Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/j6Er13unmM4lIHHO-I_ywzHIwo8.roa
File: j6Er13unmM4lIHHO-I_ywzHIwo8.roa (raw, json)
Hash identifier: ZaDfYMmOO++9t4rALD/wuylsZaswikyX+Cef/AzRPFs=
Subject key identifier: 8F:A1:2B:D7:7B:A7:98:CE:25:20:71:CE:F8:8F:F2:C3:31:C8:C2:8F
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 01856D13CB2B1101C93F3ACDAE058D7F4B23
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/j6Er13unmM4lIHHO-I_ywzHIwo8.roa
Signing time: Sun 01 Jan 2023 11:24:51 +0000
ROA not before: Sun 01 Jan 2023 11:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 328543
IP address blocks: 2a0c:640::/29 maxlen: 29
2a0d:2480::/29 maxlen: 29
2a0c:f480::/29 maxlen: 29
2a0c:9380::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:cb:2b:11:01:c9:3f:3a:cd:ae:05:8d:7f:4b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 1 11:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fa12bd77ba798ce252071cef88ff2c331c8c28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2f:a3:6c:ff:4c:b1:e4:bf:1d:17:ff:56:58:
77:38:2c:1e:95:65:0b:02:0c:27:23:c2:98:49:53:
3c:80:27:9e:92:18:dd:f0:bf:8a:a0:69:fb:71:a2:
43:fe:a3:2e:8a:a6:98:52:43:71:1e:ff:ef:4e:72:
1f:69:2b:9e:c5:dd:69:b9:65:a4:b7:51:f3:1c:16:
08:5b:4b:ec:d5:51:3a:ad:5a:b7:dc:bd:3c:9b:a0:
06:00:e4:47:2e:ec:44:43:78:9b:52:23:e7:c8:f4:
6d:af:11:2a:81:09:9d:c8:27:5a:21:26:d8:42:42:
4d:d7:29:79:84:80:21:be:a8:59:70:17:48:a0:0a:
44:f9:d4:3f:80:42:07:51:5f:b9:f6:2d:c4:77:33:
5c:13:8d:31:e5:02:b5:a4:83:5d:df:e0:d5:31:d5:
89:28:c0:03:b0:59:6a:b5:67:4e:9e:eb:25:ff:1e:
92:52:e3:8b:c5:fc:1c:68:66:dd:32:e9:93:d3:9d:
e1:d0:e5:38:81:74:9f:b5:0b:04:e6:08:7c:a0:75:
c8:0c:ae:0c:ea:6b:10:e6:5d:d6:7d:d1:56:aa:8c:
51:6e:8b:38:5c:8d:d2:dd:ea:fd:1b:b8:90:fd:d9:
dd:a6:1e:93:00:13:ef:c9:9d:27:48:e5:b1:29:81:
10:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A1:2B:D7:7B:A7:98:CE:25:20:71:CE:F8:8F:F2:C3:31:C8:C2:8F
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/j6Er13unmM4lIHHO-I_ywzHIwo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:640::/29
2a0c:9380::/29
2a0c:f480::/29
2a0d:2480::/29
Signature Algorithm: sha256WithRSAEncryption
5c:9e:16:c8:04:be:42:95:1f:10:c1:d0:3b:0c:2b:12:30:06:
38:6e:90:17:c8:ed:ef:62:41:79:a6:89:bd:57:1a:30:c7:a9:
70:0d:47:01:1c:36:fd:96:54:ba:6b:31:56:87:8d:82:73:fb:
a4:53:5f:50:07:48:30:ef:c6:18:85:b4:c2:a0:48:37:9f:82:
f5:09:ac:e9:8e:47:8c:5d:ec:9e:55:80:c5:22:2f:ba:a2:e6:
1f:08:df:3a:23:c1:98:73:2b:11:07:c6:07:2c:96:3b:2f:77:
e1:8d:61:39:65:6b:b2:84:20:06:b7:69:e7:67:13:70:10:7d:
16:29:02:1b:3f:3b:b0:b2:9e:18:66:24:9d:cd:bb:14:29:54:
a9:de:e5:57:02:74:72:97:ac:e4:e7:85:61:0e:27:aa:a2:40:
ac:3d:64:a5:15:5c:5a:83:23:fc:20:55:67:e5:8d:21:74:0b:
f7:5f:67:ab:e2:32:b8:0c:26:75:4a:d9:c7:8a:70:bf:b4:57:
65:b5:b3:d4:e0:07:de:33:f3:52:22:5a:7f:ba:79:46:91:fd:
7d:b0:ef:65:73:51:30:ed:d7:74:c5:f1:79:09:d6:37:a0:5c:
d5:b5:93:b0:bb:49:09:dc:a9:9c:65:65:a9:ce:7e:bd:91:e8:
e1:98:9b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:05 2025 by rpki-client