Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/RqvBt3YYeyEd4fxox2aIjtemCfY.roa
File: RqvBt3YYeyEd4fxox2aIjtemCfY.roa (raw, json)
Hash identifier: 5nxq3LsDdtvBj4cg8Msla0odqPFpn7GxxbihAkjyae4=
Subject key identifier: 46:AB:C1:B7:76:18:7B:21:1D:E1:FC:68:C7:66:88:8E:D7:A6:09:F6
Certificate issuer: /CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Certificate serial: 018611DEA7A66B8248E4C1032F5A09023A94
Authority key identifier: 6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/RqvBt3YYeyEd4fxox2aIjtemCfY.roa
Signing time: Thu 02 Feb 2023 11:24:09 +0000
ROA not before: Thu 02 Feb 2023 11:24:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57964
IP address blocks: 2001:67c:830::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:de:a7:a6:6b:82:48:e4:c1:03:2f:5a:09:02:3a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Validity
Not Before: Feb 2 11:24:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46abc1b776187b211de1fc68c766888ed7a609f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:d1:df:b6:c9:60:ba:37:0d:55:8d:ea:89:
f6:fc:d7:4c:1c:59:ed:c7:b7:c0:b0:43:77:24:72:
27:d3:7c:11:db:a4:63:ea:09:86:47:90:76:29:d6:
c3:09:57:bf:8d:d2:6c:0e:f1:86:ad:14:19:d9:f0:
a9:af:f5:ea:91:f7:e8:a1:6e:67:c2:cd:3d:78:0d:
b9:d1:97:3b:c2:96:cd:cd:40:0c:f9:9b:a7:52:da:
09:d4:3d:e8:95:dc:97:5f:c6:98:37:c9:ba:90:d6:
36:92:24:f5:8e:d9:1d:76:6a:a0:c8:d3:8b:6d:bd:
ba:ee:64:78:d5:6c:7b:df:4b:e7:f2:48:7e:1c:90:
b3:20:1f:79:77:a4:eb:ae:bd:ea:cd:47:9a:98:01:
1c:d2:f8:f0:bd:44:4e:e3:d9:e1:62:ea:d2:06:33:
18:2c:2b:eb:06:ad:f7:5f:d1:7f:a5:1c:56:ad:df:
1a:d6:af:36:8f:f0:a1:b4:ac:7d:19:ba:4e:83:be:
38:06:fe:1a:6f:3c:1f:4b:a4:d7:6a:b9:b4:f1:4c:
9b:21:23:bc:3b:3b:e0:b1:2c:9b:05:83:b9:ef:47:
eb:72:b0:b7:ce:6c:e5:a6:db:4c:af:44:0a:3a:59:
c1:0b:b6:50:f7:39:9c:4b:3a:50:31:18:1d:9d:e7:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AB:C1:B7:76:18:7B:21:1D:E1:FC:68:C7:66:88:8E:D7:A6:09:F6
X509v3 Authority Key Identifier:
keyid:6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/RqvBt3YYeyEd4fxox2aIjtemCfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:830::/48
Signature Algorithm: sha256WithRSAEncryption
46:cb:82:da:eb:c1:f3:9c:cf:0f:4c:e3:67:25:01:57:3b:60:
7c:29:eb:9d:ff:51:79:ff:f8:bb:98:fe:72:31:26:3a:53:61:
f7:49:ac:99:33:61:ce:a6:b0:24:ae:23:7c:d7:a2:ed:c5:90:
57:34:b5:e9:0e:2e:f5:2d:ae:78:38:d7:b9:c9:ff:c8:9d:c4:
6f:04:b0:c2:17:c7:4e:c6:1f:35:8b:02:49:ae:c1:46:fc:14:
c3:9d:73:15:5b:80:05:73:87:d7:c0:4c:6a:c0:c6:ba:cf:41:
5b:7d:fa:48:63:63:13:99:f1:34:b2:bf:c5:69:2d:b0:9c:d2:
3e:9a:11:59:ef:9d:f6:d8:30:85:16:f3:65:6e:ee:40:9e:c0:
13:e0:c9:14:66:90:1b:67:c4:60:7e:0e:d9:8e:c1:81:03:4b:
56:ac:84:d5:ea:d1:e2:77:74:1f:fa:16:b9:5e:ba:e4:19:d4:
9c:e6:2e:dc:0d:b2:75:94:40:96:fe:e1:dc:c2:44:ba:a1:5e:
c7:c7:24:38:c1:ac:1d:39:6c:a3:02:9f:6f:cb:7d:0a:ff:b8:
a9:07:02:11:44:d1:67:76:ce:1d:6d:25:c8:d2:eb:0c:bf:e0:
bd:f1:49:d4:23:4e:f6:6e:a9:d0:d7:e2:51:62:24:bf:b1:9c:
ee:97:89:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:27 2025 by rpki-client