Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/mOKIno5Xo0Z7xoYkf9SX0l_7WoM.roa
File: mOKIno5Xo0Z7xoYkf9SX0l_7WoM.roa (raw, json)
Hash identifier: K9jjb7p1gfUWicBxwQ/GqssR7YDh/SF9KdIjAped8DM=
Subject key identifier: 98:E2:88:9E:8E:57:A3:46:7B:C6:86:24:7F:D4:97:D2:5F:FB:5A:83
Certificate issuer: /CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Certificate serial: 02F43DFD
Authority key identifier: 5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/mOKIno5Xo0Z7xoYkf9SX0l_7WoM.roa
Signing time: Sat 01 Jan 2022 10:55:33 +0000
ROA not before: Sat 01 Jan 2022 10:55:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 2001:67c:273c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49561085 (0x2f43dfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Validity
Not Before: Jan 1 10:55:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98e2889e8e57a3467bc686247fd497d25ffb5a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:38:18:9b:b9:9c:6f:8a:9b:ae:76:1a:e6:
7a:94:57:56:25:01:d4:ea:88:98:3b:a1:12:be:eb:
94:15:66:1e:e5:93:46:4a:14:01:ce:fb:9e:ef:d5:
e4:e6:b9:78:20:ab:c6:2b:90:41:b7:04:8f:1f:25:
8d:d9:60:a7:df:59:76:dd:4b:fc:5a:b9:eb:d5:ee:
f3:43:c4:4a:f4:1a:88:ac:bd:d1:ae:d8:e5:81:dd:
fa:cf:56:ad:20:cc:b9:25:52:de:b2:46:cc:7c:23:
87:f0:14:80:05:84:56:8f:eb:50:dd:70:d7:fc:62:
75:69:b5:05:e1:4c:a5:16:f0:6c:35:ff:a4:4d:98:
d1:18:0f:64:18:18:19:09:7e:a2:74:68:e7:24:63:
a6:08:ad:fa:4b:21:40:54:18:30:d4:5f:b3:9d:8e:
df:95:55:a7:95:eb:bb:e0:c2:be:a0:22:f6:c9:a4:
50:67:ca:c9:01:ee:54:6f:3e:d0:f6:af:b0:5b:85:
56:2a:9c:3a:68:13:3b:e9:a5:ba:f8:8e:c6:31:74:
8b:a8:f6:68:99:e2:c4:90:3d:0a:fe:53:90:55:11:
e0:2c:8b:4c:a5:b9:36:e2:32:03:ba:63:bf:6b:a5:
cf:2d:8a:33:d5:01:61:e6:25:4c:ca:61:10:92:37:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E2:88:9E:8E:57:A3:46:7B:C6:86:24:7F:D4:97:D2:5F:FB:5A:83
X509v3 Authority Key Identifier:
keyid:5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/mOKIno5Xo0Z7xoYkf9SX0l_7WoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:273c::/48
Signature Algorithm: sha256WithRSAEncryption
a8:cf:11:cd:e0:1d:7f:ba:1b:ba:1b:64:75:30:d0:65:7d:14:
ec:7c:93:e3:97:24:d6:bc:c2:a9:b6:de:99:d8:35:6b:bc:a6:
97:c1:a9:2a:45:ff:57:0b:e7:7f:ce:73:c0:4a:af:6c:0c:94:
fc:55:c4:ca:b9:30:2b:0d:40:96:1e:02:39:6b:22:c5:17:7d:
c1:61:dc:b3:59:7a:45:7b:5e:a2:9c:24:70:78:4a:ab:ba:7d:
8a:13:34:eb:fb:e0:af:f2:ba:42:00:c3:f5:17:e9:8c:25:3e:
c2:c7:40:49:5a:a2:df:26:9d:1a:bb:82:75:21:fa:a1:a8:23:
04:eb:9c:cc:2b:b3:c3:ef:a4:10:5f:a0:2b:b8:23:07:ab:6d:
53:33:53:3b:38:07:50:95:c9:93:c3:24:24:6a:bd:c3:22:db:
52:cb:e9:c1:51:38:1c:63:0d:0d:71:d8:72:da:62:c0:85:f9:
05:c4:b4:1c:41:f1:61:c9:3e:04:46:d1:4c:2d:5a:d7:6d:26:
42:9c:fe:04:41:21:bd:a4:ea:0f:26:b3:3b:ac:4a:e6:ea:3d:
71:27:9c:be:b9:71:a2:80:c6:fb:c9:ec:fd:fd:83:41:bd:96:
e6:03:b3:cd:aa:65:f6:d0:21:cf:03:13:12:10:cb:53:3a:be:
26:38:cf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:51:19 2025 by rpki-client