Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/EUjiGd4WqNMf-InZwF2P2bdJKW0.roa
File: EUjiGd4WqNMf-InZwF2P2bdJKW0.roa (raw, json)
Hash identifier: 8GensFOP0WG3S2anExiYHpIRbGbTfFuWD7505iN64lk=
Subject key identifier: 11:48:E2:19:DE:16:A8:D3:1F:F8:89:D9:C0:5D:8F:D9:B7:49:29:6D
Certificate issuer: /CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Certificate serial: 06C5835E
Authority key identifier: 81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/EUjiGd4WqNMf-InZwF2P2bdJKW0.roa
Signing time: Sat 01 Jan 2022 13:58:50 +0000
ROA not before: Sat 01 Jan 2022 13:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34601
IP address blocks: 2001:678:b94::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113607518 (0x6c5835e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Validity
Not Before: Jan 1 13:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1148e219de16a8d31ff889d9c05d8fd9b749296d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:c5:c3:c2:5f:07:ca:61:ce:32:74:ef:a4:
7d:44:e2:98:b1:9b:01:a2:e2:41:e2:93:66:f4:89:
34:78:9d:77:15:58:4e:68:95:3d:0c:bf:5a:be:92:
68:2c:2e:aa:b2:06:70:9e:90:82:1d:7c:92:da:2f:
fd:7b:25:cb:e9:16:1b:98:1e:1d:bb:c0:2a:ce:0c:
75:63:22:be:e3:75:1e:5d:83:df:37:b3:22:41:73:
76:ac:18:2c:ac:b0:5d:b2:48:61:86:30:7b:3c:7b:
7a:e0:ec:31:60:f4:03:91:d2:d7:f1:81:8a:8f:2c:
a9:c2:5d:cd:60:0a:7b:52:4e:95:ed:5a:51:36:cb:
0c:70:2a:95:93:af:f9:60:95:47:03:01:14:5c:8c:
6c:73:7d:c6:35:ed:8d:e3:d9:ad:05:09:d4:4f:0b:
9d:5e:c2:35:34:50:f9:d9:0b:90:7a:04:2f:fd:27:
e0:90:0f:60:32:3f:3f:15:c2:cf:b9:77:a6:b9:23:
cf:36:44:76:8f:db:bd:b0:67:29:f0:a6:c6:57:37:
9f:dd:3a:cc:58:92:12:ef:b5:ff:42:2a:17:06:be:
26:84:8b:ae:13:ed:53:b0:4f:37:fe:40:21:4e:1b:
85:5e:1a:70:3e:81:6f:f3:08:96:6e:d8:7b:cc:14:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:48:E2:19:DE:16:A8:D3:1F:F8:89:D9:C0:5D:8F:D9:B7:49:29:6D
X509v3 Authority Key Identifier:
keyid:81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/EUjiGd4WqNMf-InZwF2P2bdJKW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b94::/48
Signature Algorithm: sha256WithRSAEncryption
85:ad:a2:fb:7f:78:ee:d6:40:91:10:59:1f:9a:73:ca:15:f1:
2b:17:f9:ad:ac:5a:5c:16:e3:86:8d:4b:1c:cb:18:fd:1a:27:
88:ac:e3:b5:fd:01:8e:09:b5:db:28:c0:d2:fe:b2:5e:d7:36:
68:7d:de:2a:20:43:d7:9f:f9:8c:88:4c:b0:ee:4c:13:da:f9:
d0:33:c4:1d:34:97:6e:16:6f:9b:0a:8a:3a:69:dc:83:a0:cd:
db:f5:53:2e:b6:9b:8f:c7:b2:89:79:eb:13:99:7c:6e:7e:fe:
76:a5:0b:30:d2:ba:f9:f9:ea:cf:b6:70:f7:29:90:b3:01:da:
bf:c0:c2:56:61:b6:e4:a1:c2:69:7b:60:34:c2:67:f8:36:00:
e3:3b:4e:cb:a4:a9:79:fc:98:f4:41:74:ff:8f:1b:c1:f9:23:
5e:e6:27:b9:e1:84:57:01:9a:18:6d:e7:df:78:5f:57:b1:76:
93:6c:53:3f:ad:fd:24:e0:5a:fd:02:21:e4:98:d3:c2:ec:a8:
c1:08:7f:01:96:87:3b:5e:b9:0b:2d:7b:7a:3a:35:82:60:66:
70:a8:6e:3a:d6:37:b8:68:3e:78:af:02:5d:e1:86:9d:84:f6:
1e:3e:6e:6a:ce:7a:1d:11:d1:34:89:b7:88:41:66:71:ef:d4:
6c:21:32:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:18:38 2025 by rpki-client