Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/zRuzAP_aDAwjwRHspU5a0R8T99g.roa
File: zRuzAP_aDAwjwRHspU5a0R8T99g.roa (raw, json)
Hash identifier: OW+sdKYpZlP1fzQutxmHVxhsxtFd8zyErNycn31fkUQ=
Subject key identifier: CD:1B:B3:00:FF:DA:0C:0C:23:C1:11:EC:A5:4E:5A:D1:1F:13:F7:D8
Certificate issuer: /CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Certificate serial: 0188E30FB2B692D43FD83AE221C50F60B1CB
Authority key identifier: 10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/zRuzAP_aDAwjwRHspU5a0R8T99g.roa
Signing time: Thu 22 Jun 2023 12:23:56 +0000
ROA not before: Thu 22 Jun 2023 12:23:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198053
IP address blocks: 2001:67c:768::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:0f:b2:b6:92:d4:3f:d8:3a:e2:21:c5:0f:60:b1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Validity
Not Before: Jun 22 12:23:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd1bb300ffda0c0c23c111eca54e5ad11f13f7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e1:7a:e8:22:5d:16:74:12:40:9f:54:05:3d:
4e:9c:66:9c:5f:a3:7e:5f:02:03:78:40:18:29:09:
ea:d1:1e:50:8b:d2:03:38:1b:38:ae:76:2b:18:e7:
55:5e:4d:80:22:fc:22:9f:c0:14:7c:06:2b:6f:3f:
08:54:c0:38:11:40:1b:ff:ab:9f:a8:11:63:48:b6:
ea:52:1e:67:ce:ab:9a:47:be:81:06:02:d9:ca:e2:
ce:63:b1:e6:58:80:93:24:06:90:5f:96:6e:96:8a:
3f:9e:0f:62:6f:3b:90:65:41:cb:64:e7:b0:b1:7a:
65:3e:d4:60:6c:8e:67:97:dc:cf:69:a2:93:08:1c:
9c:67:31:1e:71:97:6a:60:59:f8:69:c0:2d:81:35:
1b:f3:9a:55:b6:f9:69:e1:ad:d9:a9:ee:94:31:2d:
74:80:6c:fe:74:f5:68:6f:b2:af:1c:74:0c:87:24:
84:4b:9e:9b:54:8b:63:bd:49:f9:ef:e4:42:68:fa:
25:12:14:be:ee:8f:a2:03:25:f6:29:eb:3e:1e:ce:
60:94:7f:6a:be:d3:b9:e2:27:8e:ec:77:ca:71:31:
75:49:42:f7:2e:38:ef:25:94:a8:25:eb:b2:d6:5d:
5d:9c:0d:a4:e8:9a:70:80:28:00:36:12:46:5b:17:
6e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1B:B3:00:FF:DA:0C:0C:23:C1:11:EC:A5:4E:5A:D1:1F:13:F7:D8
X509v3 Authority Key Identifier:
keyid:10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/zRuzAP_aDAwjwRHspU5a0R8T99g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:768::/48
Signature Algorithm: sha256WithRSAEncryption
97:cb:57:e4:fb:22:ea:4c:a9:7d:80:5e:ae:ee:a1:bc:26:a7:
f1:46:9d:75:ac:fa:47:81:c3:b8:02:23:1f:f0:01:d4:02:c8:
fd:78:0c:b3:0e:5a:8a:27:c1:6e:7e:23:e9:1b:bf:64:5a:d5:
88:38:aa:2e:5d:ed:4c:ea:96:72:6f:ee:1c:94:74:68:22:82:
1d:ae:40:98:18:86:03:2f:bf:2e:9c:3e:dc:1d:2c:eb:e7:c1:
a3:e6:bf:6a:20:91:80:e7:3a:71:95:f8:9b:a6:56:45:96:9d:
80:0d:63:1d:88:e4:98:77:bd:4c:52:ab:bc:a4:03:f0:fd:b3:
ce:93:28:90:7e:7e:e6:73:b9:2f:22:51:02:82:67:8e:68:77:
12:b6:4f:74:49:3c:8c:fc:ac:08:d6:58:e4:0c:35:68:5f:e0:
01:54:1c:de:c7:90:71:21:cf:17:0d:03:c8:96:d1:f9:ff:97:
28:51:24:5c:07:0c:5e:32:18:4d:11:fe:41:9b:02:de:3a:1b:
39:86:52:e0:ea:33:61:b8:2b:56:8b:ec:92:1a:c3:94:d0:7f:
d0:83:f5:e7:30:13:6d:bd:b0:30:4f:e1:1e:ad:83:96:f5:41:
de:ee:eb:1f:f2:37:90:97:55:d0:ad:dc:2c:1d:df:7b:83:98:
2f:76:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:10:53 2025 by rpki-client