Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/AWbWgfH2HynhRAqLw88F9bJLKls.roa
File: AWbWgfH2HynhRAqLw88F9bJLKls.roa (raw, json)
Hash identifier: e0fuXb3yZoHHwmi2hID+6inECazc1VoTTJP2XjEjBcc=
Subject key identifier: 01:66:D6:81:F1:F6:1F:29:E1:44:0A:8B:C3:CF:05:F5:B2:4B:2A:5B
Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial: 01838E2D79D1AE53C5CC484420FA9CD56A2B
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/AWbWgfH2HynhRAqLw88F9bJLKls.roa
Signing time: Fri 30 Sep 2022 11:34:48 +0000
ROA not before: Fri 30 Sep 2022 11:34:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21430
IP address blocks: 2001:67c:15a1::/48 maxlen: 48
2001:67c:1590::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8e:2d:79:d1:ae:53:c5:cc:48:44:20:fa:9c:d5:6a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Validity
Not Before: Sep 30 11:34:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0166d681f1f61f29e1440a8bc3cf05f5b24b2a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:29:25:b3:48:5b:0c:81:8f:05:0e:49:7c:
61:e2:cc:8b:19:a7:dd:ef:c6:00:3d:4b:bf:a4:73:
f2:f6:6b:12:25:d2:77:10:ba:f1:80:d4:07:91:c4:
9a:42:03:e0:b3:bc:94:77:03:98:d4:3c:d2:33:d8:
86:47:ff:cd:fb:5b:da:4b:cc:99:e1:51:af:c5:9a:
79:08:a9:c9:32:f6:35:86:03:67:78:eb:7d:cd:05:
9a:85:e8:b0:28:b6:b1:7b:7b:d7:f5:11:1a:0c:3c:
14:e7:c6:94:60:27:2a:d6:31:34:53:bf:72:bb:ef:
96:8b:25:f5:ba:3b:ed:34:aa:e2:9b:25:47:26:6f:
9b:fa:0e:10:18:f6:73:b5:62:6d:88:4e:f5:62:54:
5b:e8:06:0a:ed:59:40:a9:1f:93:17:4e:c7:59:cf:
74:6d:95:d8:bf:6e:e1:ff:e2:6c:81:a8:c7:07:1d:
23:65:e5:1a:5f:9b:25:2d:9e:fd:13:9a:17:3e:be:
f9:1a:92:59:9f:d1:91:56:67:c6:15:5e:b3:91:3e:
e5:fe:7c:88:a1:72:bd:d2:b4:f2:43:c0:6e:89:d2:
12:76:a9:af:c6:12:45:fc:0c:1e:98:70:1b:c0:6d:
3b:7b:98:2a:d2:1e:4d:54:4e:a5:05:0b:a4:7c:7d:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:66:D6:81:F1:F6:1F:29:E1:44:0A:8B:C3:CF:05:F5:B2:4B:2A:5B
X509v3 Authority Key Identifier:
keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/AWbWgfH2HynhRAqLw88F9bJLKls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1590::/48
2001:67c:15a1::/48
Signature Algorithm: sha256WithRSAEncryption
84:a6:75:a8:bd:e1:ca:f7:13:f0:18:fa:23:8b:cc:e7:25:21:
d9:d8:11:e1:76:31:cc:7f:d7:63:6d:39:5b:c0:91:9e:20:af:
a0:6a:db:48:7a:e5:52:1a:1a:59:49:30:98:1c:1f:f7:03:d0:
d3:23:4f:3d:87:0d:3a:56:a2:bb:97:30:21:44:87:54:c2:26:
15:bc:2e:03:e4:64:99:6f:ee:77:71:53:6d:72:7a:17:f9:31:
30:a5:e6:e6:85:5f:45:8c:d4:c2:7b:05:fe:31:31:da:ec:78:
7b:74:b8:26:84:13:eb:71:8c:b4:69:38:fc:7d:53:3a:c5:6d:
d5:82:99:47:38:1a:8f:8d:6c:14:f9:2f:15:1d:c4:32:18:ba:
c3:bf:f1:75:0c:66:6b:0c:56:19:57:26:e1:6f:a4:70:67:25:
d5:b0:71:c0:f8:b8:b3:91:46:d1:23:ad:ae:70:94:06:5b:4f:
1f:b0:59:14:a2:06:5e:c2:d4:74:a3:68:7a:72:db:1b:94:82:
67:61:fc:b7:1b:2a:3f:f3:55:ba:d9:82:64:29:c0:9f:d0:18:
f0:ec:b4:51:45:ef:d5:d7:0e:93:46:00:84:c7:3f:29:b6:06:
69:2a:5a:15:60:b4:0e:16:57:1a:a5:0a:6d:8d:9c:40:96:5f:
b6:4d:08:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:33:51 2025 by rpki-client