Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vLgU8hfld31f7AnvwP19jJA0H2A.roa
File: vLgU8hfld31f7AnvwP19jJA0H2A.roa (raw, json)
Hash identifier: 9221PUAGECBXhHrd5AuX7ArwYMNkuq9xRNPTlSzRnZs=
Subject key identifier: BC:B8:14:F2:17:E5:77:7D:5F:EC:09:EF:C0:FD:7D:8C:90:34:1F:60
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0186A75354B8BEF3A1195479F14A9F4B6CFC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vLgU8hfld31f7AnvwP19jJA0H2A.roa
Signing time: Fri 03 Mar 2023 11:55:01 +0000
ROA not before: Fri 03 Mar 2023 11:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199613
IP address blocks: 2a0e:b107:11b0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a7:53:54:b8:be:f3:a1:19:54:79:f1:4a:9f:4b:6c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 3 11:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcb814f217e5777d5fec09efc0fd7d8c90341f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:d5:27:6e:ae:66:f3:0e:11:fd:0a:f7:66:
f3:1f:64:f1:0e:90:0f:1e:fa:d2:68:75:fd:24:12:
e6:7a:a1:15:9f:40:9e:c8:9b:de:55:82:73:cf:9b:
46:1c:78:7c:3e:12:b5:06:99:ca:06:67:41:08:3f:
72:a2:5c:a3:06:00:d6:75:ec:38:97:35:0b:72:63:
71:cd:ec:10:14:7f:df:6f:8e:62:0a:08:dc:f4:d5:
72:5e:e9:e4:ab:a2:f5:44:4e:18:89:e9:52:33:60:
68:f4:4a:19:4f:88:81:ce:f9:86:89:ea:9a:73:ed:
d7:00:e7:63:03:03:c8:df:b3:41:58:af:28:1f:44:
06:b6:39:6e:4c:56:70:72:9b:b5:81:09:9a:2b:6a:
6f:5f:d2:33:5b:91:81:45:89:10:27:a3:e6:38:6a:
73:1c:71:30:be:02:cb:3b:70:c0:2c:f3:ba:0d:f3:
17:0e:5d:e6:ba:87:d6:0a:a3:5c:ed:d3:76:ce:3a:
28:58:66:90:32:25:73:85:c1:6a:5d:f2:c3:df:4c:
14:43:78:50:4e:96:cd:de:c5:84:a8:31:4c:87:93:
c7:63:6a:69:bf:60:2b:ac:e1:98:93:77:7e:4f:7b:
78:bc:87:e7:b5:07:f9:23:5e:df:0d:99:81:77:df:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B8:14:F2:17:E5:77:7D:5F:EC:09:EF:C0:FD:7D:8C:90:34:1F:60
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vLgU8hfld31f7AnvwP19jJA0H2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:11b0::/44
Signature Algorithm: sha256WithRSAEncryption
36:d5:96:ee:5a:bd:22:d5:98:40:27:45:3f:8d:d1:b2:69:9d:
bf:33:94:3d:e3:55:6b:93:aa:ff:ef:34:2e:4b:cb:26:97:ff:
31:a7:40:02:97:f4:9c:dd:ad:9c:a3:f0:e2:cf:cc:28:1e:05:
d3:89:27:63:91:3c:c3:dd:54:1e:a2:04:98:48:df:98:28:fd:
f9:46:6d:cc:e5:4a:ba:a4:67:f8:8b:3b:39:50:1b:4f:c0:4d:
45:56:8e:47:33:94:a2:85:68:64:df:c8:38:8e:5a:b2:9b:1b:
c1:73:ea:c0:e4:90:cb:dc:1c:a8:8c:e8:23:08:0e:e6:4c:c0:
7b:82:17:36:b9:a6:22:a6:7e:1b:83:21:56:96:67:8f:da:d5:
30:96:52:57:79:a4:c9:70:1e:f2:9b:7c:2f:f0:aa:7f:3e:57:
74:58:19:cd:46:85:37:0b:f1:5e:cd:76:3a:f7:e0:49:4f:9f:
5e:61:cb:c6:89:3c:63:33:6a:b7:84:27:ca:99:2d:2b:fb:0e:
a4:37:25:44:b6:e2:0d:62:6b:a2:b1:9e:31:ea:e2:96:c5:a4:
14:61:32:fb:12:22:9d:75:8f:b2:ff:09:97:0b:6f:66:a7:eb:
15:2b:f7:e8:ac:ad:e5:b2:dd:c1:27:65:8f:e0:26:e8:31:a8:
f8:66:fc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:32:36 2025 by rpki-client