Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/_g8QLPIXvh4ovfQcMVdqwCF7sV4.roa
File: _g8QLPIXvh4ovfQcMVdqwCF7sV4.roa (raw, json)
Hash identifier: p1eTPUGE2Br1d6yC+imlfLY9XWiLDM+Z8lVsObMWPiA=
Subject key identifier: FE:0F:10:2C:F2:17:BE:1E:28:BD:F4:1C:31:57:6A:C0:21:7B:B1:5E
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018BF7EFAD8E21459DBEBDD73CC86992D1E7
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/_g8QLPIXvh4ovfQcMVdqwCF7sV4.roa
Signing time: Wed 22 Nov 2023 16:49:21 +0000
ROA not before: Wed 22 Nov 2023 16:49:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 2a05:b0c7:1200::/39 maxlen: 39
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f7:ef:ad:8e:21:45:9d:be:bd:d7:3c:c8:69:92:d1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Nov 22 16:49:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe0f102cf217be1e28bdf41c31576ac0217bb15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ea:55:22:81:b4:24:88:6f:7b:b4:17:80:b5:
42:d4:65:17:5d:0e:71:d1:0d:06:09:f1:4e:fa:11:
f2:7a:12:8f:d3:e0:66:47:44:3f:38:f3:54:35:96:
97:01:c9:11:cf:86:09:5c:70:57:d0:00:e6:99:28:
80:9f:ec:66:d5:85:58:b7:48:9f:94:8c:86:12:a3:
31:fe:1c:4a:21:ef:c3:87:25:b4:30:ad:91:65:da:
05:99:54:7e:af:b8:75:d9:40:60:f9:91:79:4f:63:
0f:a3:64:36:c8:2e:bc:80:9f:44:75:ed:01:9c:22:
b6:77:7d:54:ae:07:fc:7f:cf:df:b0:87:63:1d:bf:
66:5c:0a:ea:61:d5:83:05:3a:1b:60:f0:4b:77:da:
67:57:96:12:65:b9:08:34:1f:40:f6:ac:ef:0c:51:
a4:7b:a4:53:ef:8b:d2:dc:d3:93:d2:35:d2:8a:f8:
6b:cf:a7:a1:1d:0d:f8:f6:f3:84:5e:e3:94:79:55:
f4:34:36:ab:48:91:83:e9:77:1d:46:81:21:bf:b6:
d6:63:00:7e:76:b6:f9:3a:d1:41:fb:02:3f:8c:34:
8d:bb:bf:a4:0a:aa:7c:89:c4:3a:b5:e6:22:bb:60:
aa:c1:3c:2b:cc:a0:e1:7d:50:cc:a4:7b:9f:47:15:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0F:10:2C:F2:17:BE:1E:28:BD:F4:1C:31:57:6A:C0:21:7B:B1:5E
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/_g8QLPIXvh4ovfQcMVdqwCF7sV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c7:1200::/39
Signature Algorithm: sha256WithRSAEncryption
0a:55:6b:1f:2b:82:7e:a1:69:ce:88:7b:ac:34:5b:6a:2f:0f:
4a:8a:30:d7:2c:1f:a1:0e:9e:32:98:6b:9c:4c:84:1a:c0:de:
1c:d9:c4:7b:87:f0:f7:07:88:cd:09:ea:bd:dc:d5:87:c7:da:
63:32:95:f2:b9:b8:e5:0b:08:24:4a:77:01:de:bb:4b:c8:e1:
56:34:18:50:2d:b8:8a:15:6a:7f:26:51:b3:91:6c:6f:59:c3:
75:2e:7e:50:fa:32:4e:52:62:35:a7:b9:18:95:3f:c4:a9:99:
c5:a2:c5:5d:59:9d:20:93:5a:c2:c4:c6:54:64:16:7b:f9:46:
a1:ec:a5:52:59:5b:27:2b:14:2c:57:27:1e:6f:00:5b:6b:d3:
cb:d8:58:ff:46:95:01:0c:84:0c:0e:3a:14:1f:1b:b0:7c:dd:
bb:6c:7d:a3:3a:20:48:d9:2d:0d:b6:a1:de:87:35:69:34:80:
27:8e:d2:f5:80:9b:d8:7a:d0:9e:24:bb:7e:cf:1f:93:2a:b9:
54:28:05:c8:b9:7d:99:f5:3f:f3:af:06:88:cc:93:81:14:9b:
0c:64:41:04:52:ab:5f:ec:c1:b9:ba:a6:c4:21:10:cd:0c:9c:
33:91:19:23:25:9b:68:bf:ba:ea:d5:a2:8b:1a:7d:bc:1f:a4:
70:3e:5c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:33 2025 by rpki-client