Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/_F0T58y22QHulLQrd70o4Lc7UQc.roa
File: _F0T58y22QHulLQrd70o4Lc7UQc.roa (raw, json)
Hash identifier: XR1VFK5FU3YQU7R4bZr+sIY3eXY4tYWNKkdKmjK1Lpo=
Subject key identifier: FC:5D:13:E7:CC:B6:D9:01:EE:94:B4:2B:77:BD:28:E0:B7:3B:51:07
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 01857283722E8D62EE7D7B2D0EA1675E44EA
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/_F0T58y22QHulLQrd70o4Lc7UQc.roa
Signing time: Mon 02 Jan 2023 12:44:55 +0000
ROA not before: Mon 02 Jan 2023 12:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50819
IP address blocks: 2a00:1480:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:72:2e:8d:62:ee:7d:7b:2d:0e:a1:67:5e:44:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 2 12:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc5d13e7ccb6d901ee94b42b77bd28e0b73b5107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:df:c8:b7:f7:35:3a:cb:60:d0:8b:f7:6f:
65:ad:b9:e8:31:18:31:d4:75:fd:d3:d3:5e:8c:cd:
fb:89:f9:f2:50:f8:78:d3:3d:54:d4:c1:1f:a8:c1:
4c:41:a0:3c:bc:4a:74:8c:7c:db:f7:85:3e:de:28:
f2:b7:72:71:97:16:4d:a7:b7:ae:b8:dd:9e:a2:6a:
0f:76:06:39:b9:b0:ba:a7:2d:b3:e0:35:a2:75:f2:
e3:aa:96:9f:5a:f8:56:31:9d:e0:be:f4:cd:1b:e0:
38:80:52:2b:c0:00:8b:05:42:bb:c7:5f:bd:9a:84:
ab:ff:dd:61:06:aa:29:60:9e:4c:9c:e1:55:9a:95:
42:9d:89:85:3f:98:5a:ca:ea:01:3d:3f:8c:5f:ce:
e4:98:fa:73:2f:91:9a:fb:1d:b3:eb:73:88:53:5c:
2a:b9:31:61:66:ce:06:34:a2:51:a6:33:b6:4c:54:
36:4d:0e:90:a3:00:71:c8:de:5f:19:35:0e:e2:c3:
03:89:ca:6f:76:46:f9:5b:1c:32:d1:8d:37:68:25:
c9:b2:fd:87:06:ea:da:09:74:9a:d0:47:3c:f5:79:
4d:d7:ce:1a:fa:1b:d5:b3:89:27:55:4c:b5:db:91:
50:c3:bd:79:f5:ec:49:08:6e:08:7f:f8:11:45:f7:
a1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5D:13:E7:CC:B6:D9:01:EE:94:B4:2B:77:BD:28:E0:B7:3B:51:07
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/_F0T58y22QHulLQrd70o4Lc7UQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1480:3::/48
Signature Algorithm: sha256WithRSAEncryption
b5:c7:d2:50:a9:52:e3:6b:e5:46:b9:df:70:53:93:dd:60:0e:
97:ef:2a:a9:b6:da:00:d0:48:3f:50:8c:35:25:bf:01:29:08:
a2:83:32:8a:ad:42:b1:5a:f6:b5:c9:65:7b:13:18:7f:e4:7a:
43:da:7e:46:4f:83:5d:45:35:76:89:5b:01:61:8f:69:18:2f:
fa:50:06:eb:33:cb:e3:79:46:c3:8d:bb:0f:38:4c:3a:b2:71:
e7:9a:df:01:e7:04:53:fc:39:1d:15:1d:d8:b0:0d:cb:3c:78:
df:af:c7:d6:d2:75:45:19:59:ed:1d:2c:14:04:12:07:15:71:
c7:b2:e4:a2:69:65:de:3c:b3:e7:19:26:4a:84:b1:54:42:61:
cb:2c:a3:b9:c0:33:96:7a:4b:ac:ce:0c:23:db:11:ba:d6:71:
5c:55:11:61:7a:53:36:76:9f:00:54:7d:62:de:5b:dd:32:85:
e4:0a:df:ed:ac:d3:6b:14:77:f8:1b:b5:e4:92:96:b3:8a:8e:
a2:20:db:68:07:48:98:34:f8:25:a2:87:11:b6:e2:e2:80:1f:
71:ce:d0:c5:78:1d:ec:2d:e0:8a:ef:66:30:99:e3:8b:87:88:
14:7e:ae:e9:a6:28:19:fe:78:50:45:e9:2a:9d:ac:e4:ef:00:
a0:e1:e0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:11 2025 by rpki-client