Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/ffQfMw_zZ1JX_hMvpflxZHvfktQ.roa
File: ffQfMw_zZ1JX_hMvpflxZHvfktQ.roa (raw, json)
Hash identifier: md1cowqidy8bvTK6NlQkQZRxAlf8lhRbApau+XWQgRc=
Subject key identifier: 7D:F4:1F:33:0F:F3:67:52:57:FE:13:2F:A5:F9:71:64:7B:DF:92:D4
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 01856FD506554E4E741169E7F64E667C14CA
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/ffQfMw_zZ1JX_hMvpflxZHvfktQ.roa
Signing time: Mon 02 Jan 2023 00:15:09 +0000
ROA not before: Mon 02 Jan 2023 00:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206884
IP address blocks: 2001:678:8f8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:06:55:4e:4e:74:11:69:e7:f6:4e:66:7c:14:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: Jan 2 00:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7df41f330ff3675257fe132fa5f971647bdf92d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f6:0d:4d:cd:5e:d8:dc:77:f2:2e:61:fb:06:
20:0d:31:64:71:15:99:eb:11:56:1d:d8:40:ec:8a:
35:3c:15:0a:b1:bc:90:b4:73:a1:91:ad:26:9c:47:
fd:60:31:9f:a2:b1:92:d3:1e:20:db:cb:24:fa:fc:
53:0a:9f:eb:66:fa:5d:aa:58:03:03:e2:f2:73:24:
47:99:21:3a:b4:e2:f6:fd:50:c5:de:af:88:97:3f:
7d:ee:ab:0e:a0:15:e1:b3:2b:59:e6:a1:2d:8e:18:
16:9a:d7:1f:ee:dd:31:3c:45:c1:39:fd:6b:c4:fd:
d6:d9:f4:48:f0:97:ac:c1:a8:58:85:40:14:92:f0:
f4:c5:40:14:0b:c3:44:34:af:9e:d6:a2:cc:34:e0:
ad:78:6d:72:6a:bb:7f:56:b2:e5:c1:d7:f2:55:c5:
7e:0d:30:ed:91:1d:e3:0d:88:33:4e:3f:cb:52:cd:
67:f9:f3:8e:bc:b6:0a:9c:94:7e:26:9d:c0:81:f8:
58:44:d9:ce:ac:f5:3e:71:c2:95:fa:6e:b1:f6:24:
0d:a4:bb:b6:8e:25:7c:b7:da:86:db:26:ce:f8:fb:
9e:06:b6:1c:f0:f7:5b:b1:24:35:64:3b:99:7b:16:
f5:17:2e:70:ae:15:cd:a9:97:c4:bd:62:2a:f3:53:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F4:1F:33:0F:F3:67:52:57:FE:13:2F:A5:F9:71:64:7B:DF:92:D4
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/ffQfMw_zZ1JX_hMvpflxZHvfktQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:8f8::/48
Signature Algorithm: sha256WithRSAEncryption
1d:5d:c5:56:91:b5:33:3b:f0:63:80:69:15:ec:ed:ba:cb:72:
63:8f:40:38:96:01:c3:47:bf:47:7a:de:56:56:1b:e3:4e:28:
4e:90:92:22:c9:1b:f9:e0:6e:ec:4c:ee:f6:55:11:a1:94:12:
0c:da:eb:44:6a:dd:5c:f5:e7:2e:c6:bf:83:6a:58:fd:41:03:
45:7d:6e:74:e7:3e:89:8b:29:56:2c:85:8d:ad:0b:eb:2e:69:
c9:2f:c5:54:32:20:7f:22:21:f2:3f:7a:0c:a0:00:12:65:3f:
1a:c2:08:93:09:58:2c:69:c0:83:7d:9f:df:eb:c8:02:61:b7:
db:db:96:e1:fc:ca:ac:7f:46:de:2f:6d:29:f8:46:b4:1d:c8:
db:a0:0c:b1:f2:fa:14:7b:dd:25:d8:50:d0:cd:1c:39:46:74:
90:6f:86:84:c3:65:75:8b:a7:04:fb:7a:75:b8:aa:e5:a4:b4:
99:bb:d4:33:fc:26:10:f6:cc:23:51:16:dd:5f:d8:08:38:94:
43:ff:4b:cf:b8:43:9b:22:56:82:b3:a5:30:b7:df:67:b1:14:
5c:fc:f6:b2:d8:49:2e:0c:94:1d:01:19:cf:9a:28:08:f5:8a:
85:eb:78:3c:0b:ec:43:79:34:a7:87:fd:08:fa:af:1f:92:80:
bd:b9:02:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:09:04 2025 by rpki-client