Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/KvUf0KhDYlNQwcg0wHW-tGiBO_w.roa
File: KvUf0KhDYlNQwcg0wHW-tGiBO_w.roa (raw, json)
Hash identifier: 3CfVx9BtzIhoyUFf6X+j5v2dtf0a42Vlcf6b2aOqzAs=
Subject key identifier: 2A:F5:1F:D0:A8:43:62:53:50:C1:C8:34:C0:75:BE:B4:68:81:3B:FC
Certificate issuer: /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Certificate serial: 0185967DD59A0A3A18218E1318F20DF58AAE
Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/KvUf0KhDYlNQwcg0wHW-tGiBO_w.roa
Signing time: Mon 09 Jan 2023 12:25:07 +0000
ROA not before: Mon 09 Jan 2023 12:25:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28847
IP address blocks: 2001:67c:41c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:7d:d5:9a:0a:3a:18:21:8e:13:18:f2:0d:f5:8a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Validity
Not Before: Jan 9 12:25:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2af51fd0a843625350c1c834c075beb468813bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:46:16:98:e9:8b:a7:07:c2:ba:27:5f:f4:
fd:9c:83:14:1d:1e:2d:ae:10:1d:f0:94:75:6f:a6:
87:9b:bc:2e:a3:b4:c2:ad:e6:37:06:dc:c2:c1:13:
0e:d1:c3:e5:fb:54:8d:ea:c5:5a:bf:d5:c0:97:03:
8e:c9:4e:4d:f8:4d:ca:ce:0c:76:4c:84:a2:e6:e1:
57:2e:2d:24:7f:2f:a6:2a:3c:e6:a3:ef:34:fd:f5:
48:d0:f4:c8:99:26:97:94:07:f8:de:b0:9f:9f:e1:
b0:1a:49:0d:80:ba:d4:db:1a:e3:5b:78:07:37:e6:
6f:f3:2d:99:c1:b9:4d:4c:6b:06:87:09:b1:28:5d:
93:b6:5f:e0:6b:63:15:c6:af:8a:e1:6f:6f:98:67:
d7:54:c2:a8:57:ce:a4:1a:b9:f5:44:b3:aa:6b:31:
9f:f2:e5:02:a8:3e:b9:ff:6b:7f:b5:3d:fd:83:3f:
56:84:cc:30:d8:35:3e:5a:9f:b1:f0:1d:3a:d4:53:
59:6f:9b:b9:5e:cb:c9:5c:45:c9:3c:d1:5f:50:67:
7b:9d:98:d6:9f:56:b3:40:cd:f1:ec:e0:12:24:f7:
7e:5f:25:36:59:fd:8d:e5:6e:3d:53:58:0f:72:b5:
e7:3c:fb:df:f5:4a:c0:66:0f:7e:bb:43:df:e7:fd:
f1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F5:1F:D0:A8:43:62:53:50:C1:C8:34:C0:75:BE:B4:68:81:3B:FC
X509v3 Authority Key Identifier:
keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/KvUf0KhDYlNQwcg0wHW-tGiBO_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:41c::/48
Signature Algorithm: sha256WithRSAEncryption
c8:d7:96:d5:f2:e1:15:57:6a:22:73:21:b5:d5:a5:02:d6:c9:
1f:eb:36:80:da:5e:9a:37:d4:2f:01:0e:d2:8d:46:74:60:1e:
42:c6:47:3e:db:f7:13:a9:65:54:9d:92:36:1a:3f:ad:d6:79:
9a:28:f5:35:06:a3:20:07:74:06:18:f7:1b:3f:78:44:4d:df:
53:cc:b2:2e:ec:7e:52:55:80:7e:44:3e:2f:0b:c4:43:73:fb:
7e:93:62:55:32:e5:ca:f1:03:01:10:76:88:7e:90:1d:48:8d:
1e:a1:19:fd:d0:26:11:63:9a:88:83:49:11:6c:03:cf:a8:8b:
83:26:4e:0d:67:b4:93:50:b6:69:1e:38:ca:67:58:9e:1f:64:
71:eb:9e:1a:8c:2b:52:86:8b:2a:61:a1:a7:9c:12:67:77:ec:
dd:29:f8:aa:ca:4e:26:aa:b4:87:0d:ff:a4:3d:6f:ce:35:dd:
c5:0b:02:f2:32:c3:02:9c:28:9c:a4:26:38:ad:7f:6d:33:0f:
12:d9:dc:8b:2c:a9:a1:b7:6d:1d:6e:7a:d8:1a:bd:a2:7b:c8:
3d:7d:7d:49:8b:61:51:ed:51:b3:92:c7:69:a1:e2:13:26:c9:
a8:87:24:2c:a8:66:ab:c1:63:9a:cb:35:f9:e1:f2:cb:b9:b6:
2e:eb:55:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:27 2025 by rpki-client