Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/woOrRLoTEx5FZANaHJ8GXxH0kUU.roa
File: woOrRLoTEx5FZANaHJ8GXxH0kUU.roa (raw, json)
Hash identifier: Fa5NCVYAZDMHosgSpys4mhWsm/DRM4LkTSUfO9SGaJA=
Subject key identifier: C2:83:AB:44:BA:13:13:1E:45:64:03:5A:1C:9F:06:5F:11:F4:91:45
Certificate issuer: /CN=6f7fa37185a22944a607d9a94f9885997d851b1e
Certificate serial: 018807A28FDD6510E6EE5B28421C65CF6C58
Authority key identifier: 6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/woOrRLoTEx5FZANaHJ8GXxH0kUU.roa
Signing time: Wed 10 May 2023 21:47:54 +0000
ROA not before: Wed 10 May 2023 21:47:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198660
IP address blocks: 2001:67c:25b4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:07:a2:8f:dd:65:10:e6:ee:5b:28:42:1c:65:cf:6c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fa37185a22944a607d9a94f9885997d851b1e
Validity
Not Before: May 10 21:47:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c283ab44ba13131e4564035a1c9f065f11f49145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:08:b1:e9:a4:2f:e3:f7:71:35:5c:c9:86:
5a:a3:a8:cc:ed:06:4d:11:40:29:20:05:9b:2c:c8:
2f:65:44:d4:9a:6f:d4:c6:f0:24:64:db:a4:b9:b1:
86:dc:9a:9d:09:5a:e9:40:a6:5a:e3:84:cf:19:ad:
a3:b5:94:84:98:e5:aa:a4:a3:49:5f:42:c1:8f:e3:
78:e7:33:c3:d7:6e:e7:c2:64:e8:da:37:6e:6a:23:
02:77:5c:df:59:9f:7e:01:3e:83:5b:ad:f6:8b:47:
23:da:bc:8b:30:7e:2e:19:29:8d:89:02:d2:e3:ab:
f4:22:bb:a8:b0:e2:e8:87:9e:2d:0c:da:d1:bf:c8:
42:20:41:6f:0e:00:32:89:d1:c2:60:a7:ba:70:e8:
cc:03:1f:7a:74:ea:65:71:73:af:b9:d1:62:48:1a:
5c:38:ed:46:72:d5:01:19:31:00:3b:76:fe:91:66:
23:e2:ae:28:aa:62:db:42:0d:77:0f:f1:5b:6f:26:
33:82:aa:cc:8e:25:70:e1:fc:11:e0:f8:34:eb:ef:
7d:4c:51:02:9e:21:5c:a4:af:f3:5c:4b:26:1e:5c:
6b:1b:b2:20:34:e3:19:4b:9f:5b:a0:ca:a1:d1:4d:
d5:5c:cc:3f:95:b0:bf:ea:d5:a4:41:ce:e7:89:d8:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:83:AB:44:BA:13:13:1E:45:64:03:5A:1C:9F:06:5F:11:F4:91:45
X509v3 Authority Key Identifier:
keyid:6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/woOrRLoTEx5FZANaHJ8GXxH0kUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:25b4::/48
Signature Algorithm: sha256WithRSAEncryption
5d:e6:a3:e6:38:72:74:fa:df:80:fe:0a:2d:9b:ef:47:28:3d:
b8:94:00:05:e0:d2:2b:09:67:96:21:b3:b4:f9:b6:70:d3:0e:
00:b4:f8:f4:56:b2:f7:fb:03:b3:00:38:a3:ec:a4:5b:e0:41:
98:e4:37:b3:99:e5:9f:f8:49:1b:5d:b3:8b:e0:f9:c4:e9:af:
3d:10:01:92:8e:17:b1:c9:56:90:fa:4d:cd:c3:fb:3b:16:e1:
89:2a:04:cf:87:60:c4:5b:fa:84:57:c9:fe:b0:e1:c7:a1:82:
6c:ec:1c:7f:81:a6:f7:64:c7:35:1a:44:52:30:0c:4e:dd:c6:
88:0f:e8:04:7d:2c:00:ec:fb:d1:90:3f:1a:c8:bd:ba:ad:07:
b9:bd:de:3a:00:2c:08:82:4e:98:68:bb:5c:21:61:35:98:8a:
84:12:4a:38:9b:1e:57:c0:77:45:4e:62:07:98:2f:c4:44:96:
be:f7:9d:41:d1:87:f0:f5:9b:e3:f1:69:10:7e:72:84:bf:7c:
e3:1d:48:3b:9d:75:45:1e:d1:dc:4b:87:f4:1f:27:83:5c:1a:
57:bb:48:0b:1b:9f:1b:9f:c7:9d:34:d5:eb:7a:07:9d:cb:04:
4f:94:28:7b:33:db:8e:75:0f:86:8f:6a:52:b3:3c:94:de:9f:
7a:11:70:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:36 2025 by rpki-client