Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/CjfjEeQW3uqHS0AfAe_Ybk5Q6O4.roa
File: CjfjEeQW3uqHS0AfAe_Ybk5Q6O4.roa (raw, json)
Hash identifier: VfOhLTNSdkrZ/ylo3pdg24fh/LmGXuommPrDnoLfxXY=
Subject key identifier: 0A:37:E3:11:E4:16:DE:EA:87:4B:40:1F:01:EF:D8:6E:4E:50:E8:EE
Certificate issuer: /CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Certificate serial: 01856B80F80F6EF01244F900B8825271A80D
Authority key identifier: 6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/CjfjEeQW3uqHS0AfAe_Ybk5Q6O4.roa
Signing time: Sun 01 Jan 2023 04:04:52 +0000
ROA not before: Sun 01 Jan 2023 04:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205956
IP address blocks: 2001:678:430::/46 maxlen: 47
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:80:f8:0f:6e:f0:12:44:f9:00:b8:82:52:71:a8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Validity
Not Before: Jan 1 04:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a37e311e416deea874b401f01efd86e4e50e8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:6c:4f:48:4e:77:1c:a5:e2:a8:d0:c7:66:
99:5e:c3:f8:8a:29:bf:a4:67:93:0d:87:e4:d1:70:
05:3c:9e:d8:7e:76:56:8e:ca:17:ae:c5:38:1b:1d:
7f:eb:88:c1:57:26:da:77:30:fe:8f:8c:06:fc:d8:
9e:5c:4b:6a:3b:11:ea:17:53:b3:80:d7:b8:09:82:
66:4f:51:93:65:8b:1b:40:88:1f:64:57:5c:99:8b:
f3:0f:5b:0b:84:d9:90:8b:2f:c6:65:c5:38:ea:3d:
b7:fe:5f:be:79:67:d9:b8:f6:a2:b0:63:52:48:64:
b0:c7:30:5d:54:f3:1e:7b:21:54:86:c4:cd:a3:b4:
fc:de:8a:02:3c:ce:60:0a:e6:d9:3d:5e:70:0b:8a:
29:b8:9c:f4:c3:0e:8b:72:f6:e7:c4:f1:97:ae:36:
0c:f8:db:8d:7d:b0:1e:5e:15:94:92:eb:c5:5a:35:
64:a6:d6:ec:96:18:8c:bf:99:80:8e:72:f1:cb:6e:
91:97:ad:0d:0a:bb:1e:37:e8:df:13:73:da:46:b2:
62:83:24:69:1e:47:fc:7e:9b:c2:7d:40:fe:59:b0:
92:1a:be:ed:08:18:e9:ad:42:4b:d5:9e:92:17:4c:
0c:2c:f1:7b:58:e1:83:00:f5:a5:0f:2d:8b:f8:b1:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:37:E3:11:E4:16:DE:EA:87:4B:40:1F:01:EF:D8:6E:4E:50:E8:EE
X509v3 Authority Key Identifier:
keyid:6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/CjfjEeQW3uqHS0AfAe_Ybk5Q6O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:430::/46
Signature Algorithm: sha256WithRSAEncryption
08:7a:35:d3:aa:f2:29:58:66:55:68:0f:17:30:58:c7:93:01:
63:f7:a5:06:c2:90:8e:59:d0:63:5a:39:d8:5f:c5:4c:ee:3d:
89:83:67:45:c2:b6:b5:c4:4c:2c:c8:c4:e1:9c:e3:4c:68:3d:
a1:ed:f5:9b:38:68:be:94:8c:87:c9:f6:5c:2f:84:d0:f7:a3:
bf:f3:76:18:82:e6:ab:6b:ba:bb:fd:84:c9:dd:5f:f1:51:9d:
50:25:b4:07:50:c8:43:de:56:22:33:b4:5f:4e:7e:83:b1:42:
76:af:c2:f8:cf:d8:5f:c6:d3:19:36:e1:64:f9:df:50:ed:89:
a6:12:bc:c2:be:6c:22:da:c4:0a:fe:f3:04:b9:f5:75:70:b1:
3d:94:8b:ec:4a:81:9f:8f:2b:63:de:86:61:db:96:9b:34:82:
98:a7:de:b6:71:24:d0:29:df:af:2f:77:d5:82:41:8e:55:30:
aa:ab:61:fe:81:4d:16:68:10:4f:7d:16:61:a2:8a:59:a3:df:
14:5b:7c:df:49:4f:36:12:33:b7:9f:dc:e5:76:69:c2:cb:c2:
66:79:2c:2c:1d:e0:f9:2a:b1:c9:5e:d4:f1:76:de:cc:f0:b0:
9f:46:8e:28:65:d9:b0:ed:60:91:a4:b1:d6:a4:38:b1:ce:ce:
12:c0:da:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:05 2025 by rpki-client