Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/RysSIv_5uOZeE4Vb0op2YvIExYY.roa
File: RysSIv_5uOZeE4Vb0op2YvIExYY.roa (raw, json)
Hash identifier: 6+Ug9Tsxc2vxOhXxrlqZ1GT7RbFghY3rttMnELkwuNw=
Subject key identifier: 47:2B:12:22:FF:F9:B8:E6:5E:13:85:5B:D2:8A:76:62:F2:04:C5:86
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 01856C65B4C39B017180D57224DBAE7CC28E
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/RysSIv_5uOZeE4Vb0op2YvIExYY.roa
Signing time: Sun 01 Jan 2023 08:14:42 +0000
ROA not before: Sun 01 Jan 2023 08:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41954
IP address blocks: 2001:67c:25a0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:b4:c3:9b:01:71:80:d5:72:24:db:ae:7c:c2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Jan 1 08:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=472b1222fff9b8e65e13855bd28a7662f204c586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:5f:3e:c1:d2:7c:d7:b1:de:73:ad:c0:b8:
f8:7c:ab:f9:d2:27:27:cd:0d:47:87:18:4a:c3:6c:
65:f3:c1:48:ba:6f:7b:33:c5:da:20:2f:0b:7a:ab:
cd:d3:3b:49:07:aa:2d:28:d8:a8:cc:de:0d:ce:9a:
41:f4:f4:c2:3e:ea:f9:24:6c:7e:00:2c:25:da:ff:
56:bf:9f:d3:54:17:de:1f:5c:95:1f:b7:eb:9d:de:
e1:bf:02:d1:16:9b:8b:5a:bd:d0:bb:e6:e9:76:c9:
c7:66:e4:cc:2e:59:df:42:2a:f6:78:21:6a:60:3f:
96:1b:f8:e6:8f:16:8f:84:62:cc:c7:ee:36:80:01:
59:8b:0b:47:1b:be:f1:56:d5:20:48:59:6e:82:2c:
5c:91:b4:63:f1:c6:62:3a:f9:53:e3:95:2a:22:3d:
9d:ae:b0:3d:98:70:d6:ac:16:ef:74:33:ac:d4:22:
2b:b6:62:b3:65:b2:fc:29:df:96:89:5a:7c:51:b0:
05:c8:ac:a8:7d:07:28:08:01:fa:09:d8:a8:64:76:
5d:95:95:3a:e6:92:7c:d2:80:71:a4:26:59:00:02:
e9:d5:05:15:91:15:82:20:d0:6f:75:00:af:14:a6:
73:6a:97:ef:87:48:5b:5d:3e:cc:90:df:c7:03:7f:
74:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2B:12:22:FF:F9:B8:E6:5E:13:85:5B:D2:8A:76:62:F2:04:C5:86
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/RysSIv_5uOZeE4Vb0op2YvIExYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:25a0::/48
Signature Algorithm: sha256WithRSAEncryption
44:d6:9e:4e:19:1f:f4:1b:db:0f:86:5e:37:18:8a:63:78:70:
8c:60:aa:03:68:a8:1a:61:35:1d:db:99:da:1d:2a:0e:04:12:
8d:35:19:af:2b:65:b4:52:46:97:44:41:2a:22:78:2c:a3:10:
df:10:92:31:af:df:08:fc:49:7b:60:3f:21:32:af:9e:84:e2:
4b:4e:35:db:f8:71:04:eb:fb:35:bc:d3:d4:63:9f:ca:e0:60:
56:86:62:9a:13:99:e3:af:31:8e:7c:d2:ea:3d:98:d9:54:f3:
31:97:52:51:ce:6d:78:34:06:b7:91:98:39:5e:5f:a0:43:6d:
08:18:10:c7:59:3a:56:3f:f9:01:34:d9:87:5a:ce:a8:05:98:
74:21:eb:5f:dc:f4:da:8b:6a:d3:1a:c9:ab:1e:2a:24:fb:c9:
07:5c:24:3b:86:a1:1a:b4:ae:70:1f:23:ea:b9:af:f9:b4:56:
dd:b6:2c:f5:9e:9e:1a:c0:07:2c:6f:84:45:f9:f2:78:f6:7f:
cb:bc:c4:60:10:52:c0:69:59:7d:bd:7d:a6:2c:df:95:51:aa:
41:b9:be:e3:18:f5:4f:f2:a2:64:d2:d7:ab:cb:d1:53:d9:42:
28:3e:42:3f:ee:11:ea:31:e8:74:07:49:d6:06:d3:59:73:77:
5c:b4:a6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:25 2025 by rpki-client