Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7HOWqbpFeJXr5d0N-ZRJMdp1tRI.roa
File: 7HOWqbpFeJXr5d0N-ZRJMdp1tRI.roa (raw, json)
Hash identifier: 3xs+gs9IXrfaCRR+NZ7AUETPU6F0SBAnm4RHvRh4pAU=
Subject key identifier: EC:73:96:A9:BA:45:78:95:EB:E5:DD:0D:F9:94:49:31:DA:75:B5:12
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01878063DFECCB5F913CFD1534D85A1D5239
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7HOWqbpFeJXr5d0N-ZRJMdp1tRI.roa
Signing time: Fri 14 Apr 2023 15:30:41 +0000
ROA not before: Fri 14 Apr 2023 15:30:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36040
IP address blocks: 2001:680:4004::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:80:63:df:ec:cb:5f:91:3c:fd:15:34:d8:5a:1d:52:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 14 15:30:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec7396a9ba457895ebe5dd0df9944931da75b512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:bc:6e:09:fa:7b:31:60:91:9e:5f:0d:4a:
f5:e7:72:f8:43:4e:7c:a3:cf:2b:01:06:65:b2:75:
39:45:6a:d5:18:30:c5:ef:14:e0:5c:96:47:1b:69:
17:0b:e2:ec:2c:2a:6f:85:c6:50:0d:75:69:96:fc:
b8:c5:64:76:dd:ac:9f:6b:de:e2:de:3f:c5:98:32:
f0:cd:9e:ef:5b:35:9f:ae:46:d8:24:19:d2:b0:47:
46:ec:d0:ce:bf:33:16:bc:53:1c:93:f1:15:db:1c:
d6:6c:5c:d1:49:f1:16:78:ae:99:a5:b4:b8:75:36:
f0:9c:f6:e0:7f:1a:e5:b5:fa:e2:ea:1d:0a:68:35:
33:da:35:8f:90:2b:ae:18:00:96:0f:1e:0b:7b:74:
0c:9f:be:e0:ae:fd:13:d9:58:04:d9:4c:c8:84:f7:
b7:22:04:ce:ca:15:e2:8e:e1:27:96:98:03:5b:e3:
69:c9:df:65:46:5a:8e:4f:8a:a7:2c:77:97:ad:d0:
0a:9f:a4:d7:d8:ac:81:71:df:60:f0:82:1c:b3:e0:
84:bd:4f:22:49:35:e8:e1:9a:89:b1:a0:a2:57:8a:
26:9f:2a:78:5f:cc:e7:d6:dc:8c:60:33:3d:4a:0a:
2f:3c:ee:30:03:99:7b:1f:db:af:1e:b6:2f:4b:f2:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:73:96:A9:BA:45:78:95:EB:E5:DD:0D:F9:94:49:31:DA:75:B5:12
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7HOWqbpFeJXr5d0N-ZRJMdp1tRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:680:4004::/48
Signature Algorithm: sha256WithRSAEncryption
d1:85:ca:94:73:e7:4b:fd:5b:62:4e:e8:88:2b:f6:7b:3c:66:
f2:4d:cf:82:8c:c2:40:9e:10:0b:87:46:e4:46:34:48:63:aa:
52:fb:3c:4a:3c:93:77:fa:ae:0e:31:ab:b6:3d:cf:0f:12:e6:
84:a6:6d:07:fa:aa:c3:14:a8:c7:2a:ae:a0:00:ca:27:77:5f:
19:a9:97:59:db:a4:00:91:b9:1d:4f:9a:0d:34:c1:f6:20:80:
cb:06:75:fe:72:ef:d9:29:fa:f0:5e:1a:da:78:90:be:e2:b5:
8c:f8:0f:f0:e3:84:cb:70:12:ab:5d:b6:5d:03:a3:6a:4d:3f:
e5:2d:ba:31:06:37:95:4f:68:dd:73:c8:c2:49:7e:65:99:3d:
ac:17:70:84:8b:20:3e:a4:c7:09:99:91:a4:16:ab:35:6c:9d:
46:2e:06:fb:3a:79:63:55:02:60:11:c8:e7:01:b5:8a:15:89:
e6:ea:47:d7:d7:ee:9d:c4:df:98:0f:38:72:c1:7b:40:97:a0:
22:c7:6b:43:8c:93:7a:90:a0:4a:5e:50:5a:49:a5:18:8f:a2:
b1:31:ac:17:ac:ff:0a:01:b3:a0:0c:6e:22:c2:64:98:40:9b:
95:b6:58:e3:6f:cd:b5:b2:63:50:3c:7d:5a:f8:ab:1a:92:3d:
51:ff:a6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:45 2025 by rpki-client