Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/1YL3_3MLFRyzD0764w86oc560BE.roa
File: 1YL3_3MLFRyzD0764w86oc560BE.roa (raw, json)
Hash identifier: lV+O01yj1C2VKOM6nDuAOuOqzD4Dqfma2nB0z+KdEB8=
Subject key identifier: D5:82:F7:FF:73:0B:15:1C:B3:0F:4E:FA:E3:0F:3A:A1:CE:7A:D0:11
Certificate issuer: /CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Certificate serial: 01884293D63CE9EE17695BD9633A266BF096
Authority key identifier: BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/1YL3_3MLFRyzD0764w86oc560BE.roa
Signing time: Mon 22 May 2023 08:29:24 +0000
ROA not before: Mon 22 May 2023 08:29:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21013
IP address blocks: 2001:67c:c98::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:93:d6:3c:e9:ee:17:69:5b:d9:63:3a:26:6b:f0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Validity
Not Before: May 22 08:29:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d582f7ff730b151cb30f4efae30f3aa1ce7ad011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:72:62:19:2b:cd:7e:70:b5:65:06:b1:f5:a4:
5e:a1:d3:6f:26:a2:c9:7c:a0:37:7b:49:1d:07:4b:
de:16:0f:45:d8:81:63:2a:bb:21:3d:04:60:aa:3d:
6c:28:ef:88:40:71:50:e4:d6:4a:9d:02:37:91:25:
73:a8:25:0c:2e:5d:96:74:cb:2b:d6:76:eb:d2:0a:
66:52:77:da:fe:30:1a:4b:43:0b:c8:ab:da:0d:eb:
16:1b:ad:2a:44:58:50:56:de:40:c3:4b:e3:7c:38:
7b:fe:bc:56:70:15:2d:46:f4:42:30:4a:47:ab:6e:
c1:4d:21:21:2b:31:6c:92:9e:72:f6:15:90:c9:e9:
98:0d:ce:4a:7c:84:09:3d:79:ab:f7:b7:bf:91:61:
b1:c0:c6:3b:a5:94:19:b6:1e:8e:2c:a4:4a:22:11:
14:c4:91:42:1c:35:f3:79:6a:f6:0c:bf:43:29:bb:
e7:bc:21:90:9d:9d:fb:94:77:00:0d:5b:37:a6:cb:
73:00:3e:76:5f:67:6b:b5:57:7c:77:4b:c8:e7:d4:
c4:e9:77:ad:aa:62:cb:37:67:92:16:28:25:84:24:
3d:30:ce:4a:49:ff:59:99:9c:2f:2f:2d:cd:22:7f:
8a:32:d8:a5:8f:25:8b:c0:c9:7a:43:28:44:00:d0:
89:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:82:F7:FF:73:0B:15:1C:B3:0F:4E:FA:E3:0F:3A:A1:CE:7A:D0:11
X509v3 Authority Key Identifier:
keyid:BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/1YL3_3MLFRyzD0764w86oc560BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c98::/48
Signature Algorithm: sha256WithRSAEncryption
81:0d:37:25:33:56:6f:bd:ff:37:8b:dc:b8:73:c2:16:f9:e6:
35:8b:9f:83:d1:a3:2a:d8:f5:04:a3:4b:9d:0d:23:3c:47:59:
2a:d4:17:62:3f:11:01:60:cf:22:12:be:72:fb:1a:00:1e:42:
c8:7c:99:59:9a:50:ff:03:f4:56:d9:f8:61:60:7a:90:92:69:
bc:fb:5d:5f:d1:75:d5:2f:3e:07:2f:9c:58:7a:22:e0:6f:57:
4c:5d:22:f5:9f:84:68:b3:31:15:6f:ed:08:06:f4:bd:7c:a0:
0b:f8:02:27:62:a9:67:dc:54:91:ce:50:3c:2e:40:3c:6b:6c:
ea:6b:30:5f:f2:04:32:ae:b4:80:de:92:be:f4:18:72:ab:e3:
41:33:26:68:53:a7:99:85:16:91:42:4e:52:84:f0:23:a7:77:
db:4c:33:f6:9e:98:6b:85:19:a4:fa:17:10:eb:bf:0a:d6:c6:
34:a6:5f:5b:d9:03:f0:bc:8b:fb:f2:83:50:1e:71:c6:da:27:
1e:47:49:b3:12:31:fd:44:02:10:4b:99:53:71:8c:15:6b:19:
75:39:ef:89:99:df:cb:db:b5:c4:2d:31:8c:ce:07:f5:b3:63:
e4:1f:b6:95:c1:87:7b:ce:76:fd:b5:f6:0e:d2:2a:7b:70:71:
fe:6c:4e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:58 2025 by rpki-client