Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/6cNWfIruIjD7peJdP_Jkf0pGWH0.roa
File: 6cNWfIruIjD7peJdP_Jkf0pGWH0.roa (raw, json)
Hash identifier: BR+jRRH0CRPzmnBZDR5zV0AI1O5okrwub4ZeTnNJ7S0=
Subject key identifier: E9:C3:56:7C:8A:EE:22:30:FB:A5:E2:5D:3F:F2:64:7F:4A:46:58:7D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 0189350692960764A64CC851E218EAEEE9C6
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/6cNWfIruIjD7peJdP_Jkf0pGWH0.roa
Signing time: Sat 08 Jul 2023 10:22:50 +0000
ROA not before: Sat 08 Jul 2023 10:22:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138968
IP address blocks: 2a0f:6700::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:35:06:92:96:07:64:a6:4c:c8:51:e2:18:ea:ee:e9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jul 8 10:22:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9c3567c8aee2230fba5e25d3ff2647f4a46587d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:00:7e:0c:98:4a:48:15:06:11:db:22:8d:
08:a7:89:ee:b0:a9:3c:2d:f8:7b:a7:ff:1c:2d:2e:
7d:00:ff:36:34:ec:e1:cb:2f:5d:a5:d2:fa:06:91:
65:14:a3:8b:38:27:dc:4f:62:da:e5:61:9c:46:17:
c6:1b:5a:af:d7:0e:8e:d5:cb:6c:62:e8:38:14:62:
7d:f1:b7:fd:09:1d:ec:bc:11:4d:6f:8b:92:ce:70:
43:4b:3b:7a:15:f9:06:42:dc:08:06:85:02:fd:71:
58:ea:11:60:bb:d1:a2:11:74:40:39:b9:01:70:3b:
40:15:d4:b7:c9:32:73:cd:8a:21:8b:bd:83:53:fe:
d1:47:ad:ed:34:39:19:10:23:9f:8a:33:0c:9f:f7:
7d:4c:ca:ce:d2:cd:a9:5f:eb:8e:c0:72:ab:03:c0:
c9:66:46:0d:24:d2:cd:0b:3b:47:c0:c5:16:f9:80:
49:af:ff:9c:02:34:19:e7:a8:8d:93:f2:3f:7e:c2:
e2:f8:75:79:0f:15:db:bf:4b:a7:12:df:a5:58:11:
99:88:6a:b4:38:e4:c8:1c:a2:7a:71:3b:1c:6a:72:
14:c2:a0:c2:65:2b:2f:0a:88:e9:d9:5c:00:1a:c9:
81:ae:4c:28:c4:fa:31:33:6e:d6:1e:c6:0c:fa:21:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C3:56:7C:8A:EE:22:30:FB:A5:E2:5D:3F:F2:64:7F:4A:46:58:7D
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/6cNWfIruIjD7peJdP_Jkf0pGWH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6700::/29
Signature Algorithm: sha256WithRSAEncryption
62:31:04:e9:90:89:70:79:0e:13:1c:92:dc:57:bf:7d:68:0e:
6c:95:a5:bb:2b:40:b5:a6:d9:01:d7:56:da:ff:8c:0a:18:1b:
ba:33:43:7e:ee:a6:69:9c:91:09:44:18:0a:28:22:e6:86:db:
a6:14:bf:33:ae:af:fa:c2:84:08:b6:61:29:cd:88:ab:38:aa:
f7:b3:df:3d:84:bc:9e:c4:bb:cc:27:70:7e:60:c5:7a:a6:4d:
bf:d4:49:10:b5:72:8d:d6:ff:5e:2d:d8:1b:f2:ec:18:c8:3c:
10:51:c2:0a:28:43:ed:cd:38:87:5f:5f:01:f4:c7:a5:eb:a3:
3f:2f:13:46:9a:52:70:02:24:b4:33:79:7e:79:18:05:66:e4:
8c:4e:e9:fe:9c:68:71:71:a0:fb:1b:a3:95:79:dd:6b:51:27:
ae:2f:17:d3:af:3c:d2:ee:c4:d2:7b:4e:bb:68:86:ab:8a:e7:
c3:6d:8b:c7:32:10:90:c6:49:16:91:96:0b:a0:31:b8:8e:d2:
2a:04:c3:05:38:15:a2:30:70:2b:a1:d5:5b:c0:48:06:96:c9:
ed:a6:dd:a3:b1:c9:36:41:3c:be:dc:80:17:9e:5e:d7:72:99:
3c:b0:d5:5d:41:4c:8f:94:01:a1:e0:16:29:38:6f:33:8b:d8:
b2:2e:2f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:10:58 2025 by rpki-client