Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/008909-72ea-4791-a5bf-f23346bcc217/1/t1E-ymvz617PiIGrhwfltZzdE1Y.roa
File: t1E-ymvz617PiIGrhwfltZzdE1Y.roa (raw, json)
Hash identifier: PnAbX8bMWgv13uj3kreMd3/qODFIN00ZuPLfVWOVbJ4=
Subject key identifier: B7:51:3E:CA:6B:F3:EB:5E:CF:88:81:AB:87:07:E5:B5:9C:DD:13:56
Certificate issuer: /CN=727309f110347cc61b8c27bbfbf10a6bfb408358
Certificate serial: 1089BDC0
Authority key identifier: 72:73:09:F1:10:34:7C:C6:1B:8C:27:BB:FB:F1:0A:6B:FB:40:83:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnMJ8RA0fMYbjCe7-_EKa_tAg1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/008909-72ea-4791-a5bf-f23346bcc217/1/t1E-ymvz617PiIGrhwfltZzdE1Y.roa
Signing time: Sat 01 Jan 2022 16:11:13 +0000
ROA not before: Sat 01 Jan 2022 16:11:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199351
IP address blocks: 2001:67c:1394::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277462464 (0x1089bdc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727309f110347cc61b8c27bbfbf10a6bfb408358
Validity
Not Before: Jan 1 16:11:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7513eca6bf3eb5ecf8881ab8707e5b59cdd1356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d8:62:c1:5e:47:c7:76:8e:c7:d9:1c:85:a3:
0d:2f:62:1a:b9:92:25:b0:52:21:e3:f8:12:8d:c0:
18:08:61:b0:fe:13:4d:c2:55:dd:4a:4c:32:a4:6f:
44:4d:39:38:9a:97:7c:0a:a3:c5:65:da:f8:b2:b1:
15:b1:9a:10:33:fc:f6:f2:7b:ad:8b:a4:d2:f3:fa:
9a:7c:b6:45:a7:94:4b:d6:f5:f4:4f:fd:cf:18:b3:
2d:85:c4:6e:43:f4:06:2d:f9:48:60:30:de:f0:2c:
bb:47:68:77:83:af:d0:0b:be:16:fe:ee:c2:13:14:
fb:08:8a:93:6d:4e:50:18:6d:a7:49:49:c8:f3:e1:
81:b3:ee:7a:34:5a:74:a6:46:09:a4:7f:e5:93:24:
0f:49:23:4f:0c:8e:20:56:6c:e7:cc:79:9f:57:94:
d4:18:16:83:44:9d:7a:99:b2:4a:0b:c0:7c:92:16:
d1:42:7d:a2:26:65:db:09:d1:40:e1:2e:a3:ea:b6:
5b:b6:7e:ac:d2:04:02:13:ce:b6:98:94:d9:63:55:
fe:27:e3:89:80:3c:6b:be:8c:e4:9f:6c:4c:b3:b6:
30:96:df:71:b4:de:05:58:6c:a0:07:69:3f:cc:8d:
75:50:50:18:11:48:cc:71:89:80:03:43:2b:50:67:
b5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:51:3E:CA:6B:F3:EB:5E:CF:88:81:AB:87:07:E5:B5:9C:DD:13:56
X509v3 Authority Key Identifier:
keyid:72:73:09:F1:10:34:7C:C6:1B:8C:27:BB:FB:F1:0A:6B:FB:40:83:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnMJ8RA0fMYbjCe7-_EKa_tAg1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/008909-72ea-4791-a5bf-f23346bcc217/1/t1E-ymvz617PiIGrhwfltZzdE1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/008909-72ea-4791-a5bf-f23346bcc217/1/cnMJ8RA0fMYbjCe7-_EKa_tAg1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1394::/48
Signature Algorithm: sha256WithRSAEncryption
a9:a8:7e:d0:b4:b9:78:de:e9:90:25:26:ac:e0:50:68:e1:37:
12:6b:a5:95:6d:8c:1f:14:3f:4d:af:3d:d6:d5:be:47:8e:c1:
83:a3:40:e3:ff:cf:96:78:35:e3:ed:26:f1:99:1c:e6:65:2c:
a6:f9:85:44:db:d6:2b:9f:da:bb:63:b3:aa:59:4a:85:d1:6d:
52:98:16:9b:f3:28:cd:57:76:16:0b:1d:52:a2:f1:32:5b:bc:
78:02:af:6b:0c:73:ea:e4:ff:74:9f:73:db:e1:7c:91:96:0d:
82:84:e5:dd:49:40:a1:ce:d6:b6:45:31:66:22:50:15:b2:05:
51:e5:99:d6:cd:86:99:4f:ce:5a:96:f2:f2:a4:56:ae:64:02:
4a:8a:31:31:47:b3:ad:ef:7e:93:fb:74:0b:a4:a9:dc:71:65:
b9:c6:a7:89:90:7e:82:62:a3:2b:f5:0b:48:14:0a:70:22:02:
0d:e0:e5:47:fd:1c:67:fb:c9:1f:fe:4b:80:91:7f:c1:12:b1:
f6:15:7f:6d:15:b2:b9:b1:72:04:3e:df:b8:af:1d:9e:c9:75:
95:78:0e:4a:1a:3b:20:53:55:56:44:bd:f3:2d:d3:86:60:0a:
20:bf:51:73:a3:8f:57:f1:a7:e7:43:dc:33:63:b3:a3:12:2f:
e3:99:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:58 2025 by rpki-client