Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/ANdzl8-B2h01DdLeuyXnTWEmU7c.roa
File: ANdzl8-B2h01DdLeuyXnTWEmU7c.roa (raw, json)
Hash identifier: Wisziva25jKPy6FTQsaNX9Zt2wh9nrKJ4DowC3tTVlU=
Subject key identifier: 00:D7:73:97:CF:81:DA:1D:35:0D:D2:DE:BB:25:E7:4D:61:26:53:B7
Certificate issuer: /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial: 0187D2CE6CB39AAAE28ACAD3BF933DCD4BCC
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/ANdzl8-B2h01DdLeuyXnTWEmU7c.roa
Signing time: Sun 30 Apr 2023 15:35:56 +0000
ROA not before: Sun 30 Apr 2023 15:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200957
IP address blocks: 2001:67c:be4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d2:ce:6c:b3:9a:aa:e2:8a:ca:d3:bf:93:3d:cd:4b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Validity
Not Before: Apr 30 15:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00d77397cf81da1d350dd2debb25e74d612653b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:8f:de:39:f8:5d:e2:53:30:bf:da:2c:5e:
a0:34:b1:60:3c:93:c1:5d:7f:0a:a5:6d:26:48:c0:
2f:c6:cd:4b:1d:c0:2d:a9:91:5b:02:c4:e6:36:a8:
15:31:8f:c4:66:43:41:0d:fb:3d:f3:e3:c1:90:c8:
80:7a:b9:6d:b7:10:97:03:fe:ca:a9:9f:2e:9f:c9:
dd:bf:39:a2:f0:72:da:3f:17:ce:53:9d:d0:1e:db:
e1:46:a3:44:f5:a3:6c:17:a1:cf:b8:d2:58:e4:ca:
59:98:d2:6d:20:e4:6c:a3:9c:1f:9d:dc:64:8a:2c:
54:5a:74:d0:56:73:8c:41:02:5f:cb:f5:43:f5:b2:
5c:60:50:25:91:14:f7:ce:29:d8:44:ff:31:8d:b4:
4c:ec:82:79:4f:9e:ed:9e:84:d9:61:0b:a9:86:fb:
be:d8:0c:5c:c9:2d:53:4c:ec:1d:0f:94:86:21:81:
c7:8a:c3:76:eb:27:cf:9b:9f:b1:2b:4a:d3:ae:fd:
43:cd:f4:9a:35:b0:fb:4e:ed:9a:d0:53:af:4a:2c:
c7:56:c6:7f:87:d2:23:00:cc:65:b4:c8:b3:29:b6:
82:f0:d7:4c:1e:02:51:6c:57:99:45:6e:58:aa:99:
f4:d1:d6:b5:41:97:a8:8b:6a:a2:3e:ee:02:31:b5:
27:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D7:73:97:CF:81:DA:1D:35:0D:D2:DE:BB:25:E7:4D:61:26:53:B7
X509v3 Authority Key Identifier:
keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/ANdzl8-B2h01DdLeuyXnTWEmU7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:be4::/48
Signature Algorithm: sha256WithRSAEncryption
37:b7:65:51:bd:ea:3e:0b:5e:f9:7f:16:ce:86:42:45:6e:ec:
aa:1f:eb:69:bc:d8:dc:3b:f4:b3:6c:3e:96:7e:03:ce:91:b1:
87:6b:7a:44:d0:8c:75:53:37:d0:8d:fd:b9:5b:19:82:0e:ac:
9f:b2:16:4e:25:37:e4:8d:7b:4a:7f:ab:02:c1:85:63:e6:f9:
83:6e:cb:64:fe:ea:af:46:9d:a9:54:52:ae:4b:a1:64:c7:0c:
7a:08:fe:d6:5d:19:67:32:6d:0f:3e:7b:59:bd:ef:89:5a:54:
c3:9c:ce:ff:7a:be:c3:76:47:9f:31:31:21:f9:66:db:d1:00:
97:17:67:7d:8b:56:0d:51:8f:78:98:ee:c8:a5:75:f2:3c:10:
6f:b2:ec:02:62:97:3a:66:4c:e1:b8:d8:be:8a:29:21:6e:43:
de:13:61:b1:55:1e:7c:e8:e4:8a:c0:ad:3a:37:a9:3f:ac:ff:
3c:3d:0a:aa:b9:76:97:c2:62:0e:0b:77:38:65:3d:f6:12:37:
b5:15:22:6c:b0:1c:e4:0e:07:22:e5:7e:a4:38:be:bd:bd:f4:
d4:42:15:69:5a:1b:09:f0:c5:8f:01:f4:c5:e6:cc:8a:b6:83:
ce:02:cf:b5:6f:56:a3:96:bd:ba:1a:16:d2:6c:10:cd:b6:be:
dc:68:c9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:13 2025 by rpki-client