Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/C0_dlfrwWYRfmqQJRGbMgMT03Dk.roa
File: C0_dlfrwWYRfmqQJRGbMgMT03Dk.roa (raw, json)
Hash identifier: L+xup1OJyoK32bXBUdjWFDGz6uhVZMyOq+ILjS+fwv8=
Subject key identifier: 0B:4F:DD:95:FA:F0:59:84:5F:9A:A4:09:44:66:CC:80:C4:F4:DC:39
Certificate issuer: /CN=e89795201c7d3d93cd2a085de3692edd71b7726d
Certificate serial: 01865E10FDCD4189BA3A7DEF182EE653D4A1
Authority key identifier: E8:97:95:20:1C:7D:3D:93:CD:2A:08:5D:E3:69:2E:DD:71:B7:72:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/C0_dlfrwWYRfmqQJRGbMgMT03Dk.roa
Signing time: Fri 17 Feb 2023 06:30:17 +0000
ROA not before: Fri 17 Feb 2023 06:30:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206493
IP address blocks: 2001:67c:272c::/48 maxlen: 48
2001:67c:114c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:10:fd:cd:41:89:ba:3a:7d:ef:18:2e:e6:53:d4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e89795201c7d3d93cd2a085de3692edd71b7726d
Validity
Not Before: Feb 17 06:30:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b4fdd95faf059845f9aa4094466cc80c4f4dc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:9b:8e:c8:57:7b:5a:1a:62:9f:38:80:26:
67:a0:eb:56:f1:08:4e:4e:75:b5:fe:86:95:41:5e:
9e:b7:40:5e:15:01:fa:14:52:78:4d:e8:5c:a4:80:
ca:70:bd:91:b5:62:13:12:9a:9c:3f:4d:74:8c:39:
cc:8c:c3:4a:13:dd:47:e9:69:90:4b:3f:31:f9:b0:
87:4e:5a:6b:3f:cf:94:02:f2:66:97:6a:66:24:02:
16:8d:f8:83:78:6b:c4:6e:74:94:87:5c:d6:0f:d9:
d4:d0:34:7c:b5:ac:60:6d:1f:ac:f1:47:ae:3f:19:
2b:00:fa:78:9d:ae:3e:4a:6f:d1:e2:95:65:6a:17:
ef:97:46:cd:05:75:f9:7a:a7:70:1a:39:b4:6b:df:
89:f9:fb:9d:1d:17:10:41:0f:9b:eb:0a:5d:2c:65:
32:7b:e0:1a:d4:8b:19:64:25:1e:3a:6d:73:97:3c:
6f:8b:53:02:ec:7b:05:b8:e4:6c:be:97:96:3a:d8:
b5:14:9d:15:99:05:34:1a:22:91:08:53:33:1a:3c:
4a:65:18:61:5c:7c:7b:b4:8a:bd:0b:f3:24:70:15:
b9:ce:ed:7c:e8:90:7b:cd:61:a1:30:08:1f:79:a5:
d1:3c:49:7b:43:30:0a:bf:8b:ca:9a:f7:33:18:5e:
85:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4F:DD:95:FA:F0:59:84:5F:9A:A4:09:44:66:CC:80:C4:F4:DC:39
X509v3 Authority Key Identifier:
keyid:E8:97:95:20:1C:7D:3D:93:CD:2A:08:5D:E3:69:2E:DD:71:B7:72:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/C0_dlfrwWYRfmqQJRGbMgMT03Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:114c::/48
2001:67c:272c::/48
Signature Algorithm: sha256WithRSAEncryption
02:ee:bd:1f:e4:92:66:c3:d1:83:12:c9:e1:92:c7:6e:1f:c6:
8c:88:bd:d5:e0:8b:35:de:f3:7c:e0:67:75:4b:b5:58:f3:f8:
be:c1:ee:35:f3:0a:99:ee:9d:3a:11:3d:fe:7a:db:f7:74:48:
9c:7b:e6:89:fa:0a:4b:86:bb:a6:0e:8a:d4:67:32:02:60:9d:
99:11:6a:42:86:2f:3e:c7:5b:b0:2e:69:ef:92:e4:03:76:8e:
fa:1b:e6:13:e0:ae:b9:6c:6f:70:ea:04:7b:65:17:8f:74:94:
26:c1:54:f9:e4:86:68:ba:35:0f:5b:a0:14:2f:07:22:16:5b:
4b:56:90:d3:f2:d5:07:86:cd:fd:83:e1:9f:b0:2f:5a:8b:e5:
39:91:65:04:6f:e2:53:16:74:78:16:31:60:db:13:d5:b8:10:
1c:5a:b6:18:d8:e6:e6:17:47:7e:e3:51:c5:02:e0:00:df:22:
75:dc:18:f2:c7:03:d1:b9:4b:c8:43:12:be:87:20:fd:da:85:
e3:60:4a:f7:5a:a0:76:5e:c5:a4:62:b8:c4:de:de:67:e7:83:
f2:a6:91:b5:1c:58:c3:2c:45:81:b2:fd:3c:9c:e8:46:f2:36:
86:90:7f:d4:c4:cc:93:21:9a:37:fe:4b:86:5e:ff:39:f2:3f:
ed:dc:e3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:07:02 2025 by rpki-client