Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/6uLx3uxwU4jdmJMGX6tObjjRHW4.roa
File: 6uLx3uxwU4jdmJMGX6tObjjRHW4.roa (raw, json)
Hash identifier: P+pmYqapgYwMpMM6k+AV0+V3ATj5+2GR//OD73pR6RA=
Subject key identifier: EA:E2:F1:DE:EC:70:53:88:DD:98:93:06:5F:AB:4E:6E:38:D1:1D:6E
Certificate issuer: /CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Certificate serial: 01856D4AA39A5392293B47E5468BDB07BABA
Authority key identifier: 78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/6uLx3uxwU4jdmJMGX6tObjjRHW4.roa
Signing time: Sun 01 Jan 2023 12:24:46 +0000
ROA not before: Sun 01 Jan 2023 12:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29608
IP address blocks: 2001:678:938::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:a3:9a:53:92:29:3b:47:e5:46:8b:db:07:ba:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Validity
Not Before: Jan 1 12:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eae2f1deec705388dd9893065fab4e6e38d11d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bf:0f:62:c7:22:37:8d:45:50:e5:e1:87:1d:
3c:a2:f0:93:05:0f:1f:64:30:40:7f:4d:1f:9b:f6:
15:05:b7:16:9a:ac:25:2f:14:b5:df:17:38:2c:a1:
83:56:a3:f3:b4:3a:aa:11:93:69:65:1e:24:ed:0b:
6c:12:38:07:8b:8d:c7:b6:27:f9:e6:cf:64:5d:83:
c9:20:4a:41:22:f6:93:0b:e9:46:26:7a:81:89:69:
e9:61:7c:67:c9:57:b7:e9:03:7a:06:48:d6:27:05:
c4:e1:c1:c0:ef:02:a6:99:c9:0c:44:7c:58:57:07:
4f:1f:d4:89:3b:66:ed:33:00:42:c0:af:5c:dd:a8:
12:79:c2:89:48:7d:ba:7d:1d:d0:37:86:8a:4a:71:
a2:b1:76:a8:74:9f:44:b4:fc:12:7a:26:c1:81:54:
92:6a:9e:d5:92:15:00:e3:62:db:f5:f5:62:70:f6:
f1:cb:e9:85:ff:3d:df:0a:f3:30:5f:79:70:10:23:
25:8d:64:6a:8b:aa:d0:bc:33:41:e1:af:88:29:c9:
25:12:dd:f2:37:9b:40:b5:27:e0:7e:cf:e6:ee:f1:
05:1b:29:a5:7f:8d:da:6e:2a:07:a4:ab:e4:49:e9:
25:95:14:5d:33:06:a1:63:da:0f:63:65:2e:df:fe:
4d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E2:F1:DE:EC:70:53:88:DD:98:93:06:5F:AB:4E:6E:38:D1:1D:6E
X509v3 Authority Key Identifier:
keyid:78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/6uLx3uxwU4jdmJMGX6tObjjRHW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:938::/48
Signature Algorithm: sha256WithRSAEncryption
5b:ef:92:dd:f0:de:c2:c2:ef:cc:48:a4:87:01:b9:bb:e0:f0:
ca:56:be:8a:48:63:89:40:2b:eb:11:33:08:c5:ba:6b:9a:70:
8d:16:80:6c:42:de:ec:e1:ee:1f:34:d1:6e:95:ea:c9:f9:65:
3b:c2:c8:98:8d:52:70:bd:aa:b3:fe:61:d9:ea:7e:c4:a5:80:
fe:fd:c5:f8:b4:e7:88:3e:22:74:5c:27:27:61:8a:e0:85:70:
99:2a:95:d9:1a:0c:e8:11:51:00:5b:13:1f:e4:b0:44:d8:4d:
88:59:77:bb:21:73:e4:c3:08:a5:08:a7:03:13:76:61:fa:97:
dc:8f:c2:8d:48:46:42:d3:ae:1f:a7:65:fe:ea:f0:ea:d8:0a:
20:01:0f:31:b0:5d:0d:ad:5f:61:25:0f:1c:9f:81:18:36:d6:
e1:93:98:f6:6b:59:a9:79:9f:81:1c:b5:5a:a8:58:b0:32:a4:
8b:a7:fa:54:f0:7e:49:93:1d:e6:95:0a:a0:f6:45:35:7d:ee:
47:f9:4a:c5:7e:b2:81:c2:1d:67:67:d7:3d:26:4e:28:bc:c9:
bb:a4:2c:bf:02:b1:e1:ca:3f:d6:97:76:06:20:cd:17:a0:34:
48:cc:6d:5e:86:92:98:fe:55:19:63:17:64:8b:65:1c:bd:8c:
55:15:9d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:19:04 2025 by rpki-client