29:18:
34:b6:ea:f3:dc:ce:ab:97:23:a2:d6:90:0d:fa:98:04:2f:47:
70:4f:72:88:3a:10:85:91:3e:3d:a9:7f:1d:e1:41:58:3e:23:
27:34:d0:03:d9:b1:ce:6f:db:c6:b5:91:03:6d:e0:42:87:06:
06:f0:64:d7:fd:fe:70:c6:e2:37:57:33:ca:37:12:db:4d:15:
1c:33:48:50:c5:38:f7:ba:79:88:b3:39:00:c1:58:3f:b3:21:
6f:14:bd:9f:6c:9d:c0:1e:a0:2b:0c:4f:a2:33:12:c3:ac:db:
74:f5:1c:57:f6:91:a6:37:ec:fc:c5:b7:ae:d8:b6:c8:5e:6e:
41:68:56:62:e4:0d:0a:d3:a8:5c:bf:bd:16:fe:22:10:ae:68:
d4:37:09:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:17 2025 by rpki-client