Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/4L1J8Ka3PuKTsrIzuyxOYyR8SoU.roa
File: 4L1J8Ka3PuKTsrIzuyxOYyR8SoU.roa (raw, json)
Hash identifier: ghl/cmfhSLuKXuM+1L6M7OagQOk5eeujOvqEusw3eiQ=
Subject key identifier: E0:BD:49:F0:A6:B7:3E:E2:93:B2:B2:33:BB:2C:4E:63:24:7C:4A:85
Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Certificate serial: 018570F08E5C688713862642750BC450C228
Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/4L1J8Ka3PuKTsrIzuyxOYyR8SoU.roa
Signing time: Mon 02 Jan 2023 05:24:51 +0000
ROA not before: Mon 02 Jan 2023 05:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209243
IP address blocks: 2a09:7cc7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:8e:5c:68:87:13:86:26:42:75:0b:c4:50:c2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Validity
Not Before: Jan 2 05:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0bd49f0a6b73ee293b2b233bb2c4e63247c4a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fa:5e:40:38:36:ae:ab:7e:5c:7a:0f:a3:8f:
fc:94:a7:b5:fa:bc:1a:75:24:2b:43:41:9d:37:e4:
3b:27:36:40:2b:90:df:9f:1e:f2:8c:10:48:0f:8a:
4a:95:d9:38:7f:0e:0d:3f:ca:05:d0:3b:25:c0:31:
07:26:fc:a3:cf:16:d2:0a:a6:5d:10:28:7b:be:96:
d8:f6:1d:44:7c:c3:60:42:d6:12:9c:b8:2d:0c:69:
61:30:3b:88:e3:2a:df:16:13:c7:f2:ca:fd:c0:ba:
8c:64:a5:8b:31:3a:1d:b6:ff:64:23:4f:4f:d5:79:
50:8c:9f:4c:39:50:6f:9d:66:31:e1:1e:88:1a:46:
3c:67:bb:ea:2b:7e:12:a6:59:fc:7a:be:15:2e:68:
0e:39:cb:ac:5d:d1:81:85:e6:e1:ff:84:4e:bf:70:
49:56:c9:d7:ef:58:4c:45:97:21:a7:32:04:02:74:
9b:02:6e:20:36:cc:b0:ce:21:78:35:f3:55:f7:24:
95:2a:0c:05:16:24:37:31:86:66:dc:34:c9:90:73:
24:70:9d:d7:13:7b:b3:1f:f4:56:d9:24:33:60:57:
28:8c:f1:9f:6c:a1:0f:80:63:eb:51:f6:3e:52:db:
fe:c0:41:25:9c:7d:00:9b:85:b4:9e:3c:42:3a:e6:
35:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BD:49:F0:A6:B7:3E:E2:93:B2:B2:33:BB:2C:4E:63:24:7C:4A:85
X509v3 Authority Key Identifier:
keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/4L1J8Ka3PuKTsrIzuyxOYyR8SoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7cc7::/32
Signature Algorithm: sha256WithRSAEncryption
b7:ca:be:24:a5:47:47:7f:c3:e5:ef:55:44:d9:f1:f7:5a:54:
15:51:2f:e6:42:1e:6c:df:51:da:f9:fa:77:1e:cd:20:d6:bc:
30:14:e3:d7:b9:f5:fb:61:cf:04:e8:78:1a:98:f2:89:98:3f:
8f:7d:0d:64:54:32:30:b3:a0:8a:83:70:5d:61:ea:5f:49:1a:
9f:bf:29:b6:ba:02:06:77:74:73:23:23:f5:e6:f2:ba:5a:69:
df:67:92:04:23:b9:8c:71:8d:16:16:02:a1:f6:d6:35:e1:4b:
19:1d:7d:59:3e:0c:f1:5b:b0:97:88:10:a4:2f:3a:4c:81:ac:
c7:37:3e:06:70:6f:00:43:79:36:c9:c5:c9:4a:3a:59:81:54:
5f:18:a4:a3:50:4b:4b:f9:f9:9a:5b:4f:9c:7b:cd:83:3a:1a:
5d:ed:6d:9e:a7:1e:fa:ba:61:67:6c:3a:ca:7a:94:74:34:d3:
96:19:26:f7:ea:6f:71:e7:02:b9:03:83:d7:6a:b3:f1:80:30:
19:0d:08:03:9e:24:ea:5d:0c:b0:bc:1b:87:d3:af:ba:e2:eb:
48:38:9f:42:0d:28:c4:52:fc:59:e7:1f:27:82:96:3c:29:03:
c3:0b:16:30:13:ca:01:94:9f:84:d5:d0:d1:a4:de:07:b5:9b:
d0:cf:68:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:14:45 2025 by rpki-client