Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/0QrmNuEK4UK83iRm7JJaD4SxCBQ.roa
File: 0QrmNuEK4UK83iRm7JJaD4SxCBQ.roa (raw, json)
Hash identifier: WYV4dpOw2XlL4qi0uQHYrxyooK8aIsrrVl8gQjmAnoc=
Subject key identifier: D1:0A:E6:36:E1:0A:E1:42:BC:DE:24:66:EC:92:5A:0F:84:B1:08:14
Certificate issuer: /CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Certificate serial: 018630F893C9D96DA411AF53581542228D6E
Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/0QrmNuEK4UK83iRm7JJaD4SxCBQ.roa
Signing time: Wed 08 Feb 2023 12:20:42 +0000
ROA not before: Wed 08 Feb 2023 12:20:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29001
IP address blocks: 2001:678:a1c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:30:f8:93:c9:d9:6d:a4:11:af:53:58:15:42:22:8d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Validity
Not Before: Feb 8 12:20:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d10ae636e10ae142bcde2466ec925a0f84b10814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:55:cb:ed:d1:fa:40:a4:f3:e7:87:92:2f:
fa:bd:e3:60:63:b6:cc:3a:70:f8:7c:8b:8c:da:a2:
8e:24:b3:e3:67:41:97:56:07:ce:1d:e6:af:4b:a3:
49:60:f5:0e:d8:f3:44:f5:8d:43:3e:d5:c0:73:1c:
4d:31:0d:11:5a:76:18:54:2c:b2:d1:4e:ba:37:99:
63:35:ed:b8:82:61:b0:7b:a8:07:79:ee:ec:13:19:
21:24:f6:65:1b:d6:6e:e1:96:53:a1:b1:e9:e1:ca:
ab:02:c6:a9:f4:3f:6a:b5:e5:94:3c:cb:08:9c:62:
ac:5f:3e:81:c5:1d:73:b2:95:cd:5d:4b:5c:8f:79:
80:8b:77:2f:54:ee:80:55:e9:fb:85:de:95:23:b8:
5a:39:ea:83:4f:7c:2b:69:81:d3:c2:24:0e:e0:67:
74:46:70:ed:07:41:d2:65:8b:b5:a0:0f:7f:63:69:
9e:9a:b0:6c:a1:d2:79:c0:3d:e4:33:90:44:55:e2:
28:26:8f:f1:d4:a6:8c:b6:3e:ab:70:82:45:8d:54:
98:4e:46:6f:e9:4d:0e:df:86:78:ea:62:52:29:bf:
0e:d5:80:1e:99:2f:a8:7d:30:e6:66:07:d8:e8:7b:
5d:33:70:a3:fa:01:6a:e6:0d:ae:f5:f2:9e:89:8e:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0A:E6:36:E1:0A:E1:42:BC:DE:24:66:EC:92:5A:0F:84:B1:08:14
X509v3 Authority Key Identifier:
keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/0QrmNuEK4UK83iRm7JJaD4SxCBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a1c::/48
Signature Algorithm: sha256WithRSAEncryption
31:29:77:50:c9:90:7c:27:92:4c:c3:ad:f6:82:5e:de:71:2a:
63:2c:1c:d4:d8:b9:40:12:da:6a:d8:ba:a4:ca:58:01:bc:7f:
05:00:d7:21:b1:20:9f:8d:a7:f7:ec:06:7e:2e:15:f0:4e:c2:
38:4e:f1:50:f3:34:0b:53:5c:cd:4c:22:ef:06:3b:8a:b5:f0:
7b:e5:c9:4d:00:dc:db:0b:68:4f:ec:84:06:f4:78:e6:1a:e4:
27:aa:da:db:11:bf:eb:f0:30:08:92:30:ea:1c:7b:d9:2e:ca:
a7:ce:04:20:2f:0b:f3:b7:78:36:80:80:29:50:8d:98:31:28:
fc:ef:da:9a:28:44:a0:3f:1c:bb:d0:1c:78:1b:be:d7:6f:b4:
ba:41:16:2d:50:dc:59:3e:37:78:a3:1d:b9:0d:25:b9:18:ee:
6c:02:dc:14:ae:39:6f:de:d8:b4:1a:86:ea:3c:23:16:d8:f5:
06:a4:bd:59:03:07:99:cd:0a:77:f1:9f:33:bf:12:54:47:62:
a8:a0:7f:94:ad:5e:e1:0b:ec:51:79:44:4c:05:03:25:07:cc:
5f:9a:35:41:7e:48:f4:24:75:98:d5:c7:ac:2e:83:b8:81:67:
79:f0:cb:5e:4b:ce:e1:9c:ad:17:96:13:fd:e1:3e:01:d8:e6:
6d:e8:a3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:23:30 2025 by rpki-client