Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/3PRWwW_gwy4Q7_BaUqSiSlAFFtA.roa
File: 3PRWwW_gwy4Q7_BaUqSiSlAFFtA.roa (raw, json)
Hash identifier: H16jbVj0J2jJXtJQgTHQ6snmco/2oDjAZe2+56oV9j8=
Subject key identifier: DC:F4:56:C1:6F:E0:C3:2E:10:EF:F0:5A:52:A4:A2:4A:50:05:16:D0
Certificate issuer: /CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Certificate serial: 0185723101455AA304146702471F3C5DDAFB
Authority key identifier: CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/3PRWwW_gwy4Q7_BaUqSiSlAFFtA.roa
Signing time: Mon 02 Jan 2023 11:14:52 +0000
ROA not before: Mon 02 Jan 2023 11:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 2001:678:d4c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:01:45:5a:a3:04:14:67:02:47:1f:3c:5d:da:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Validity
Not Before: Jan 2 11:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcf456c16fe0c32e10eff05a52a4a24a500516d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:7c:de:ae:f2:eb:43:24:7e:5a:69:24:b7:
ee:cd:ce:41:58:6d:be:9b:b9:d2:9e:de:08:db:4d:
0f:39:e4:3e:07:50:89:0e:3f:c7:f2:48:ae:64:03:
59:3b:b5:ae:2a:ad:aa:16:5d:8e:c1:49:d2:a7:31:
44:7a:60:80:dc:e2:cf:39:21:75:f0:c3:b8:19:d8:
07:65:10:b2:72:78:35:21:9b:01:06:9e:29:0f:d4:
45:9f:c1:49:f1:f3:f8:7f:71:48:4b:6c:7b:09:9d:
ba:67:4c:3b:7c:2a:83:86:b8:86:47:d3:73:59:59:
d5:28:7d:f2:23:a7:91:5e:01:37:aa:79:ae:78:7a:
76:19:e7:50:da:a7:fc:1b:71:37:9f:e1:cc:72:53:
e5:51:6f:e1:5a:f4:76:49:36:3c:47:15:7b:9e:08:
46:59:a7:21:19:a8:d1:31:60:6e:e7:b3:47:0e:2c:
a6:61:4f:8e:01:06:00:78:71:e2:d3:50:c5:e5:b4:
c3:3d:7a:c6:77:ae:79:19:4b:da:7d:53:d6:85:54:
c8:46:aa:4d:6b:be:e1:b7:a9:3d:1f:4a:82:50:13:
08:ea:bd:74:94:45:0b:9d:ca:94:aa:9e:a4:5d:82:
ea:fb:dc:5d:4c:0d:b1:8f:80:2b:b7:ce:50:88:a8:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F4:56:C1:6F:E0:C3:2E:10:EF:F0:5A:52:A4:A2:4A:50:05:16:D0
X509v3 Authority Key Identifier:
keyid:CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/3PRWwW_gwy4Q7_BaUqSiSlAFFtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d4c::/48
Signature Algorithm: sha256WithRSAEncryption
7e:b1:88:87:66:48:76:b8:22:4c:e7:94:76:15:71:25:4f:cd:
ae:39:f8:c1:0b:0b:5e:e1:fb:15:40:0a:90:03:b4:72:e8:69:
66:74:42:34:48:50:96:e6:e2:7f:18:43:23:a6:19:2f:c3:2d:
a1:a2:c6:aa:37:17:0d:04:f5:b8:5e:d4:61:c7:58:b3:0c:cf:
93:3b:98:24:10:6c:85:ed:69:d0:07:1a:8a:8e:1d:4f:da:f1:
e4:3c:c3:65:5a:d9:0a:68:a8:74:28:d7:3b:9c:62:12:ea:e6:
b4:6d:32:ac:e2:ee:5e:ee:c3:83:6b:3d:11:aa:e3:8e:18:1e:
a5:9c:b3:9e:e6:1b:5f:c8:9f:fb:4b:7d:cb:7a:b6:c9:7d:0d:
36:fa:07:dd:74:56:ee:a8:17:9d:72:8f:99:a3:1a:97:9e:f5:
46:f0:08:6c:b9:f9:35:9f:8d:6e:b8:c4:bd:fb:f2:7a:73:fe:
45:dd:a0:ac:14:2a:24:5e:0b:87:79:bd:e0:d4:c1:e2:d7:01:
0e:47:84:bf:c9:5e:0f:d0:56:fc:c9:fc:c5:30:fb:fa:b6:4a:
94:d2:a1:62:b8:c5:7b:5c:84:49:db:fb:69:03:a7:84:38:00:
4c:34:fb:2d:16:da:d3:13:6f:08:01:8e:a5:3e:f1:18:0e:f2:
92:ac:c9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:13 2025 by rpki-client