Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e7b591-0f5e-4141-be96-ddd53d7928a8/1/ZDeSLCgXKCXxuIbizJNmd25teXw.roa
File: ZDeSLCgXKCXxuIbizJNmd25teXw.roa (raw, json)
Hash identifier: lYTZqVdnpK81NlZp9qBk8J/2iknlHSHCkG5YJ+tg7cE=
Subject key identifier: 64:37:92:2C:28:17:28:25:F1:B8:86:E2:CC:93:66:77:6E:6D:79:7C
Certificate issuer: /CN=1de5601fe1222f89bb3aaaf264f0f6ea7391c138
Certificate serial: 018769F871EF65859039E71561274AF25BC2
Authority key identifier: 1D:E5:60:1F:E1:22:2F:89:BB:3A:AA:F2:64:F0:F6:EA:73:91:C1:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HeVgH-EiL4m7OqryZPD26nORwTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e7b591-0f5e-4141-be96-ddd53d7928a8/1/ZDeSLCgXKCXxuIbizJNmd25teXw.roa
Signing time: Mon 10 Apr 2023 07:01:42 +0000
ROA not before: Mon 10 Apr 2023 07:01:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204316
IP address blocks: 2a12:dc40::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:69:f8:71:ef:65:85:90:39:e7:15:61:27:4a:f2:5b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de5601fe1222f89bb3aaaf264f0f6ea7391c138
Validity
Not Before: Apr 10 07:01:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6437922c28172825f1b886e2cc9366776e6d797c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:59:a1:d7:82:98:4e:84:61:6a:fe:58:62:12:
6e:5b:4f:fa:ec:88:85:f5:13:e4:70:2f:b7:18:3b:
55:92:99:cf:75:42:12:62:98:08:10:d6:ac:ee:cb:
66:6c:d8:28:8c:4c:2d:34:6f:58:82:02:0c:a8:01:
8f:09:7c:fc:c1:c9:66:89:0e:df:d4:2a:20:57:b1:
3d:b5:dc:7f:bd:74:bc:05:2b:56:e2:0a:71:97:a2:
5b:7b:94:02:5a:23:52:90:53:10:37:6e:89:f9:13:
ba:9d:60:4d:b4:56:c3:88:70:e0:95:76:03:9a:d9:
4d:87:ac:28:42:a2:20:c9:fb:d9:2f:81:a4:a2:db:
2d:a2:3b:53:5b:4f:59:67:78:75:f0:64:db:0d:1e:
35:ab:25:83:03:3b:c2:c0:77:84:ef:a7:71:81:7a:
86:c5:ab:d2:96:d9:8c:f0:71:f0:8d:aa:5e:ca:fb:
c3:e1:f6:38:94:bd:66:cf:b2:fc:f9:0c:eb:a2:a5:
06:6b:59:af:11:e9:7f:72:3f:1d:bb:35:8f:35:ab:
14:1c:4c:67:d4:12:88:9b:ab:b8:b3:00:ce:dd:c2:
59:26:3f:04:fd:1c:ee:42:b4:79:a1:e2:48:ff:2e:
84:18:5e:72:2e:0f:fb:78:5e:e2:8d:42:ac:e8:aa:
2c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:37:92:2C:28:17:28:25:F1:B8:86:E2:CC:93:66:77:6E:6D:79:7C
X509v3 Authority Key Identifier:
keyid:1D:E5:60:1F:E1:22:2F:89:BB:3A:AA:F2:64:F0:F6:EA:73:91:C1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeVgH-EiL4m7OqryZPD26nORwTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e7b591-0f5e-4141-be96-ddd53d7928a8/1/ZDeSLCgXKCXxuIbizJNmd25teXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e7b591-0f5e-4141-be96-ddd53d7928a8/1/HeVgH-EiL4m7OqryZPD26nORwTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dc40::/48
Signature Algorithm: sha256WithRSAEncryption
b7:85:f5:76:08:fb:bf:e1:bd:6e:93:0a:ce:a4:6f:3c:8b:34:
e1:12:d8:2b:05:83:b9:68:92:d9:ab:1a:04:f3:48:b7:67:55:
79:4f:cf:e7:de:f0:6f:7d:eb:ef:9c:d8:12:d2:51:5b:b4:60:
b1:96:f9:c0:4d:cd:7d:22:cd:6a:6e:fd:71:92:44:95:40:cb:
34:9a:86:ef:5e:3a:e2:79:cf:b5:1d:26:83:4a:8e:54:82:62:
f9:cd:f8:5b:6c:13:a3:93:ff:7c:be:d7:4b:3d:ba:da:00:2f:
e9:83:d7:ec:e2:6e:ac:06:c1:5a:0c:f6:0a:34:5c:bb:98:b7:
dc:38:15:bb:45:be:8a:60:1d:80:98:d0:20:b7:9a:31:bd:3a:
51:f8:5e:15:f4:e7:f7:c2:0a:ff:fa:78:13:15:5d:fe:d4:d9:
f6:90:87:c7:db:80:21:3f:93:f9:9e:d2:80:ff:6a:44:bf:4b:
a4:e4:77:12:3f:8e:79:38:92:a2:00:57:4d:0a:ba:ee:1b:d6:
b3:04:69:bc:a0:b8:8b:64:ea:9d:92:61:a3:22:81:8e:7c:73:
4b:bb:00:40:50:92:4d:dd:58:41:bf:92:91:72:e7:71:7c:3c:
b0:cd:b0:b1:31:6e:10:b9:75:60:c4:24:73:4c:67:0c:36:02:
2d:71:93:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:46:18 2025 by rpki-client