Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/S-9sfH3Isc5xXzM6GPuRdB6F3tg.roa
File: S-9sfH3Isc5xXzM6GPuRdB6F3tg.roa (raw, json)
Hash identifier: oPfSy2Lc9S0cfNeINuBRq22XiVg/lVCoDGL9fQrdk14=
Subject key identifier: 4B:EF:6C:7C:7D:C8:B1:CE:71:5F:33:3A:18:FB:91:74:1E:85:DE:D8
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 01856C4A6F5C7C983F2B4DF6BCFAA5E09033
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/S-9sfH3Isc5xXzM6GPuRdB6F3tg.roa
Signing time: Sun 01 Jan 2023 07:44:55 +0000
ROA not before: Sun 01 Jan 2023 07:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211970
IP address blocks: 2a04:2dc0:18::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:6f:5c:7c:98:3f:2b:4d:f6:bc:fa:a5:e0:90:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 1 07:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bef6c7c7dc8b1ce715f333a18fb91741e85ded8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ca:e0:79:60:ce:77:a3:63:92:f7:26:c2:4d:
eb:67:64:de:50:e9:d4:b4:75:b1:cb:0d:3d:62:7e:
6b:f0:ef:c6:4f:cd:9b:c4:25:d8:95:87:53:d1:e6:
98:df:74:6c:f9:98:cb:5e:0d:d6:5c:ad:8e:37:3a:
64:a4:0d:1e:90:9e:bd:e9:59:73:6a:b9:03:78:85:
23:9c:d3:e2:6b:61:f3:38:30:63:14:b8:fc:ee:2a:
b3:40:f0:f8:a4:0e:17:99:a0:b7:ba:94:23:7d:30:
1e:3f:17:c7:d5:17:bf:ee:aa:a2:ad:b8:eb:63:75:
3e:87:14:45:f0:95:20:61:85:f5:76:64:06:b2:76:
66:a9:c6:8b:d8:e7:e4:f6:e0:93:9c:3d:3f:c6:03:
74:70:74:4c:a0:38:bb:19:2c:8f:ca:56:b5:9a:d6:
a3:b8:4b:fd:08:14:c8:e9:a0:37:f8:c0:88:0c:86:
3f:f9:8c:87:a6:c3:d2:7b:8f:d2:f3:e5:6a:22:12:
f6:7d:e5:ad:37:94:6e:36:74:ad:94:bb:9a:d8:d9:
e3:3f:93:d4:5f:8c:dc:2e:aa:c9:dc:5e:68:73:59:
04:f9:1a:b7:d3:27:b1:c2:9c:03:19:c9:8e:44:b1:
d6:01:98:1c:e5:41:1b:82:b4:af:b3:0f:ab:e9:2c:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EF:6C:7C:7D:C8:B1:CE:71:5F:33:3A:18:FB:91:74:1E:85:DE:D8
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/S-9sfH3Isc5xXzM6GPuRdB6F3tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:2dc0:18::/48
Signature Algorithm: sha256WithRSAEncryption
b3:80:8d:e1:41:f3:e9:aa:20:e5:0d:18:d0:3d:c6:ff:72:cb:
96:a5:ab:d8:81:94:f8:8d:d4:cf:ef:5d:7f:0e:5a:c2:07:7a:
90:97:65:18:f0:b5:fa:5f:e2:ba:15:74:30:73:96:cd:01:89:
b5:ae:e0:2f:ca:67:9c:51:4b:da:92:77:2e:a2:45:db:d6:5f:
90:f9:eb:26:6a:0c:27:b9:17:1f:1d:f8:4c:ed:f5:17:1d:c4:
b1:cf:2c:c4:d3:9d:dd:04:2c:1d:2e:11:a2:37:a9:34:18:6a:
b2:b4:a5:55:2b:90:df:ad:5c:db:95:42:8c:74:34:a8:ba:75:
ed:0b:68:9b:ea:59:98:b8:06:7a:ed:2c:a3:35:c1:ef:f6:b9:
97:35:fa:99:cc:55:00:c4:20:3f:c7:77:bc:9c:6b:c7:50:ca:
b6:89:ea:66:ae:bf:eb:b2:91:9f:55:50:dd:ab:b4:9d:97:de:
dd:71:d9:e3:5c:28:33:f2:9c:d4:86:36:31:72:c5:c9:5e:6c:
36:fc:48:d1:55:c0:67:be:a3:f6:a9:98:3f:1f:ea:f1:c4:30:
33:5a:75:93:b6:ff:e1:2d:c5:0c:63:3b:c9:6e:f5:44:df:ea:
68:99:24:af:3b:b9:fa:49:ee:a1:4d:a0:ab:cb:2f:cc:73:8a:
cd:17:7c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:55:33 2025 by rpki-client