Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/yXSrSnMh5fuZhTgXl1b6WPOsVfs.roa
File: yXSrSnMh5fuZhTgXl1b6WPOsVfs.roa (raw, json)
Hash identifier: VWh1UA4o2JpSWya5w/DVhg5npbVJY9mIm7T0BrQXo+E=
Subject key identifier: C9:74:AB:4A:73:21:E5:FB:99:85:38:17:97:56:FA:58:F3:AC:55:FB
Certificate issuer: /CN=5140b5cb5986084126f68d6032316d3b1b57696e
Certificate serial: 018CB65B7CE20F889B2926B0962C2E3C0F60
Authority key identifier: 51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/yXSrSnMh5fuZhTgXl1b6WPOsVfs.roa
Signing time: Fri 29 Dec 2023 16:14:58 +0000
ROA not before: Fri 29 Dec 2023 16:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198889
IP address blocks: 2a06:1b83::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b6:5b:7c:e2:0f:88:9b:29:26:b0:96:2c:2e:3c:0f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5140b5cb5986084126f68d6032316d3b1b57696e
Validity
Not Before: Dec 29 16:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c974ab4a7321e5fb998538179756fa58f3ac55fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:46:e7:ec:01:0f:8e:1f:2e:54:d0:35:7b:
8a:b6:4a:b0:ba:4a:a9:4c:38:32:49:5b:aa:fa:dc:
d6:3b:f8:d0:9e:10:04:db:14:53:e9:f4:74:0f:a5:
4f:87:ff:48:14:2a:1c:26:2c:e1:26:9b:fc:92:c6:
f9:28:ac:4d:e9:33:ea:29:fb:09:c7:66:4e:34:e1:
8f:17:f1:97:f4:d5:6b:51:a3:52:3a:a9:a1:75:d0:
a9:48:33:d3:35:3a:25:9f:b3:94:a9:0a:b1:22:73:
b4:7f:42:8f:5c:a3:50:1c:11:75:47:01:08:11:45:
d2:a1:6a:3d:38:26:e6:f5:3d:1a:4f:e4:15:7f:75:
dd:b9:db:5c:47:4d:f8:91:ff:14:c7:93:ba:9b:74:
fb:57:58:19:fb:d7:77:83:db:c2:d5:4c:67:fc:be:
8d:39:b6:9c:c9:e3:a2:7a:44:2c:d8:6e:fb:3e:22:
a3:b8:c2:ac:c6:c1:f0:22:73:3d:6e:e7:04:e2:47:
bd:64:7e:f6:9c:35:cf:5f:49:02:89:af:f1:23:7a:
a5:70:5c:f1:21:c4:ef:a8:00:b8:a9:13:e8:18:4b:
a1:c8:14:b4:f2:30:3b:7c:55:9b:55:60:be:ec:90:
36:bd:66:c6:e1:20:a3:b8:60:4b:0f:91:0e:40:aa:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:74:AB:4A:73:21:E5:FB:99:85:38:17:97:56:FA:58:F3:AC:55:FB
X509v3 Authority Key Identifier:
keyid:51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/yXSrSnMh5fuZhTgXl1b6WPOsVfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1b83::/32
Signature Algorithm: sha256WithRSAEncryption
18:04:55:bb:fb:96:72:49:f1:62:90:be:a4:e6:84:cb:9a:3f:
17:eb:d4:ab:54:a7:6d:73:d6:c4:b7:77:ef:f0:b8:f3:10:92:
f8:d6:4e:51:dc:17:84:dd:d5:07:c7:9f:cd:87:25:28:f3:0c:
85:1f:9f:1c:93:71:11:ab:4e:90:fc:07:31:61:ce:5a:29:2d:
68:6c:4c:b4:29:b9:2d:a5:88:95:fb:ac:21:62:29:d7:7d:76:
09:a3:4a:24:09:cc:81:29:38:d2:28:3c:3a:98:dc:a5:03:ef:
fe:16:e2:b2:c7:ba:2f:46:bc:41:9d:d1:e4:a5:dc:93:37:5a:
cc:7f:8b:5b:e4:53:99:c9:3b:13:88:2b:f1:69:76:5d:42:0c:
10:59:de:c6:69:78:c7:49:18:4a:f5:d7:8d:e0:c8:44:73:22:
78:f1:2f:aa:bc:a8:16:ce:13:88:23:60:f8:9d:18:67:bd:c3:
46:7b:9d:10:2a:df:ab:99:8d:dc:f8:c5:e4:56:a7:92:11:76:
f5:be:8b:39:54:e4:5a:dc:27:87:d1:9c:db:96:4e:2f:29:f4:
68:c9:40:06:48:a8:7d:b9:25:5f:0c:00:da:c9:19:6b:72:2e:
7d:5e:5e:d4:46:86:b6:e4:df:25:ed:f5:38:2d:b3:0f:35:2a:
2d:1f:35:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:58 2025 by rpki-client