Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/AtKuI8fdzjJ547GmqxTKLYdLs_g.roa
File: AtKuI8fdzjJ547GmqxTKLYdLs_g.roa (raw, json)
Hash identifier: yUESZbVD2lK7GMzRIRURid2lLiAIH7ya+HbZWj3Se1k=
Subject key identifier: 02:D2:AE:23:C7:DD:CE:32:79:E3:B1:A6:AB:14:CA:2D:87:4B:B3:F8
Certificate issuer: /CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Certificate serial: 01857246D736BFE26B281003B79A7A00E371
Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/AtKuI8fdzjJ547GmqxTKLYdLs_g.roa
Signing time: Mon 02 Jan 2023 11:38:43 +0000
ROA not before: Mon 02 Jan 2023 11:38:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208733
IP address blocks: 2001:678:3b8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:d7:36:bf:e2:6b:28:10:03:b7:9a:7a:00:e3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33
Validity
Not Before: Jan 2 11:38:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02d2ae23c7ddce3279e3b1a6ab14ca2d874bb3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:b2:db:4d:25:52:35:54:bd:61:86:dd:3f:
88:3b:17:37:69:bd:2e:a5:33:a2:d7:29:ae:d9:e1:
e4:83:c0:6f:9b:76:03:71:a9:b3:7f:02:ad:44:a7:
81:36:fe:59:e6:47:e6:00:f7:2a:76:9a:98:ea:d9:
6b:8f:25:f9:f8:dd:20:9d:bd:16:10:df:01:31:33:
5e:17:a6:ff:c6:fd:a6:e7:65:af:19:76:ca:97:a2:
4f:3b:f0:76:21:6b:09:61:a1:d4:27:53:47:b2:75:
de:8b:91:2a:59:74:c7:f5:22:b9:df:e1:35:e7:4d:
87:84:15:9b:47:dd:8b:d0:b2:04:51:52:4c:d2:eb:
cf:25:f4:06:a5:1a:0b:2a:f2:f4:b6:f8:10:43:3f:
1f:bb:b4:c6:75:27:f9:58:a6:a9:27:a0:bf:ba:69:
94:85:1f:10:79:02:42:f4:45:e8:e0:1e:f8:f1:eb:
6a:72:59:98:de:fc:1b:54:28:d0:b7:37:fa:0d:c8:
5b:0e:a4:df:3a:d2:16:66:6d:ab:8a:a9:16:c9:9c:
51:eb:e8:cd:bc:84:32:7c:4d:fd:bb:a8:3d:6c:95:
a2:62:da:04:d9:f2:3c:65:c9:19:d4:ae:44:0b:0e:
a0:a6:e9:2f:93:87:ff:c0:fb:a6:08:57:f4:00:91:
c4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D2:AE:23:C7:DD:CE:32:79:E3:B1:A6:AB:14:CA:2D:87:4B:B3:F8
X509v3 Authority Key Identifier:
keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/AtKuI8fdzjJ547GmqxTKLYdLs_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:3b8::/48
Signature Algorithm: sha256WithRSAEncryption
a2:cf:ca:c4:db:1d:2f:24:7c:85:da:95:44:ad:e1:fe:02:57:
fe:ce:ec:82:44:e7:a2:96:3b:1a:cd:fb:e2:2a:8a:d3:85:fe:
50:28:37:f0:28:17:81:1b:c2:89:ff:82:6e:81:77:39:57:07:
85:72:f6:92:ad:7a:c5:68:88:e2:bc:73:e0:89:9c:c7:8b:07:
88:6a:bf:b5:47:b5:49:bf:60:24:16:0c:e6:90:68:65:47:d4:
2b:ea:87:09:c5:7b:55:7f:96:4d:75:d8:b9:a3:e0:07:50:bc:
03:b9:a0:7e:49:ff:fd:f2:a2:b8:db:1a:02:bd:a0:70:0d:d7:
21:21:7f:cf:1e:e7:d7:0f:e0:b2:32:99:61:60:b7:f7:70:b9:
a0:25:e0:6d:a1:5f:0a:77:a8:23:06:06:53:3a:f6:1a:80:bf:
cd:1c:0e:9d:f5:3d:cd:5e:d9:13:b1:ae:5b:bc:ff:3c:aa:93:
4e:99:e4:66:f8:f2:6d:f7:5d:af:1b:a2:77:7a:42:61:13:98:
19:1f:22:b9:45:c9:dd:7b:ad:3c:a2:ac:ec:44:11:f4:27:22:
a3:cd:bb:3d:a8:59:f8:33:9f:c4:4f:32:53:f3:7d:c2:c4:01:
79:72:9a:41:f7:55:be:0f:7e:15:3c:e4:98:7d:bb:47:fc:33:
04:bd:d1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:49 2025 by rpki-client