Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/6IH-oXjx3WjaxSb5ahZALH8DETk.roa
File: 6IH-oXjx3WjaxSb5ahZALH8DETk.roa (raw, json)
Hash identifier: BNBLMAqDRUO8lX8p5036hCrA18TqgdZmP0NjBuuJKiM=
Subject key identifier: E8:81:FE:A1:78:F1:DD:68:DA:C5:26:F9:6A:16:40:2C:7F:03:11:39
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 01856E01C20EE3D03A6661103CAFD6AC3440
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/6IH-oXjx3WjaxSb5ahZALH8DETk.roa
Signing time: Sun 01 Jan 2023 15:44:46 +0000
ROA not before: Sun 01 Jan 2023 15:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12732
IP address blocks: 2a06:9380::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:c2:0e:e3:d0:3a:66:61:10:3c:af:d6:ac:34:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Jan 1 15:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e881fea178f1dd68dac526f96a16402c7f031139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:69:cd:c1:72:ea:a1:14:92:35:59:72:1b:
1f:7d:9f:c4:b8:5f:b8:5e:4e:47:b5:5a:ee:13:90:
be:ea:d0:58:69:ee:4c:fd:2a:18:2a:31:88:5b:3b:
39:85:f1:fe:51:39:42:a6:77:0a:3f:b1:74:fe:99:
f9:ce:e5:3f:6e:03:6d:a8:2f:d6:c4:d5:d8:88:20:
72:c7:37:f2:3c:00:bb:e7:91:ef:2f:4c:4d:7d:a1:
a6:0e:15:6e:0f:75:39:7d:6b:07:bd:b0:3f:74:ed:
4b:8a:7c:22:1e:c9:3a:a1:42:c7:6d:76:9b:18:41:
cb:87:df:5a:50:71:27:1d:c0:68:cf:fd:83:1e:17:
7c:78:e1:37:6e:88:4e:56:e6:14:80:ee:56:ff:b0:
e6:e2:c8:59:5e:88:48:ee:08:bf:4e:17:f9:de:67:
0d:95:08:87:e1:bb:1e:3f:be:db:4e:00:f3:e8:a4:
0f:ff:fa:da:0b:ee:05:fb:89:db:cc:0a:5b:57:6c:
45:a9:ac:ed:6c:34:9b:b2:92:6f:e9:c1:cb:59:4d:
39:06:62:75:70:d2:97:ae:8d:17:3d:6a:26:97:d5:
de:09:69:e3:df:41:d0:84:5f:cd:d0:0a:2c:38:e6:
37:8b:10:6b:12:bc:82:8b:b6:83:13:1b:62:c8:30:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:81:FE:A1:78:F1:DD:68:DA:C5:26:F9:6A:16:40:2C:7F:03:11:39
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/6IH-oXjx3WjaxSb5ahZALH8DETk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9380::/29
Signature Algorithm: sha256WithRSAEncryption
8a:91:39:aa:14:fd:8d:5e:9b:3f:0d:f6:f1:20:01:73:f4:7b:
57:47:ca:13:9b:3f:b7:c4:9b:12:09:2a:bf:b2:e8:b6:e8:1a:
83:03:50:17:56:69:5d:2d:83:79:db:ff:5b:e2:6f:64:10:a0:
82:ff:05:e3:46:92:f2:2c:bd:5e:e2:7c:b8:0c:6a:38:6f:d5:
89:f2:88:d0:81:3b:79:b2:63:80:5e:80:3c:df:36:c6:85:a1:
30:33:9d:7a:72:7e:87:ae:e6:b0:3b:4b:c3:f5:fc:ea:4e:a4:
e5:7d:20:43:8a:81:6d:40:42:a9:09:74:39:79:e3:f8:3d:48:
b6:c9:86:82:e9:f8:37:e9:9f:a7:32:36:39:52:79:bf:2b:de:
83:d1:3a:32:b2:b8:07:8a:2b:5b:99:45:38:8c:d9:73:f8:ff:
03:b7:6c:96:7a:b6:0f:44:fe:5c:52:41:b0:89:4f:b3:da:b3:
e5:b9:4a:8d:fa:9a:25:19:c6:a7:6e:a6:bc:fc:4c:3e:e9:82:
53:62:a7:f1:0f:b0:79:a4:d1:20:18:8b:a8:ae:10:ce:f1:4c:
04:fb:83:06:3f:16:70:34:64:60:51:f5:e6:d8:30:e5:2f:42:
8f:32:73:2e:0a:63:74:a0:de:ff:6c:b4:2d:df:d1:13:e3:cf:
b2:ad:b8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:06 2025 by rpki-client