Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/n7S9V7vIog1Zg43b8P5MFFNGz2s.roa
File: n7S9V7vIog1Zg43b8P5MFFNGz2s.roa (raw, json)
Hash identifier: +9UFPplslcI/0U6MzkapyRZ6p/uPimy+RnfDrImpn7k=
Subject key identifier: 9F:B4:BD:57:BB:C8:A2:0D:59:83:8D:DB:F0:FE:4C:14:53:46:CF:6B
Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial: 01856F5DD94A8E14B4CB412DD23C98184B7B
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/n7S9V7vIog1Zg43b8P5MFFNGz2s.roa
Signing time: Sun 01 Jan 2023 22:04:59 +0000
ROA not before: Sun 01 Jan 2023 22:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21430
IP address blocks: 2001:67c:15a1::/48 maxlen: 48
2001:67c:1590::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d9:4a:8e:14:b4:cb:41:2d:d2:3c:98:18:4b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Validity
Not Before: Jan 1 22:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fb4bd57bbc8a20d59838ddbf0fe4c145346cf6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:29:39:7a:29:10:21:65:eb:6b:fd:58:b6:57:
b9:13:78:3a:14:c8:be:f5:11:20:aa:e8:c7:c9:88:
17:1c:15:29:ce:1b:c2:86:a0:2c:36:51:02:01:60:
63:7e:28:55:33:31:f2:d7:e0:0d:27:b3:a6:fd:42:
1a:2a:11:53:0e:16:60:68:3b:5c:c2:35:38:4f:c1:
3b:5f:26:eb:f5:a8:f1:4c:5d:df:de:05:84:b7:22:
b8:f5:e2:8c:75:29:0b:8b:6f:a4:b2:32:86:93:6f:
93:8b:e5:d0:4b:b9:e3:eb:1e:c8:2f:c3:19:62:1a:
8f:91:2a:68:fa:03:c9:f2:c4:6c:03:fa:2e:1e:dc:
aa:af:e9:5b:16:5c:f6:48:91:a1:d5:05:0d:e3:a3:
c7:00:ac:53:9f:9d:0c:f8:93:d0:1c:71:59:43:2d:
7b:43:83:1c:47:76:de:87:94:6f:d2:af:f9:37:0b:
73:33:6d:0e:c1:d7:54:a9:0f:b6:4e:95:cc:d0:7c:
c8:60:f7:9e:5f:11:bb:55:c8:d9:a0:b4:3f:38:72:
f8:fa:8e:15:03:34:4b:3f:64:7c:0d:e6:6c:51:6b:
10:94:a9:e6:c8:7f:56:b1:12:85:a4:ce:38:55:3f:
38:1f:3b:9a:28:74:bc:73:5b:5d:62:de:9b:21:3c:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B4:BD:57:BB:C8:A2:0D:59:83:8D:DB:F0:FE:4C:14:53:46:CF:6B
X509v3 Authority Key Identifier:
keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/n7S9V7vIog1Zg43b8P5MFFNGz2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1590::/48
2001:67c:15a1::/48
Signature Algorithm: sha256WithRSAEncryption
49:be:9e:30:4b:ea:1b:b9:f6:f9:66:6b:57:27:b7:ff:12:62:
c9:af:3c:ed:10:f8:71:6b:d3:e8:2c:10:0b:57:85:ef:a5:f6:
53:ee:8c:24:6e:60:86:06:1e:83:72:f4:12:d5:4c:c6:6a:d1:
00:f6:5e:65:87:8a:76:a5:7c:da:fb:9a:ca:51:ba:bd:6c:78:
6b:08:85:8d:54:9b:d5:11:61:57:e2:e9:9d:d6:88:23:e4:86:
b8:ea:9f:aa:0e:17:9d:39:da:53:bc:52:89:fb:b1:6b:30:ea:
89:82:fc:88:5d:43:5e:a9:ec:e8:8c:4d:b2:fb:95:1f:a7:25:
7a:e2:8c:69:02:e0:db:45:9f:a7:51:74:a1:e8:0c:c1:56:49:
1e:3e:48:69:f0:30:6c:1c:8d:e3:80:41:4e:a4:37:2e:41:a2:
90:47:82:b0:9e:92:13:f4:4f:12:d6:34:d9:f9:54:32:5b:69:
10:58:95:cd:1c:24:44:26:bf:bc:51:74:51:84:64:f8:a0:8b:
16:dd:68:60:70:6e:e5:c5:05:a4:5f:35:78:39:c7:8d:24:bb:
8b:95:67:c4:aa:a9:39:98:51:34:d3:be:e9:52:a2:bf:4d:4d:
ee:b8:21:8a:02:ee:e0:4b:49:85:96:d3:64:91:4a:c6:3f:f0:
c1:3b:a3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:44 2025 by rpki-client