Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/EAx2dpYXu8gtirf8Le6xU4BFdrM.roa
File: EAx2dpYXu8gtirf8Le6xU4BFdrM.roa (raw, json)
Hash identifier: Sy1JjktAwK/pnObOCY3naWA2IgEAIVNF+hHufuX3RDU=
Subject key identifier: 10:0C:76:76:96:17:BB:C8:2D:8A:B7:FC:2D:EE:B1:53:80:45:76:B3
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 01875191167896875D2418D253DD4F44FFBF
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/EAx2dpYXu8gtirf8Le6xU4BFdrM.roa
Signing time: Wed 05 Apr 2023 13:17:55 +0000
ROA not before: Wed 05 Apr 2023 13:17:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211286
IP address blocks: 2a0d:8d04::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:91:16:78:96:87:5d:24:18:d2:53:dd:4f:44:ff:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Apr 5 13:17:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=100c76769617bbc82d8ab7fc2deeb153804576b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:79:20:fc:4c:19:39:ea:0f:98:3b:a0:f7:f3:
96:8b:02:3c:f5:2b:56:e4:85:4c:d1:44:aa:8b:27:
45:e6:ac:a8:0b:a5:9b:2d:a5:2e:b6:67:75:7f:5c:
58:5b:28:b9:5c:cc:02:3a:2e:39:28:21:85:06:0c:
a4:5d:bf:b1:99:2d:4b:c5:ab:1b:69:03:d0:c8:4c:
36:c9:7c:f4:e5:f2:86:c4:47:5c:29:04:d4:a5:06:
fc:77:ea:2d:c5:26:56:5a:92:d2:38:13:26:ae:cf:
ca:38:b1:d6:82:c7:01:57:eb:16:26:b9:6a:b6:c1:
37:be:06:aa:fe:05:94:8a:48:7c:1a:53:2e:6e:40:
9b:a6:64:57:83:72:60:9c:6d:f9:38:0a:0f:46:dc:
33:02:7d:7c:dd:bb:69:25:ec:40:50:a8:2d:00:a5:
87:44:fe:f8:df:87:01:10:f0:a1:77:9c:86:19:ba:
59:55:f2:a6:43:dc:85:95:ce:7a:70:71:26:ab:84:
7d:18:c9:30:18:6a:93:70:26:fd:89:32:55:04:d8:
42:5c:79:6d:0c:af:a4:62:ff:83:1c:20:0f:5b:6b:
b3:37:6b:e1:27:fc:00:1e:e8:1b:d1:a6:12:52:6f:
df:f8:8a:0f:5f:0b:c9:56:18:5e:07:3a:6f:3e:44:
11:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0C:76:76:96:17:BB:C8:2D:8A:B7:FC:2D:EE:B1:53:80:45:76:B3
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/EAx2dpYXu8gtirf8Le6xU4BFdrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8d04::/32
Signature Algorithm: sha256WithRSAEncryption
96:c9:89:23:26:f7:23:49:c1:d6:18:83:57:76:ee:7a:bb:63:
2f:87:35:a4:4c:6e:46:98:d3:ff:61:44:d1:24:11:9b:81:b0:
a4:72:9a:21:22:7c:7e:64:56:bb:4a:e0:50:92:04:24:49:6b:
88:cd:93:85:78:04:d2:a2:8e:51:a8:ee:a3:08:f4:d4:21:1d:
1b:ad:88:6c:6a:60:ba:f3:ff:3e:fc:2b:73:e9:e5:22:ef:49:
60:21:ed:2b:09:06:77:ef:ad:ce:2c:68:f2:c9:3b:84:a9:50:
82:f1:fb:6e:63:37:ce:ea:33:f1:8d:2f:7f:3a:c9:f4:e1:4e:
4d:6a:0c:09:ef:85:34:b9:22:de:ef:f1:aa:39:70:84:b9:71:
f6:a1:d5:22:2a:1f:3d:e5:2d:23:46:b2:af:78:9d:2a:c8:c2:
00:dc:69:eb:e1:92:d7:e2:4e:17:e5:20:cc:93:53:aa:95:4f:
c5:85:4f:5e:85:9c:64:59:37:fd:e2:bc:aa:cc:75:98:f0:94:
5b:38:6d:01:2d:36:6a:1f:41:60:ae:8d:21:3a:58:f1:c1:3f:
35:c6:d4:98:96:3e:0b:a6:78:60:fa:18:71:d0:25:3e:da:d9:
81:fb:f3:32:a1:11:ff:de:6f:fc:9e:8d:ee:36:c4:0c:da:e4:
fc:5d:30:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:02:11 2025 by rpki-client