Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/U55A-y_IgkOIKoTOUPjrVjTdupM.roa
File: U55A-y_IgkOIKoTOUPjrVjTdupM.roa (raw, json)
Hash identifier: Pru/to/iN5V9CwAp2UqEMEK+DixFywcNEk4yos6oMmQ=
Subject key identifier: 53:9E:40:FB:2F:C8:82:43:88:2A:84:CE:50:F8:EB:56:34:DD:BA:93
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 0186FF0ADDFB93F64DA91726B21BC5E7E55A
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/U55A-y_IgkOIKoTOUPjrVjTdupM.roa
Signing time: Mon 20 Mar 2023 12:42:27 +0000
ROA not before: Mon 20 Mar 2023 12:42:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199326
IP address blocks: 2a03:5840:f5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:0a:dd:fb:93:f6:4d:a9:17:26:b2:1b:c5:e7:e5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Mar 20 12:42:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=539e40fb2fc88243882a84ce50f8eb5634ddba93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:04:51:0a:3f:a7:02:5a:99:e2:cb:b9:69:
51:88:2a:2d:33:aa:7d:14:77:1d:c5:64:23:51:c4:
34:51:6d:73:07:44:06:98:6e:1e:e7:db:76:20:d9:
bf:34:b8:9e:af:85:34:ad:2f:dd:bb:25:66:76:40:
0d:53:96:cd:2d:97:70:0c:ad:68:1c:35:0a:b7:78:
7f:2b:27:8f:fc:59:27:3a:f0:ca:21:4e:3e:32:72:
1a:60:a6:ba:d4:c9:74:89:cc:dc:f3:49:63:5b:7b:
01:1b:8c:66:16:84:06:7c:5c:62:f8:d6:91:dc:57:
c8:7e:04:39:f7:27:37:8c:a6:47:89:a6:7f:e2:1d:
a7:44:d9:fb:2d:96:0f:01:4d:da:57:80:cf:51:91:
4f:f3:6f:7c:db:16:2e:80:db:d9:73:d1:08:52:f1:
3a:ec:eb:02:88:cb:20:63:7b:94:d2:b9:ae:3b:11:
ac:b9:73:06:ff:a1:df:f1:08:68:6e:f3:02:5b:55:
87:d5:ea:a7:b7:be:a4:d0:0f:2c:f3:df:d1:6e:0f:
f8:65:51:86:db:45:c6:95:43:d0:41:89:75:98:7d:
15:4a:18:56:a2:dc:4f:3f:56:6f:60:40:e4:50:7d:
61:8c:e5:80:f3:76:64:c3:87:af:83:4e:98:b0:ca:
b3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9E:40:FB:2F:C8:82:43:88:2A:84:CE:50:F8:EB:56:34:DD:BA:93
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/U55A-y_IgkOIKoTOUPjrVjTdupM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:f5::/48
Signature Algorithm: sha256WithRSAEncryption
4f:70:0d:b8:f8:a1:b1:00:66:91:f2:13:cb:8c:90:43:b9:a3:
9e:0f:30:d4:a5:3d:90:3f:b6:99:62:7b:0b:21:94:04:60:38:
85:fb:1a:41:6d:7f:a9:4f:e6:c5:b4:27:50:7e:be:3c:2b:ed:
4c:9a:6c:dc:43:2b:7b:df:cb:40:de:5e:ec:c8:70:d8:97:92:
ca:d5:54:d4:04:68:92:84:0f:2e:78:56:39:98:c6:47:b3:ab:
db:62:14:8e:2d:66:dc:14:36:b7:5c:12:8c:36:62:4f:2c:3e:
47:c1:e2:16:f1:eb:9e:19:54:c0:02:a2:fa:4d:1f:91:b5:61:
8d:17:53:7d:3d:7f:29:84:35:22:2a:c2:81:53:26:21:ee:dd:
8e:a4:71:66:27:70:fc:91:1f:1f:17:20:e4:47:bb:23:0b:60:
2e:69:d4:28:cf:73:cf:b9:d5:ec:90:86:4d:c0:fb:7f:f9:2d:
40:1f:12:26:6d:12:9a:e5:46:33:68:1e:07:dd:e2:19:44:58:
81:a4:a0:d6:15:49:b1:bb:36:e1:db:ac:c5:94:1e:ba:d8:5f:
c8:eb:fc:fd:9a:bc:82:0f:dd:8b:8f:cd:4c:38:8e:5a:91:44:
3b:cf:dc:ae:89:3c:ca:6c:77:a4:4c:a2:88:10:15:e6:4d:4c:
b4:03:d2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:21 2025 by rpki-client