Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/T2Duu5PevaSiQJeoyiSSPNPdESk.roa
File: T2Duu5PevaSiQJeoyiSSPNPdESk.roa (raw, json)
Hash identifier: iEart6XvmmdSHluTpnhP7mMEuTkjNo/otfA5wYLJYLw=
Subject key identifier: 4F:60:EE:BB:93:DE:BD:A4:A2:40:97:A8:CA:24:92:3C:D3:DD:11:29
Certificate issuer: /CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
Certificate serial: 018570DE6B889532727FACEF5D423FB34C40
Authority key identifier: 8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/T2Duu5PevaSiQJeoyiSSPNPdESk.roa
Signing time: Mon 02 Jan 2023 05:05:02 +0000
ROA not before: Mon 02 Jan 2023 05:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50572
IP address blocks: 2001:67c:2834::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:6b:88:95:32:72:7f:ac:ef:5d:42:3f:b3:4c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
Validity
Not Before: Jan 2 05:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f60eebb93debda4a24097a8ca24923cd3dd1129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6d:f9:1c:52:2d:50:47:91:09:a8:37:15:24:
ed:43:b3:e0:70:2e:ff:d0:39:29:2a:31:88:b9:6b:
15:a4:52:dc:26:d6:49:a3:81:72:e1:cb:17:d0:8e:
a3:fc:51:da:b5:e7:e6:03:a9:a9:b1:37:4d:e0:ae:
4e:3d:0c:1d:aa:17:47:4c:87:0f:0b:42:ae:4b:57:
85:f9:ab:6e:cc:5d:f9:f4:5e:84:5d:ef:b7:10:37:
02:e0:39:8b:94:7f:6b:9d:d3:b1:9e:9d:56:40:58:
a9:10:62:dd:be:d4:59:b2:c5:74:28:c9:a3:21:39:
51:1f:5a:66:95:8e:00:f9:3d:87:aa:60:35:5f:e9:
01:37:d4:f0:82:b2:37:4e:cf:40:1f:f0:70:ef:a6:
aa:74:8c:43:94:f9:fe:8c:99:8d:27:15:45:fe:5e:
da:04:19:87:34:00:1d:ad:e0:20:7a:ec:68:e0:04:
43:ed:64:62:a7:27:d4:62:8e:66:5b:00:13:08:b5:
a8:84:b3:0b:50:50:47:c6:bb:d5:e9:f2:96:42:06:
2c:fe:d7:ed:57:3f:c5:80:43:6f:99:db:40:18:d2:
23:ff:f8:f3:8f:9e:31:5e:05:b1:1b:3d:a6:6a:87:
2a:9f:46:ee:bc:14:ea:fc:e0:bf:54:81:f1:c2:ef:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:60:EE:BB:93:DE:BD:A4:A2:40:97:A8:CA:24:92:3C:D3:DD:11:29
X509v3 Authority Key Identifier:
keyid:8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/T2Duu5PevaSiQJeoyiSSPNPdESk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2834::/48
Signature Algorithm: sha256WithRSAEncryption
6e:5f:f7:48:8a:db:5b:00:e1:98:4b:12:2c:22:1b:2e:d3:08:
37:f8:1f:bf:d5:43:ac:c6:ca:38:25:f4:98:ad:42:dc:e6:9e:
a5:10:dd:e4:8a:e3:62:5c:89:0a:46:9d:38:ed:33:59:dd:ca:
c1:23:37:46:1e:16:27:bb:3d:8a:82:3b:49:41:13:d7:6f:b9:
01:fa:ea:6a:44:87:7a:94:aa:14:96:5f:0e:c8:b4:2e:91:bf:
51:a1:f9:6f:b7:16:42:a3:5c:43:80:20:af:da:3a:fa:c9:07:
1d:ce:6c:99:a6:81:e2:59:7b:1e:25:a6:db:34:86:7a:ce:e2:
44:ce:b2:23:22:89:03:e9:06:12:67:5e:ba:88:4f:14:70:ba:
c4:43:2c:ad:13:94:f2:ca:0d:d4:92:74:8a:e8:90:f0:b3:0a:
f9:45:6e:2b:e6:74:4f:14:58:d7:f2:17:31:0d:06:88:05:d1:
81:fa:d4:ce:8d:ee:ad:44:69:23:f9:1d:27:b4:ed:4b:f2:2a:
e7:b1:7c:1b:7e:a2:85:b8:34:eb:e6:58:df:31:58:93:12:87:
f6:db:de:0f:d8:9c:be:ac:f7:86:03:34:85:b7:19:0d:9b:1a:
15:a5:fb:b0:db:69:50:0d:63:e4:a7:d5:12:07:99:5f:dc:ea:
7a:a3:ce:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:47:36 2025 by rpki-client