Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/IQWde2oUyTer6CQtVHy_Q4a2x3Y.roa
File: IQWde2oUyTer6CQtVHy_Q4a2x3Y.roa (raw, json)
Hash identifier: jv0mA8hW+tenPQ12hvUxmEgeKxX5V/5cbz5NzYxMzd8=
Subject key identifier: 21:05:9D:7B:6A:14:C9:37:AB:E8:24:2D:54:7C:BF:43:86:B6:C7:76
Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial: 01856F1DB0B1C52ED3DD2EDBE98D9D37B857
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/IQWde2oUyTer6CQtVHy_Q4a2x3Y.roa
Signing time: Sun 01 Jan 2023 20:54:54 +0000
ROA not before: Sun 01 Jan 2023 20:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21150
IP address blocks: 2a01:8180:1000::/36 maxlen: 42
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:b0:b1:c5:2e:d3:dd:2e:db:e9:8d:9d:37:b8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Validity
Not Before: Jan 1 20:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21059d7b6a14c937abe8242d547cbf4386b6c776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:72:7a:c2:60:dd:b0:21:80:57:30:a7:7a:ed:
90:36:d7:f2:32:04:7f:d3:05:88:98:99:00:d7:bb:
86:37:76:72:78:66:53:1f:66:95:91:98:30:11:35:
99:0b:e0:63:53:13:3d:3a:1e:df:c8:92:b1:e2:6b:
c8:2e:35:38:41:2e:32:18:10:d9:33:04:f4:a5:b6:
58:f4:88:7c:6c:6f:50:d5:73:c4:03:41:f8:75:87:
e6:07:02:c3:72:81:3c:93:d8:d0:af:73:68:1a:c9:
b0:0f:52:dc:38:a7:27:73:f5:09:53:7f:75:d5:ab:
80:c8:6e:f8:e8:78:51:e7:df:36:fb:b9:cb:84:a5:
3f:1f:60:d5:4d:5c:26:c1:ee:08:9c:d5:1f:83:b5:
89:7d:5f:dd:44:1e:19:28:0a:22:4b:02:4a:a5:8b:
f6:7c:b7:ff:b9:65:e1:93:b4:d9:02:08:ba:96:96:
63:f1:28:bd:e5:06:d7:17:1d:ed:4b:8f:56:b4:8f:
70:c9:21:5a:67:b2:9c:12:2d:23:08:e5:5e:72:1e:
b4:59:c2:f8:f0:ea:ac:ba:de:34:52:c2:5d:93:39:
a4:a5:56:4c:db:b5:f4:ec:24:6e:40:4d:47:42:64:
7a:68:d9:2c:d4:ba:5a:c5:7c:94:f9:74:27:54:da:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:05:9D:7B:6A:14:C9:37:AB:E8:24:2D:54:7C:BF:43:86:B6:C7:76
X509v3 Authority Key Identifier:
keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/IQWde2oUyTer6CQtVHy_Q4a2x3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:8180:1000::/36
Signature Algorithm: sha256WithRSAEncryption
43:08:a0:06:ed:6b:12:45:1a:d2:ef:2a:dc:3b:8f:8c:2a:22:
39:f2:9f:4a:9c:78:51:90:3f:15:0f:41:0f:04:e3:60:45:1a:
29:f3:f7:12:df:79:2e:0d:8a:c6:ca:37:c8:3d:31:3d:2b:c0:
57:3f:bf:31:52:73:84:fd:c7:a1:da:49:ff:9a:6e:e8:64:ca:
19:a7:9e:c3:07:ad:d7:94:98:ed:ae:1c:25:de:15:94:b4:d2:
75:e8:04:ce:c7:9b:07:9a:cc:d7:55:b2:bc:d6:ed:d7:92:e3:
5c:1d:b0:4e:85:cc:ab:2c:c2:da:b4:a2:54:95:3b:ef:0f:17:
51:42:12:7d:2c:54:10:2c:b3:17:43:83:1d:be:ce:16:00:88:
13:ee:5f:4a:81:4e:6b:68:4e:f5:bd:b1:ad:08:86:5f:4c:b1:
da:4e:fb:b1:0d:18:ed:4c:2d:9f:97:0f:63:00:32:6e:bd:1c:
40:c7:3b:28:96:10:fa:67:bf:16:71:a4:1a:03:75:55:de:7d:
61:63:a3:b6:e3:62:04:8e:08:1d:ab:b0:70:20:2d:ad:0d:cf:
ef:1e:b7:a5:a8:3f:2b:0b:10:88:7d:c1:15:1d:2c:fd:23:ee:
f2:6b:24:0e:46:88:45:5a:7d:9c:ee:37:31:77:a6:30:b2:c4:
fc:14:67:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:08:45 2025 by rpki-client