Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/8FnDiPMSNVpb0FKyQ9iz2ZtqwMs.roa
File: 8FnDiPMSNVpb0FKyQ9iz2ZtqwMs.roa (raw, json)
Hash identifier: 8alSloxo6eulqPSveuKXGTAsBFVOKUArv74bKlkwIvk=
Subject key identifier: F0:59:C3:88:F3:12:35:5A:5B:D0:52:B2:43:D8:B3:D9:9B:6A:C0:CB
Certificate issuer: /CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Certificate serial: 054093A1
Authority key identifier: 3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/8FnDiPMSNVpb0FKyQ9iz2ZtqwMs.roa
Signing time: Sat 01 Jan 2022 09:02:32 +0000
ROA not before: Sat 01 Jan 2022 09:02:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213210
IP address blocks: 2001:678:9b4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88118177 (0x54093a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a12854a8400d8c87ea4de7a22fdf1bf574a9031
Validity
Not Before: Jan 1 09:02:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f059c388f312355a5bd052b243d8b3d99b6ac0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:51:37:cc:73:19:76:ec:db:53:5b:f1:90:
20:92:fb:fc:ef:9c:6c:bc:74:2c:0a:17:b6:c0:65:
05:a4:5a:9b:e3:55:e5:f6:58:4a:fb:e5:56:34:bf:
c0:f8:13:7b:c5:6a:8c:b0:7c:cd:9a:7a:de:06:cc:
07:85:c1:f1:b2:4c:4f:5c:fb:fd:40:52:75:11:86:
71:52:f3:1e:cc:b4:06:64:ff:71:7e:74:27:33:d1:
c0:17:34:c3:1b:b5:7b:40:bf:10:28:e9:3a:47:de:
59:29:97:52:ad:3e:f4:35:f6:4c:a7:b0:4e:c3:19:
9d:91:7e:83:ba:35:b1:56:5f:e2:17:7e:28:54:69:
ba:fe:46:38:bf:90:6a:b3:81:ce:d1:7b:57:88:2a:
81:17:b3:a3:85:54:9d:5a:f1:f7:59:34:ce:ab:f4:
04:52:30:de:ad:df:ef:cb:5a:64:7d:5a:7e:1f:31:
c0:c8:36:2b:4f:ee:af:48:d5:88:7e:34:e0:4e:b1:
db:b1:31:d5:09:13:2d:29:07:63:b5:96:fe:dd:75:
51:ca:d6:b8:19:36:56:be:51:f6:18:69:68:a5:87:
ef:e1:5c:40:a7:77:f7:5e:dc:4c:36:34:6e:28:a4:
36:94:d8:02:70:b4:c8:a1:5a:e3:2b:12:d5:9d:b1:
a6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:59:C3:88:F3:12:35:5A:5B:D0:52:B2:43:D8:B3:D9:9B:6A:C0:CB
X509v3 Authority Key Identifier:
keyid:3A:12:85:4A:84:00:D8:C8:7E:A4:DE:7A:22:FD:F1:BF:57:4A:90:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/8FnDiPMSNVpb0FKyQ9iz2ZtqwMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2b6e16-9ce8-49da-9ed3-6829d68e2a54/1/OhKFSoQA2Mh-pN56Iv3xv1dKkDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:9b4::/48
Signature Algorithm: sha256WithRSAEncryption
80:d9:e8:f6:f5:cd:a2:30:a8:b0:16:aa:57:ae:b1:dd:76:08:
0d:6b:de:cd:1d:f4:f0:aa:77:ad:b0:85:b6:88:a0:a2:97:15:
a0:af:ba:ee:bd:84:3d:e2:3d:da:50:5e:84:94:32:29:84:12:
7f:a7:c1:8c:77:fc:be:0e:58:90:79:e5:a3:87:0b:2e:78:29:
5c:13:38:52:b1:52:e3:cb:e7:21:74:9f:51:98:1d:ad:42:b3:
ae:6e:e5:cc:cb:63:71:80:7c:ab:5c:d2:32:a4:50:a9:10:2f:
7e:66:df:c9:7a:09:66:13:8c:a0:b9:9d:55:5c:8f:6c:98:77:
1c:b3:72:8f:25:e1:3e:5b:ce:fc:f9:d2:83:d5:a0:f6:e2:4f:
92:bc:37:e5:62:09:bc:11:ad:2e:0d:c3:ed:e5:66:7d:a1:36:
fe:79:68:f6:01:3c:0c:d0:25:6f:cd:c9:96:4b:db:a3:82:34:
c9:07:de:ec:df:da:c6:c1:8a:a7:b9:b1:f6:e7:cc:16:f2:9c:
22:62:25:d3:69:c7:4d:9d:94:a1:61:ae:fe:12:59:e2:22:1e:
2a:7c:1f:02:7a:12:97:92:33:51:99:38:07:a3:d1:0a:d9:47:
21:cf:ff:f2:33:43:b3:48:ee:ef:94:0b:78:34:99:52:73:03:
ec:c5:64:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:17 2025 by rpki-client