Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/LigXqdZrZNxgXmiolnbCpVuCtfM.roa
File: LigXqdZrZNxgXmiolnbCpVuCtfM.roa (raw, json)
Hash identifier: Bx2gRz5oAe90ys7VrSnPzAd346wh+w0tJs7h/YYjPyk=
Subject key identifier: 2E:28:17:A9:D6:6B:64:DC:60:5E:68:A8:96:76:C2:A5:5B:82:B5:F3
Certificate issuer: /CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Certificate serial: 0186C4C6F5F6B23B7B9FC8C855B92C783DD9
Authority key identifier: EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/LigXqdZrZNxgXmiolnbCpVuCtfM.roa
Signing time: Thu 09 Mar 2023 05:10:18 +0000
ROA not before: Thu 09 Mar 2023 05:10:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3204
IP address blocks: 2001:67c:17fc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c4:c6:f5:f6:b2:3b:7b:9f:c8:c8:55:b9:2c:78:3d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Validity
Not Before: Mar 9 05:10:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e2817a9d66b64dc605e68a89676c2a55b82b5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:88:6c:83:52:41:3c:ab:60:c0:90:17:da:
4f:24:b7:67:a7:90:6b:aa:15:9f:27:ed:6b:4f:9e:
c4:52:72:5b:9d:3b:64:e2:c1:5e:59:4a:4f:e0:32:
9d:8a:8e:ae:50:ff:7b:c0:bc:37:4e:d4:a6:18:ce:
16:c7:c7:8c:45:9d:02:c7:6f:08:39:18:af:bc:e8:
6e:b9:03:eb:ab:2d:e4:f3:f4:a8:06:72:76:e9:f8:
69:55:d9:47:17:30:50:19:a2:4f:f1:ee:e4:5c:74:
e2:16:8c:e9:2c:c2:1b:26:ca:9d:f6:48:f1:e3:c9:
b0:71:dd:a2:0b:a9:2b:90:61:02:e2:0a:b1:3e:32:
7a:d4:8f:88:f6:24:4c:74:38:9e:eb:51:51:d8:de:
45:ed:85:b7:42:bf:b8:9d:b4:f8:e5:da:fc:ca:e8:
1f:6f:f1:5e:9b:6b:d9:67:a7:ce:6b:c7:ba:95:e6:
f0:e5:b3:2a:b4:a5:e4:44:ff:de:73:35:d9:91:41:
ab:ae:ca:5e:94:4f:96:d5:e7:ef:4b:2f:f7:98:ae:
db:81:44:34:d1:ba:c1:40:4d:03:9a:3d:7c:05:24:
eb:bc:bc:80:de:d7:36:2c:6e:2a:88:0e:6b:09:16:
29:b1:6d:f4:1e:6d:8f:b7:07:9b:bf:73:b3:f4:fa:
2f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:28:17:A9:D6:6B:64:DC:60:5E:68:A8:96:76:C2:A5:5B:82:B5:F3
X509v3 Authority Key Identifier:
keyid:EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/LigXqdZrZNxgXmiolnbCpVuCtfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:17fc::/48
Signature Algorithm: sha256WithRSAEncryption
13:5e:02:ae:99:29:5f:4c:7b:40:09:6d:9d:93:af:0e:2a:45:
4d:0d:3a:0b:12:4f:c9:49:9f:bb:eb:70:47:af:7f:1b:79:34:
2e:5a:28:f3:85:43:a2:cf:bb:13:8c:87:39:dd:d4:2e:94:24:
40:19:4e:23:1c:b6:ae:d3:20:5e:2d:d2:ab:7e:db:a5:de:93:
37:8d:4f:b0:27:64:b4:8f:e6:c3:ae:30:be:59:76:45:81:bb:
9c:5e:c8:13:43:91:d5:40:5b:5e:e2:2d:49:df:71:32:bd:04:
bd:0f:0c:d3:c4:06:d8:98:37:1d:59:06:eb:80:e9:21:1c:22:
79:e5:ae:1e:4a:61:0e:ad:de:9e:19:aa:24:d0:40:65:92:16:
0c:95:0e:8d:25:bd:08:b5:aa:ae:87:c6:9f:c2:f1:17:d4:be:
7d:de:4f:f7:7f:ee:fb:26:d0:ba:88:d6:7e:d4:4b:21:07:6e:
b5:96:08:4f:a1:e3:c2:ab:03:80:81:a6:de:4a:ca:44:d2:8a:
3c:e2:1b:fb:17:14:52:8c:73:92:ab:2a:b2:1b:10:89:83:f4:
4d:f8:87:ce:9f:9f:56:91:6e:30:5f:ff:ff:98:c0:ef:e1:b1:
e7:4a:ff:b9:85:a5:8e:95:f1:3a:be:39:fe:55:2a:55:46:c2:
e2:23:23:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:46 2025 by rpki-client