Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/1-QN2wNUXRRDD0zDc8Z-wmGFGq4E.roa
File: 1-QN2wNUXRRDD0zDc8Z-wmGFGq4E.roa (raw, json)
Hash identifier: /dO23VuK+up1p/Ynj1/yE2BRp+tJHi7Tle1DSxvOSHo=
Subject key identifier: F9:03:76:C0:D5:17:45:10:C3:D3:30:DC:F1:9F:B0:98:61:46:AB:81
Certificate issuer: /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial: 01887BEA81465062AA269D57FC2E8EDD34D4
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/1-QN2wNUXRRDD0zDc8Z-wmGFGq4E.roa
Signing time: Fri 02 Jun 2023 11:42:26 +0000
ROA not before: Fri 02 Jun 2023 11:42:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210918
IP address blocks: 2001:67c:c58::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:ea:81:46:50:62:aa:26:9d:57:fc:2e:8e:dd:34:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Validity
Not Before: Jun 2 11:42:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f90376c0d5174510c3d330dcf19fb0986146ab81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:17:52:86:f6:9c:7e:3e:d0:22:88:8b:4e:d1:
c1:8e:be:66:53:7a:67:1b:f0:a2:0b:41:64:ea:27:
98:d0:ea:7d:2a:82:9a:c8:40:10:de:35:b3:1f:b7:
9c:5a:a6:27:45:e3:ac:36:15:1c:67:cf:37:13:11:
57:92:7a:11:60:10:3c:fb:75:90:43:bd:29:dc:97:
ea:72:79:ea:81:da:2a:38:2b:d3:8b:d5:4e:40:00:
a3:fb:68:7b:1d:01:3b:2f:e5:83:85:83:87:85:53:
d4:94:32:3a:c4:57:8b:30:34:dd:55:28:b8:4d:f8:
e2:a1:12:7e:38:91:79:56:37:0e:f5:3b:ea:d4:09:
07:88:f6:5a:15:48:b5:15:1b:fc:af:3b:f9:3e:cc:
a3:ba:5c:32:e5:d3:42:35:6a:c1:71:20:f5:fe:74:
83:d8:00:f5:02:c7:e6:95:e8:02:79:51:dc:2f:96:
e8:c4:3e:45:24:d6:28:df:b6:aa:10:ee:eb:e4:8a:
d5:87:db:0e:b5:2b:30:b2:4e:e9:80:bd:6f:76:8d:
eb:40:a9:96:6c:7a:0f:37:69:55:5d:1e:75:b1:a7:
b7:31:ad:15:3e:24:24:e4:ca:4f:97:5f:96:87:34:
8a:c4:c3:75:d2:78:5d:15:45:ec:47:bc:ba:c4:21:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:03:76:C0:D5:17:45:10:C3:D3:30:DC:F1:9F:B0:98:61:46:AB:81
X509v3 Authority Key Identifier:
keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/1-QN2wNUXRRDD0zDc8Z-wmGFGq4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c58::/48
Signature Algorithm: sha256WithRSAEncryption
42:f6:52:db:f2:80:71:75:93:7d:b8:4e:9c:b2:ab:9b:8c:00:
cc:b2:9a:a0:5f:79:af:a3:99:6e:06:ab:e3:b3:c9:20:11:6a:
74:65:d8:4d:63:f6:00:65:08:a0:59:db:43:ab:9a:57:1b:38:
92:57:ff:8a:58:a7:7e:2d:2a:81:89:11:d4:9a:70:02:73:a6:
df:b3:e7:d8:9d:08:19:10:c4:34:b7:d1:16:0f:36:89:54:57:
b6:2e:15:89:3e:f6:a4:0e:4b:ca:96:e0:82:de:51:eb:f3:69:
fe:58:28:c4:0f:04:8d:46:15:00:75:1a:0a:be:67:dd:c1:8f:
c7:fc:63:c2:c8:43:f0:06:2e:6b:db:86:b3:4c:5c:4c:88:3c:
b1:78:88:cb:c1:c3:aa:46:d6:89:81:cf:b3:46:25:8e:c3:4e:
2d:04:e7:3c:ba:ff:4b:ce:cc:a3:41:ed:ff:c2:3e:b4:12:80:
e8:88:3b:bc:56:cc:19:50:47:0a:49:55:7b:4d:71:2f:b5:4f:
b9:ab:2b:c7:e0:f5:4f:d1:26:12:cc:12:7d:29:27:6e:b7:9a:
0a:2e:a6:7f:d1:e9:c4:be:27:8f:2a:49:07:a8:6f:cd:5b:83:
89:18:d1:4f:d4:be:10:cc:5a:a4:26:f8:db:b8:0f:d1:56:3e:
16:59:8b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:24 2025 by rpki-client