Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/6-wLPoKXiH7x0k6AyxdyJjrIuws.roa
File: 6-wLPoKXiH7x0k6AyxdyJjrIuws.roa (raw, json)
Hash identifier: oNkkLk//UKZxcKNhVmhQxMtkXa5QgHiKdRT2SvQuFOk=
Subject key identifier: EB:EC:0B:3E:82:97:88:7E:F1:D2:4E:80:CB:17:72:26:3A:C8:BB:0B
Certificate issuer: /CN=207799027329f22682764573af2115da95a9f6bf
Certificate serial: 018570FBC0DB687B2BD5E73A6CD8349C2567
Authority key identifier: 20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/6-wLPoKXiH7x0k6AyxdyJjrIuws.roa
Signing time: Mon 02 Jan 2023 05:37:05 +0000
ROA not before: Mon 02 Jan 2023 05:37:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210945
IP address blocks: 2001:67c:808::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:c0:db:68:7b:2b:d5:e7:3a:6c:d8:34:9c:25:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207799027329f22682764573af2115da95a9f6bf
Validity
Not Before: Jan 2 05:37:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebec0b3e8297887ef1d24e80cb1772263ac8bb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:52:33:e4:ad:23:ec:68:0d:7c:99:14:22:
43:31:e4:6d:89:43:68:ce:f3:02:07:6a:71:da:dd:
69:b1:95:d9:65:8d:a1:c1:ca:8d:b9:66:7b:36:25:
3c:d7:46:1b:bb:a1:3b:54:2d:8d:0e:5f:54:51:df:
53:3a:38:b9:de:ae:f3:42:72:1e:e7:60:f1:3f:64:
b5:30:a3:83:41:b2:a9:58:f4:b2:a5:cd:95:5b:4e:
f7:83:52:71:5d:0c:49:c6:05:5e:c8:55:79:71:22:
6c:7b:ee:f6:10:eb:f4:33:23:c8:81:e9:0a:ae:ad:
ed:6e:ba:74:71:a3:0c:03:18:b5:e1:0b:a9:06:94:
66:71:56:4f:08:97:84:34:77:a5:70:cd:cd:00:bb:
4b:15:0f:95:4e:d7:9e:3c:5b:2e:fa:f9:d7:81:15:
da:1f:8a:30:8c:2d:a6:b7:84:3d:af:d7:c5:54:9e:
00:7b:a9:fc:f5:d8:7e:cb:9f:e2:57:66:87:de:27:
17:7e:8f:be:c8:65:aa:0b:7d:f1:48:1b:b0:9a:be:
a0:82:ec:ef:05:cd:0c:0a:98:4a:e0:28:cb:08:55:
f9:70:95:ca:c5:c5:18:e9:09:1a:0b:f0:bd:be:0f:
07:c5:2c:0e:08:7e:b5:34:76:5a:26:21:45:53:80:
03:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EC:0B:3E:82:97:88:7E:F1:D2:4E:80:CB:17:72:26:3A:C8:BB:0B
X509v3 Authority Key Identifier:
keyid:20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/6-wLPoKXiH7x0k6AyxdyJjrIuws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:808::/48
Signature Algorithm: sha256WithRSAEncryption
81:88:da:a3:6c:51:c3:09:92:22:e4:19:cb:7f:e0:68:3c:b0:
4f:8a:44:54:79:37:0a:60:8b:e5:92:11:35:5b:ea:12:a3:e7:
95:18:1c:ee:2c:65:b1:3d:b0:f9:03:5f:51:ee:d8:0b:99:70:
3d:de:7d:c0:25:95:bd:ae:a2:69:9d:ec:5f:50:9c:b2:2a:88:
88:7b:15:fb:1a:b5:1d:32:5e:7c:9f:3f:2d:d6:95:a4:d2:23:
00:12:cc:fe:ca:af:b8:00:44:64:07:71:e3:1c:f2:04:14:94:
3d:1c:e2:cb:ca:20:92:66:7c:2e:e2:1a:d3:f2:06:0c:15:d6:
fe:db:db:fd:8b:b1:eb:b1:fc:8c:b7:1e:fa:45:86:6f:2a:5e:
8c:80:7d:1f:65:61:ed:56:96:4d:23:8c:e7:f7:01:66:bb:7c:
c2:e1:ce:76:96:69:a4:50:64:13:73:61:fa:76:79:ee:58:80:
62:0c:90:99:69:97:2d:89:14:9a:f7:44:e7:eb:1f:26:a4:93:
5f:5b:ed:3e:cb:06:d3:59:52:d4:b1:d7:ec:b7:ae:26:ae:51:
19:4d:14:c8:45:ff:a6:43:af:52:6e:16:c3:8d:4b:bf:d4:13:
91:c6:2f:fe:2a:e0:20:6c:08:c3:b3:65:01:9d:d1:fe:eb:49:
be:b5:72:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:54 2025 by rpki-client