Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/v4KA9UeVQpeo-Ukncgh3B0eJCCI.roa
File: v4KA9UeVQpeo-Ukncgh3B0eJCCI.roa (raw, json)
Hash identifier: A570aXewZuKFuh3xX0kDYmSDCGPq6h7mBb6366iuXKY=
Subject key identifier: BF:82:80:F5:47:95:42:97:A8:F9:49:27:72:08:77:07:47:89:08:22
Certificate issuer: /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial: 04BB6D09
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/v4KA9UeVQpeo-Ukncgh3B0eJCCI.roa
Signing time: Sat 01 Jan 2022 04:58:44 +0000
ROA not before: Sat 01 Jan 2022 04:58:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213100
IP address blocks: 2001:678:d68::/48 maxlen: 48
2001:678:d6c::/48 maxlen: 48
2001:67c:2848::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79392009 (0x4bb6d09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
Validity
Not Before: Jan 1 04:58:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf8280f547954297a8f949277208770747890822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b7:56:a6:76:df:be:79:e2:2d:3f:56:8d:14:
e6:ef:7a:59:90:2e:77:e9:3b:4d:7a:ff:93:fa:25:
69:c8:4e:68:c9:00:8e:d2:48:5b:82:54:4b:a4:1c:
ce:2b:5e:11:15:93:de:84:85:9e:15:26:10:d4:b0:
da:8e:13:16:15:c8:e4:38:1b:f4:15:eb:41:8f:b8:
e8:80:0b:0d:0f:bb:42:da:97:f6:db:52:57:15:82:
3f:a1:5f:c4:8e:9d:39:8c:5c:16:4d:ec:ef:c0:c6:
b1:03:51:21:5f:60:5f:c0:f7:6e:ae:b5:92:a4:4d:
8e:54:c7:c8:d6:99:32:83:17:89:6f:fb:61:82:c6:
8d:42:2e:60:cc:13:b2:4e:5f:6e:4c:87:87:54:94:
aa:d3:3d:01:f0:3c:32:3d:34:85:d3:d9:26:03:e9:
ce:fd:df:46:52:3c:19:18:fa:d9:9f:60:62:58:b8:
26:5a:47:ab:90:59:a1:5b:c0:90:66:b8:c1:74:27:
d6:f3:bf:bc:b8:1d:d5:e7:d9:e6:ad:05:36:5b:c3:
68:0b:1c:bb:db:9d:22:2e:e0:25:0a:ce:80:26:10:
30:dd:b9:27:e0:8d:83:78:b0:e9:8c:8e:d8:6c:de:
c9:6b:8b:2d:c1:54:58:19:fd:f5:62:67:e2:75:31:
1a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:82:80:F5:47:95:42:97:A8:F9:49:27:72:08:77:07:47:89:08:22
X509v3 Authority Key Identifier:
keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/v4KA9UeVQpeo-Ukncgh3B0eJCCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d68::/48
2001:678:d6c::/48
2001:67c:2848::/48
Signature Algorithm: sha256WithRSAEncryption
8b:0c:62:7c:8f:6f:71:1b:b9:0c:10:52:12:1d:b3:18:56:bb:
2c:ad:9a:79:f2:58:99:aa:ee:f5:34:f6:67:e7:2a:3d:08:33:
8f:c4:4c:f2:73:cd:e9:05:b1:93:6b:9b:f5:80:2e:18:fb:5f:
89:ee:c0:46:b1:aa:84:bb:02:a4:13:54:b8:d2:6a:89:7a:b3:
d5:c7:91:2d:49:18:36:cf:f5:6c:64:de:79:b9:3a:df:2c:a1:
66:c3:18:5d:16:ee:a0:ae:b1:98:21:f5:77:d5:d4:29:b4:4e:
de:d8:c3:c9:fb:f1:87:84:1c:e4:05:f6:b5:18:5b:3b:8d:5f:
74:c7:68:a3:7f:fd:c7:5c:48:4e:51:64:4e:13:a3:84:17:5a:
c3:83:2f:43:a6:de:fc:6e:29:a9:18:c4:49:96:dc:9d:e2:69:
ca:e0:7d:50:e3:8b:8e:5a:60:d3:04:de:28:ab:46:d2:53:5e:
d2:e8:ab:74:c8:bb:4b:ef:d8:9e:da:97:67:af:e1:95:80:6b:
1e:4a:e3:c1:0c:c3:b0:6b:2d:39:bf:73:f6:8a:42:17:3c:1f:
85:92:06:9c:a7:24:ef:0d:4c:a6:50:a0:3d:f3:78:e7:e5:c8:
9d:1a:ec:54:75:25:8c:5f:15:b9:4a:63:9e:01:d8:d5:c3:63:
51:a5:5a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:05:44 2025 by rpki-client