Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/z6mbCLpD_XG0u9rL0w1LYHsfnyo.roa
File: z6mbCLpD_XG0u9rL0w1LYHsfnyo.roa (raw, json)
Hash identifier: DMHye0AKRLPQFQOkwO9I1FaHwooUa7qOhUgRaynsu9w=
Subject key identifier: CF:A9:9B:08:BA:43:FD:71:B4:BB:DA:CB:D3:0D:4B:60:7B:1F:9F:2A
Certificate issuer: /CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
Certificate serial: 01860C6332F465ADEE4B5202A560A809C83D
Authority key identifier: 3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/z6mbCLpD_XG0u9rL0w1LYHsfnyo.roa
Signing time: Wed 01 Feb 2023 09:51:13 +0000
ROA not before: Wed 01 Feb 2023 09:51:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212900
IP address blocks: 2001:67c:abc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0c:63:32:f4:65:ad:ee:4b:52:02:a5:60:a8:09:c8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
Validity
Not Before: Feb 1 09:51:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfa99b08ba43fd71b4bbdacbd30d4b607b1f9f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:77:54:46:04:29:49:40:4a:6d:46:6c:5e:
7d:1e:7f:28:3e:ce:66:6a:49:3a:d0:f3:ee:ea:a7:
18:cd:c8:88:4b:d1:c3:8b:01:b3:01:76:4d:38:c5:
af:69:c1:c9:3a:ba:83:7c:89:3f:2a:97:b6:f7:52:
fa:bf:ed:ec:61:43:fe:36:a5:1d:84:d4:db:40:0c:
6d:1a:8f:94:47:0c:af:91:3f:73:54:0f:8f:ea:62:
47:56:d9:85:dc:2e:74:1c:52:2f:93:5f:cc:d3:d3:
b9:93:a2:d0:19:e3:ff:fd:68:36:7e:e2:ae:4b:62:
d0:f9:8c:71:68:c4:94:99:97:ff:ed:60:d7:bb:20:
87:b1:bf:7c:6e:ec:f4:bf:07:37:57:92:55:46:c7:
db:ca:20:f2:47:fb:17:ee:f1:cf:8d:62:3a:12:22:
93:c8:c7:97:d7:0c:6d:97:e1:39:fe:d3:8b:a7:01:
76:ee:00:1c:00:ab:74:ae:b3:9e:83:1f:bc:e7:10:
30:c2:50:10:e4:e3:17:76:f6:9c:b4:19:67:21:ba:
52:17:5a:77:ea:22:cd:70:ef:4d:d9:fa:88:b7:3f:
db:ce:c4:51:24:0b:86:c1:01:f6:d4:72:b2:90:35:
e2:f9:08:4f:6a:be:c9:b3:8d:bb:57:74:b1:3c:1e:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A9:9B:08:BA:43:FD:71:B4:BB:DA:CB:D3:0D:4B:60:7B:1F:9F:2A
X509v3 Authority Key Identifier:
keyid:3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/z6mbCLpD_XG0u9rL0w1LYHsfnyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:abc::/48
Signature Algorithm: sha256WithRSAEncryption
6f:21:31:73:89:b8:56:c2:28:af:ad:64:31:1f:b5:f4:4e:32:
7f:9c:fe:ed:6a:eb:24:bd:2c:e2:2f:5b:53:97:49:be:1d:8c:
97:96:c4:32:72:f5:6e:06:fc:61:73:15:6d:ee:9f:89:c4:c3:
04:3f:c4:7a:a5:aa:4a:e2:2f:0e:d9:4a:b5:6a:6e:45:ad:34:
4a:a8:44:86:50:6f:6a:ec:8d:e2:9a:7d:8a:60:8e:c2:6b:39:
26:df:e0:0f:27:5f:9d:cb:0f:7b:9a:47:e3:61:94:ec:7e:ed:
bf:5b:31:3f:25:c0:e0:24:97:9b:4d:94:f2:01:9c:d7:55:5b:
70:b2:37:6b:c4:a7:f1:78:e1:71:fa:ce:91:8e:5c:f6:a5:f6:
ca:1f:f8:c1:11:23:47:1c:be:e5:8a:ca:2f:01:5c:9e:48:3f:
fa:1a:82:61:f6:c0:f4:b5:8c:84:2c:dd:fd:8b:9a:1a:d5:76:
8d:92:7f:1d:01:6f:e8:7e:9f:1d:bb:3f:73:e5:11:d6:c8:19:
0e:7a:81:8e:71:32:b3:fa:b9:62:06:c5:67:61:56:3a:ed:06:
2e:00:a7:6a:a5:06:2c:36:b2:03:75:d8:99:d4:67:0b:41:a7:
5f:e0:13:84:39:c8:b5:dd:84:18:03:08:2b:c5:9e:f1:27:d9:
4f:62:d9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:48:21 2025 by rpki-client