Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/9SI35BTYFXB5cHnp3FQFJgFQOLY.roa
File: 9SI35BTYFXB5cHnp3FQFJgFQOLY.roa (raw, json)
Hash identifier: ptXBP6rs4lhRsBfmkP6r+pRGI3igDGZ53jCQ1KlVoFA=
Subject key identifier: F5:22:37:E4:14:D8:15:70:79:70:79:E9:DC:54:05:26:01:50:38:B6
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01856C1CAF744C1E353C4B97DFECF4EBE123
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/9SI35BTYFXB5cHnp3FQFJgFQOLY.roa
Signing time: Sun 01 Jan 2023 06:54:57 +0000
ROA not before: Sun 01 Jan 2023 06:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210320
IP address blocks: 2a12:3fc2:ee01::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:af:74:4c:1e:35:3c:4b:97:df:ec:f4:eb:e1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 06:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f52237e414d81570797079e9dc540526015038b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:30:4d:42:57:e6:d5:ae:75:49:5a:44:c3:
e2:d5:3b:e9:34:e3:1d:30:56:a0:c5:2d:db:d2:63:
87:eb:ea:2c:df:b7:c2:9c:2b:72:59:73:cd:ff:6c:
42:bb:5d:41:62:91:b0:65:23:34:d2:93:a2:44:21:
1d:1b:f9:e1:41:f5:6b:22:36:57:9c:5f:17:68:42:
c1:c3:66:fd:f4:02:c3:33:e8:2a:a8:10:1f:cc:0e:
50:da:6b:99:90:c2:35:d3:d8:99:23:c1:4f:2b:ca:
80:87:59:83:18:aa:1e:34:8a:3b:25:bc:55:ff:55:
bd:2b:7a:96:76:41:e8:23:db:89:78:06:f0:da:37:
47:ca:ac:b3:b3:64:a1:5a:be:d8:dd:c7:c8:44:c1:
42:af:31:b4:ff:88:9a:81:bc:f7:0f:98:3f:09:1b:
64:fb:08:9d:85:86:90:39:0f:4c:05:64:c3:ce:78:
4e:9c:c4:d6:55:ca:12:61:6d:1d:3c:53:72:91:71:
1a:df:97:0b:c1:42:82:d5:d8:1a:b6:dc:20:48:9a:
f1:90:7b:1b:cf:9a:58:ab:8b:a7:c2:59:2a:42:a8:
cd:10:a7:52:13:c8:0b:03:ac:3a:60:89:6d:ee:ec:
fe:aa:a5:4d:b0:98:f6:c3:71:5d:10:84:98:b1:31:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:22:37:E4:14:D8:15:70:79:70:79:E9:DC:54:05:26:01:50:38:B6
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/9SI35BTYFXB5cHnp3FQFJgFQOLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:ee01::/48
Signature Algorithm: sha256WithRSAEncryption
21:4f:f1:2a:ed:ff:c6:93:80:61:58:81:cc:4d:44:69:f3:30:
47:5d:7c:c7:b4:aa:ef:f4:40:a1:7f:50:2b:98:c6:92:ec:8e:
57:ef:8b:9d:5d:0e:90:53:03:cd:55:c3:e3:47:56:5b:76:ab:
9f:85:9f:7b:5a:90:a0:ae:dc:81:b2:e1:ed:e8:bd:14:73:28:
bd:35:c7:1e:ef:e2:60:fe:de:ac:8b:c0:cd:81:d3:65:44:0d:
6d:62:0b:fa:02:ab:b3:df:0e:5f:d1:be:f7:68:00:69:fa:50:
54:7a:19:a3:dc:47:bf:66:d8:ef:c3:9a:e5:02:e7:43:33:c3:
81:3e:52:a6:e4:c8:71:de:8b:58:b6:ce:cb:c7:e2:12:fa:0b:
64:7e:3e:a0:01:47:71:f3:2e:0a:77:8d:b4:b4:f7:c6:42:c2:
fb:27:88:8e:69:2d:fa:37:53:84:3f:79:f9:7a:77:b7:4a:4b:
19:c5:f5:65:e3:7e:21:cf:db:08:28:ab:a9:72:bd:97:3e:10:
15:1d:e5:c5:f3:6b:f7:ec:24:8a:0e:c9:fa:a7:ff:d0:c3:30:
d8:9c:35:15:5f:f0:4c:ae:7e:6b:1f:5e:88:58:40:80:7f:53:
42:56:d5:47:9d:fe:b4:cf:81:fb:7b:ec:5b:1e:5d:24:f3:8e:
86:30:14:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:05 2025 by rpki-client