Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/FdWSG6r0xYA77f7x1FNxPUwfXlc.roa
File: FdWSG6r0xYA77f7x1FNxPUwfXlc.roa (raw, json)
Hash identifier: xLMIU2JLCefIF/RMihTiHGmDWtWHwnR00/MjoDxcr2U=
Subject key identifier: 15:D5:92:1B:AA:F4:C5:80:3B:ED:FE:F1:D4:53:71:3D:4C:1F:5E:57
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 07DED3DD
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/FdWSG6r0xYA77f7x1FNxPUwfXlc.roa
Signing time: Sat 01 Jan 2022 01:55:48 +0000
ROA not before: Sat 01 Jan 2022 01:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57110
IP address blocks: 2a04:ff00:400::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132043741 (0x7ded3dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 1 01:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15d5921baaf4c5803bedfef1d453713d4c1f5e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:55:3e:ca:e2:1c:5c:68:10:57:ad:e2:f6:40:
5a:1c:a5:2a:56:d2:7f:b4:df:01:ff:3d:b0:ca:bb:
69:d9:dc:e4:c5:19:4f:e2:21:80:63:21:81:ed:df:
09:68:26:81:22:78:86:f7:bf:62:d4:ab:3b:5c:15:
46:07:7f:9f:52:40:4e:f2:22:7b:c3:aa:09:62:36:
ad:95:6b:04:81:96:3a:f6:70:ca:2b:55:ac:de:25:
e8:da:36:5d:d2:63:29:64:51:26:b9:74:3e:e9:92:
e1:bc:2b:02:74:2c:c1:f8:4c:e6:1f:72:1f:b7:67:
ea:13:58:3e:72:56:c8:b9:b4:cf:fa:b7:44:00:67:
5f:29:1f:d5:5c:40:db:f5:64:61:6a:11:15:79:b8:
72:48:3d:63:ef:b0:dc:16:48:a6:11:d5:8f:0f:21:
be:b3:79:31:5f:74:c9:4b:b8:fe:b9:bb:50:70:70:
00:70:e8:f7:8e:60:69:a9:63:1b:a0:9d:05:d2:56:
c9:35:76:af:25:53:91:f3:c1:10:06:2e:b2:cc:af:
68:ba:6a:af:b6:0b:20:f1:f0:95:98:bc:a7:46:42:
1c:70:14:8b:bc:49:af:a8:3f:61:8f:12:81:e1:50:
02:4a:86:46:50:2e:26:29:1f:64:6c:8f:8e:3b:45:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D5:92:1B:AA:F4:C5:80:3B:ED:FE:F1:D4:53:71:3D:4C:1F:5E:57
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/FdWSG6r0xYA77f7x1FNxPUwfXlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ff00:400::/40
Signature Algorithm: sha256WithRSAEncryption
10:0d:f1:a1:cf:1a:61:f0:33:56:82:3c:38:c2:55:a7:5e:e4:
f1:1c:88:6e:9d:df:6c:ae:75:79:8a:61:f7:4f:c4:a5:81:d5:
63:37:4e:69:a8:f7:10:cc:c3:1b:3c:5b:53:4c:d0:38:3a:27:
de:ca:9c:8e:91:6c:14:95:28:75:6d:81:38:aa:4f:24:f4:9c:
45:fd:4f:ef:23:40:7f:38:eb:76:59:78:1c:b9:22:1a:3b:a5:
a2:3c:73:66:9c:dd:ff:4f:bc:b1:62:e7:fe:bd:a0:3f:cb:a8:
1a:18:de:b1:12:81:b1:48:f7:35:98:a4:a8:5f:43:a4:19:fb:
17:9f:ef:75:3e:fa:1a:3e:f8:bc:bc:89:4f:4f:d4:ed:f5:8a:
ed:25:b8:ce:c3:95:44:cc:49:b9:41:53:49:9a:43:d3:48:1a:
db:12:fa:d5:8e:f5:d7:40:77:00:c9:8b:aa:f6:6f:01:4b:07:
41:09:f6:87:53:f5:6b:6a:b3:71:fb:35:47:a0:a3:e6:9e:6a:
79:9c:64:9e:b1:f6:55:97:61:c1:21:21:51:d3:09:e4:ac:ff:
b9:14:33:78:62:45:b8:29:8d:ce:03:8e:a4:66:96:c3:64:f8:
32:16:fb:2d:bd:db:1f:48:f7:7d:e3:ee:18:a2:47:f3:31:74:
3e:38:cf:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:52 2025 by rpki-client