Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/Mr5IXLdcyKF4Lydx9qE8ljnmiDw.roa
File: Mr5IXLdcyKF4Lydx9qE8ljnmiDw.roa (raw, json)
Hash identifier: 3vZAac+kA0yn4T9T2B4RodSGqujKr0PFXvm+JDGKvGw=
Subject key identifier: 32:BE:48:5C:B7:5C:C8:A1:78:2F:27:71:F6:A1:3C:96:39:E6:88:3C
Certificate issuer: /CN=504073b8619efc07052b9edfb5ccb61b1f5ce781
Certificate serial: 0963396D
Authority key identifier: 50:40:73:B8:61:9E:FC:07:05:2B:9E:DF:B5:CC:B6:1B:1F:5C:E7:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/Mr5IXLdcyKF4Lydx9qE8ljnmiDw.roa
Signing time: Sat 01 Jan 2022 05:51:51 +0000
ROA not before: Sat 01 Jan 2022 05:51:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209395
IP address blocks: 2001:678:a08::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157497709 (0x963396d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504073b8619efc07052b9edfb5ccb61b1f5ce781
Validity
Not Before: Jan 1 05:51:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32be485cb75cc8a1782f2771f6a13c9639e6883c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:36:00:b9:b0:d7:6d:3b:95:10:31:28:cb:
af:17:0a:4f:a6:53:b9:12:5d:95:3d:b0:9d:cf:0c:
e7:84:ba:6b:b2:dd:9a:15:67:a8:cc:92:84:71:ed:
78:7e:5b:3c:14:60:52:c3:c2:6a:81:80:7a:46:51:
5d:8f:e1:ea:1d:44:ec:96:44:f6:9d:04:84:dd:20:
0d:7f:9b:1f:aa:26:b5:7c:86:e5:8b:66:81:42:c9:
1d:05:14:29:79:db:7e:6b:2a:a7:6c:3d:d4:4b:2d:
96:4c:c8:af:61:a9:c0:64:7a:e9:0f:a6:10:91:e0:
d3:79:17:d1:84:5d:ba:cd:bb:4c:f0:d3:f7:a3:8b:
f4:6c:4f:7b:86:01:e7:c0:91:9b:0f:8b:61:c6:f6:
50:bc:c9:c0:a7:d6:94:df:12:84:9f:fd:ef:7b:e3:
1d:82:a9:a9:35:28:23:7e:5c:24:08:88:d4:73:31:
e2:a2:20:d2:b0:5e:06:2f:97:56:9e:85:8d:51:04:
b6:0e:a5:01:99:ce:d6:5f:01:46:a6:c9:3f:45:9b:
95:58:9a:78:f4:1e:02:24:8d:30:b2:29:5b:0a:13:
e0:6f:84:54:92:16:6d:f3:d5:88:59:95:38:4c:27:
34:22:6e:1a:35:59:1d:b6:50:d6:5d:a4:b8:b1:bf:
27:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BE:48:5C:B7:5C:C8:A1:78:2F:27:71:F6:A1:3C:96:39:E6:88:3C
X509v3 Authority Key Identifier:
keyid:50:40:73:B8:61:9E:FC:07:05:2B:9E:DF:B5:CC:B6:1B:1F:5C:E7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/Mr5IXLdcyKF4Lydx9qE8ljnmiDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a08::/48
Signature Algorithm: sha256WithRSAEncryption
02:f4:82:0d:6b:4a:4c:41:84:4a:76:c6:1a:f7:b3:c5:68:1d:
00:62:e9:c6:4d:ed:c0:7e:a4:b8:c6:a4:83:64:09:09:88:7c:
43:8a:2f:b8:01:33:e1:2b:74:92:cb:e5:48:7c:4b:c5:35:2b:
e6:2b:a1:3e:53:50:e4:5f:b6:76:e0:88:af:a8:60:89:14:6b:
84:5d:6b:83:53:cf:45:f7:3f:0e:7e:4f:1f:1e:18:80:48:11:
ec:6c:70:08:a3:e9:ca:ca:99:ac:d1:9a:b6:8a:ab:07:e7:74:
68:24:eb:21:1d:70:29:fd:d0:7c:13:19:71:e0:0c:85:c1:2a:
a4:e8:51:fb:a6:47:b7:86:9d:0c:ae:11:09:bc:de:28:09:d2:
36:79:97:6e:23:b0:d4:8e:bf:20:34:18:5b:c9:53:be:7c:2f:
35:3a:55:2a:24:7b:32:01:b7:36:80:a3:d7:73:34:97:9a:6c:
a4:43:13:59:14:e7:c9:b7:70:fe:35:37:b8:2a:da:45:31:22:
e0:43:58:fc:1e:8d:b2:55:64:8a:bd:4c:3b:4c:0d:6f:2c:9f:
0c:a7:70:41:08:f5:75:79:7a:bb:25:af:8c:26:d9:7d:55:42:
5c:2c:91:61:b8:03:27:3d:5a:8b:3a:bf:c1:db:59:07:3e:ce:
18:64:33:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:24 2025 by rpki-client