Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/hInya6v6tXPGPEQfDOsRTosAEkE.roa
File: hInya6v6tXPGPEQfDOsRTosAEkE.roa (raw, json)
Hash identifier: SeYfw474+53BtZslUoke1amujfIitefH2YKrtteRpi8=
Subject key identifier: 84:89:F2:6B:AB:FA:B5:73:C6:3C:44:1F:0C:EB:11:4E:8B:00:12:41
Certificate issuer: /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial: 09A54CA7
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/hInya6v6tXPGPEQfDOsRTosAEkE.roa
Signing time: Sat 01 Jan 2022 16:07:40 +0000
ROA not before: Sat 01 Jan 2022 16:07:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35332
IP address blocks: 2001:678:880::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161828007 (0x9a54ca7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
Validity
Not Before: Jan 1 16:07:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8489f26babfab573c63c441f0ceb114e8b001241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:85:4e:4b:17:95:59:9c:c4:0a:a1:1f:24:
4a:ad:c9:17:a6:f3:ad:a4:6d:a1:03:a6:bc:46:9b:
0a:73:de:7b:c2:b9:0d:1b:0c:aa:60:bd:de:1b:54:
0c:24:03:04:6c:16:19:13:f5:9f:b5:2e:1a:bb:32:
b5:65:31:97:b7:9f:bd:6f:ec:8f:4f:87:b4:19:0c:
9b:95:ea:9f:5f:a7:39:9b:17:bf:cd:70:e1:67:b3:
fe:7d:49:99:8c:81:e7:24:e5:d7:3c:78:4b:b9:bc:
f3:9a:5b:dd:62:08:b5:ab:39:fe:8b:6b:7d:67:d6:
11:9c:e7:4f:a9:ef:55:09:dc:c7:3a:08:36:74:f6:
d4:d7:2d:09:d6:a4:67:b7:db:35:1c:97:fe:d0:2a:
59:39:c4:33:b2:d8:9a:c4:78:37:ca:a5:20:c2:2f:
c5:d4:95:98:2a:02:bf:1e:a0:ca:02:94:6c:a7:70:
f2:29:57:00:ae:25:b3:68:db:15:27:29:9e:40:95:
0e:9d:af:92:57:7c:9a:0d:8a:64:68:a1:bf:2a:f8:
49:93:39:32:21:b4:06:1d:72:89:04:9a:7b:3a:93:
5a:e7:27:f3:1f:fe:75:65:45:fc:74:29:37:6d:13:
05:61:2d:60:e4:28:bb:62:ce:10:0d:28:70:fd:97:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:89:F2:6B:AB:FA:B5:73:C6:3C:44:1F:0C:EB:11:4E:8B:00:12:41
X509v3 Authority Key Identifier:
keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/hInya6v6tXPGPEQfDOsRTosAEkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:880::/48
Signature Algorithm: sha256WithRSAEncryption
5e:9f:34:89:13:67:74:01:a1:bf:54:77:99:cb:5a:4b:8c:7c:
89:86:3e:4c:2e:76:3d:e5:8e:5b:54:52:ab:4b:bc:81:9e:2c:
0c:af:e2:d3:3f:87:a8:5b:e1:1f:f5:c6:ec:04:a5:6d:f0:39:
e9:a3:9a:22:16:13:ba:51:e0:b7:22:83:e0:61:6a:fa:b0:2a:
3a:e2:90:48:22:67:a2:69:c6:b7:38:c0:16:8b:43:7e:ab:49:
c3:0b:92:ff:e8:25:46:56:ea:f6:84:ed:70:78:51:14:e4:59:
f0:9f:32:87:0b:ed:ca:15:9a:70:55:73:70:34:0b:a7:29:12:
a9:99:9c:fe:95:3f:f2:31:8a:96:af:c6:8d:88:d4:f6:69:69:
6c:96:3b:b4:5e:0e:cf:12:39:1f:ad:0e:ba:cf:6a:01:8c:d8:
32:76:12:7f:87:ab:d6:3e:ae:f3:ff:06:6c:e4:8d:d6:6a:1b:
74:4d:95:77:75:9f:c5:ed:fe:27:5e:58:60:bb:3b:3a:e7:90:
45:83:0c:2a:c6:c4:2d:92:00:e1:b7:b4:fd:66:d0:12:d3:aa:
1d:26:d9:56:e7:58:fe:90:fd:6c:f8:d2:38:11:27:6c:5b:55:
2c:cd:1d:04:be:c5:76:d6:32:bc:f9:73:14:cd:a3:23:17:96:
4b:4c:ce:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:18:48 2025 by rpki-client