Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/Yy2Phxw06acdG3_YNtFfWiCvKnw.roa
File: Yy2Phxw06acdG3_YNtFfWiCvKnw.roa (raw, json)
Hash identifier: Vxswy8nJolaYnf82Ux9Q531C6yCLcC0RcqjuVRIba7Y=
Subject key identifier: 63:2D:8F:87:1C:34:E9:A7:1D:1B:7F:D8:36:D1:5F:5A:20:AF:2A:7C
Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial: 0187BC7DE9DED4F4229E53100541423443F9
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/Yy2Phxw06acdG3_YNtFfWiCvKnw.roa
Signing time: Wed 26 Apr 2023 07:36:21 +0000
ROA not before: Wed 26 Apr 2023 07:36:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35052
IP address blocks: 2001:678:1c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:7d:e9:de:d4:f4:22:9e:53:10:05:41:42:34:43:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Validity
Not Before: Apr 26 07:36:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=632d8f871c34e9a71d1b7fd836d15f5a20af2a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ac:e3:37:d6:0b:75:d7:f2:b5:91:1e:37:99:
ea:4a:20:e3:22:80:36:fa:28:45:ab:f0:85:42:b8:
17:13:4c:0c:8f:1e:16:1b:95:9c:da:1f:bc:19:b0:
32:44:d5:04:81:01:76:8b:b5:23:a1:cd:37:d9:b4:
2a:5f:72:dc:5a:27:bf:f0:83:26:0d:ed:7c:04:ab:
8c:66:ad:e7:57:f4:4c:05:4b:d6:73:51:c4:b5:db:
ce:b0:8e:83:0e:11:0b:95:7b:04:88:11:e8:50:0f:
4c:14:f2:8c:91:07:ea:a4:7f:b5:b3:8e:ee:fb:d8:
ea:31:27:03:47:d8:cb:51:b4:31:5e:1c:06:43:0f:
f8:9f:d8:3d:12:6e:11:4b:35:9e:49:94:58:da:6d:
b2:a6:88:12:50:54:47:03:e1:8e:03:f0:fb:3f:fb:
8d:07:48:74:d1:ba:2b:72:41:e6:4d:b1:bc:9b:30:
7a:a3:a3:50:84:9d:a1:8b:a7:3a:0c:fd:34:64:3b:
0a:42:af:d9:2c:c2:9d:80:32:19:64:06:79:e6:58:
a3:70:2e:a3:17:c6:48:3e:5b:d1:dd:93:59:42:6b:
60:81:ec:7c:f8:5c:93:de:9c:ef:9e:5b:9b:bb:8e:
e4:84:52:56:ab:3d:4d:14:da:c6:95:99:fc:16:ab:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2D:8F:87:1C:34:E9:A7:1D:1B:7F:D8:36:D1:5F:5A:20:AF:2A:7C
X509v3 Authority Key Identifier:
keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/Yy2Phxw06acdG3_YNtFfWiCvKnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1c::/48
Signature Algorithm: sha256WithRSAEncryption
2b:cc:53:af:2f:a2:f5:fe:d7:35:88:7b:81:a7:24:2b:2a:36:
41:16:9c:6a:74:75:25:ac:4f:e0:2c:8e:32:9a:c7:dc:19:d2:
70:ae:e5:3c:71:15:19:43:ef:9f:a2:69:cc:72:c2:19:28:30:
a9:63:59:8c:6b:6e:62:0f:23:f8:d1:36:81:2f:8a:0a:ce:ed:
b9:bf:20:9d:77:1f:08:8d:ef:ff:7b:83:48:86:37:d7:db:65:
b3:dc:7e:c1:99:d3:37:fd:82:b4:b2:99:91:63:be:9d:6a:32:
f9:c1:55:42:8b:45:78:87:26:68:7a:1f:a6:c1:b0:61:68:02:
ec:90:4f:7c:77:fa:de:6b:89:a6:5a:41:56:44:fd:32:81:31:
55:4d:e9:ce:aa:57:d9:38:53:17:d7:3f:9b:82:10:d2:f3:b3:
f7:fb:29:22:de:de:16:b5:59:fb:5a:ff:f4:1d:3f:1f:12:44:
9f:4b:37:ff:a2:c3:f2:b1:ed:e0:5f:0d:0f:93:27:72:c6:29:
a0:87:4c:84:8f:e7:6f:fb:95:23:77:f4:a5:c2:37:56:9a:9e:
64:c9:d0:17:8f:26:30:fe:f3:b2:0c:42:57:ad:fe:ee:df:05:
c4:51:cd:80:ec:c5:49:cb:1b:12:cc:cf:d7:55:d3:1c:f9:87:
23:5c:05:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:03:06 2025 by rpki-client