Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/SPRGlBwchErPlFli2kIQjlI6aWE.roa
File: SPRGlBwchErPlFli2kIQjlI6aWE.roa (raw, json)
Hash identifier: ffgaFxmJ1PbcZidBkTS6YHZoPO23GvJpKaUMjyeA8pc=
Subject key identifier: 48:F4:46:94:1C:1C:84:4A:CF:94:59:62:DA:42:10:8E:52:3A:69:61
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 06F841C4
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/SPRGlBwchErPlFli2kIQjlI6aWE.roa
Signing time: Sat 01 Jan 2022 07:01:19 +0000
ROA not before: Sat 01 Jan 2022 07:01:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213073
IP address blocks: 2a03:5840:100::/48 maxlen: 48
2a03:5840:10a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116933060 (0x6f841c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 1 07:01:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48f446941c1c844acf945962da42108e523a6961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:53:18:57:40:b9:47:24:e2:f2:35:cb:43:
b6:32:45:a6:27:91:44:b6:1e:9c:81:09:12:aa:ec:
9b:3b:fe:d8:db:61:20:04:4b:2c:7e:68:f6:8b:d0:
10:3d:b3:79:17:2c:d0:90:bc:29:12:f3:f0:7a:1a:
b3:32:95:88:7e:ae:59:d4:9e:ba:21:02:5b:b1:96:
fd:89:0a:1d:4c:32:b7:d9:aa:3e:12:96:93:37:b6:
91:d6:f7:47:ab:af:40:9c:93:c7:26:06:1c:22:a7:
43:3e:5c:7c:47:6b:02:7a:ad:97:c2:2d:7a:9e:b0:
03:42:2c:b0:9e:85:eb:89:1b:3f:10:82:ed:a8:3d:
c8:51:f5:8f:be:a1:7c:06:56:ad:65:60:d2:45:cd:
32:49:29:a5:fd:6e:0c:8e:ca:42:36:f0:58:cf:ec:
01:90:d5:5f:e5:ae:69:f7:c3:81:d6:33:f9:5b:05:
9d:7c:ea:42:e9:01:f0:08:54:8d:a6:8c:65:6a:0b:
da:fb:ce:db:17:db:4e:c2:c4:04:f2:e0:18:75:39:
d1:37:61:e9:17:4f:c4:0a:e5:51:62:bd:76:f5:64:
99:2a:04:db:df:75:72:6b:43:3c:27:b9:24:b1:ea:
50:d8:e5:03:8c:36:66:b3:49:db:ab:41:32:6c:3c:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F4:46:94:1C:1C:84:4A:CF:94:59:62:DA:42:10:8E:52:3A:69:61
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/SPRGlBwchErPlFli2kIQjlI6aWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:100::/48
2a03:5840:10a::/48
Signature Algorithm: sha256WithRSAEncryption
50:3f:ad:a8:4e:f4:10:18:fc:de:9a:97:99:1c:d3:b5:7c:57:
11:85:7c:e4:a0:4e:71:21:cb:b8:c3:8f:47:89:ac:20:1d:60:
3b:69:2d:5e:60:f8:23:2c:8e:35:ee:92:99:90:e9:a4:35:28:
c0:a8:74:28:54:89:59:18:cb:31:29:5e:eb:7b:11:c0:88:9b:
aa:d3:7c:02:ac:f7:3c:fb:e6:be:81:76:51:a2:6a:12:ec:18:
3c:1a:8b:18:93:f7:71:05:3e:df:dc:e9:b9:c0:5c:5c:78:ea:
2e:25:a1:d8:8d:05:04:ab:af:3f:37:f3:60:47:e1:40:d1:9a:
67:2d:40:88:f5:2c:eb:cd:76:dc:a7:28:6a:50:79:98:cf:65:
1d:bc:9b:d4:65:43:8e:53:ac:d2:d5:40:18:01:b8:4f:54:54:
31:40:3c:29:69:9a:d7:d6:19:ef:f9:60:09:a1:51:c7:22:4b:
3a:d6:14:af:8a:c8:d5:99:ea:cc:0e:d8:17:73:95:d3:e4:98:
39:5f:f2:44:a5:52:43:03:dc:39:3c:21:14:92:d0:74:f2:f6:
2e:21:d7:96:02:35:4a:94:b5:80:d6:da:75:8d:08:76:bb:2d:
0c:07:cc:0e:e3:ce:7e:06:38:1c:5a:1f:ad:d4:39:59:d1:32:
44:07:10:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:27 2025 by rpki-client