Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/9kWsyKI33BWZ5LJA52SjcKjwkLs.roa
File: 9kWsyKI33BWZ5LJA52SjcKjwkLs.roa (raw, json)
Hash identifier: vERsOVsd4nfjdi9I3uHtzqS505SWF8moi0A07BwUWlA=
Subject key identifier: F6:45:AC:C8:A2:37:DC:15:99:E4:B2:40:E7:64:A3:70:A8:F0:90:BB
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 0183D9764BFDFD47DC63C7E50C36E4C3D910
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/9kWsyKI33BWZ5LJA52SjcKjwkLs.roa
Signing time: Sat 15 Oct 2022 02:25:51 +0000
ROA not before: Sat 15 Oct 2022 02:25:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202255
IP address blocks: 2a12:3fc2:2a00::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d9:76:4b:fd:fd:47:dc:63:c7:e5:0c:36:e4:c3:d9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Oct 15 02:25:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f645acc8a237dc1599e4b240e764a370a8f090bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:e1:15:4c:10:2b:cb:74:5d:74:47:81:37:
f3:c9:79:b4:e7:87:19:01:38:cf:55:5f:32:af:0b:
78:25:56:a4:21:f0:18:a7:48:41:d3:48:97:94:04:
5b:7e:25:a3:82:65:4b:f4:03:86:4a:46:10:3d:88:
b5:e3:52:51:b7:2e:1e:d8:c6:84:f6:63:d9:c6:fb:
bf:57:fb:6b:9c:6e:76:d0:a7:7c:f3:19:23:50:6e:
b3:f4:02:93:f1:23:b2:12:15:93:16:10:af:2d:ab:
5d:d7:d8:5d:5f:04:39:77:82:ed:78:fa:81:4d:95:
02:f4:dc:7f:c1:ea:53:bf:8e:b6:7d:a1:24:6e:ee:
aa:ba:cf:9d:6a:ab:8b:8b:4c:5c:9a:29:a5:3f:47:
44:4a:a5:0f:e8:25:29:02:10:70:84:1c:85:ff:f6:
d7:35:fd:2b:3e:ab:e2:55:9c:9b:22:25:a4:86:bc:
bf:59:a3:a2:40:fd:6b:3f:55:c0:11:c6:ea:a3:c5:
fe:08:1f:10:39:0e:71:8a:45:04:00:31:87:76:e5:
a2:fe:f9:d6:71:2f:0b:4f:26:64:9b:31:6e:73:15:
f8:fd:3e:64:ce:98:7a:8f:29:e4:e9:80:08:45:30:
c3:51:32:0f:ee:4b:ef:0f:72:c4:40:0e:98:05:e7:
2a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:45:AC:C8:A2:37:DC:15:99:E4:B2:40:E7:64:A3:70:A8:F0:90:BB
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/9kWsyKI33BWZ5LJA52SjcKjwkLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:2a00::/40
Signature Algorithm: sha256WithRSAEncryption
b2:06:b1:96:1b:07:e2:06:b1:70:63:00:b3:89:5e:ae:c7:d5:
fd:53:1e:7e:2c:1c:b0:46:ed:0c:ee:e3:d0:cb:21:4c:13:ae:
45:0f:ea:ee:bd:c6:d7:23:32:d0:84:fb:e2:db:98:53:b2:09:
d4:ac:21:49:f1:43:2f:f1:8f:5b:7c:4d:71:cb:31:aa:e0:a9:
46:35:fe:cf:bd:65:c4:a3:ed:11:03:83:f4:13:35:87:98:41:
4e:06:5e:18:18:f1:c9:52:59:5e:cb:c1:cc:9b:17:7a:8e:2c:
ad:42:c4:75:33:ec:9b:85:a5:3c:bf:54:b9:75:93:9e:6c:23:
cc:3d:76:76:51:4f:be:f6:a4:38:0a:61:82:66:f8:d8:5c:7f:
c5:c1:7b:78:6f:f7:9d:ea:27:31:61:db:55:18:4f:a1:f7:22:
99:d1:17:a0:13:c5:61:47:1a:2d:02:14:7d:73:48:d6:46:ba:
8e:9d:77:1d:e0:54:c9:9f:2d:ee:7c:57:96:43:58:3e:42:58:
25:52:13:15:f1:02:a6:3b:0d:07:a5:7a:9b:90:75:ab:bd:f8:
b4:94:4a:11:f4:3f:7a:71:1d:81:17:d0:f4:f9:56:f9:26:06:
4a:88:4b:73:b6:9c:94:b6:40:ab:52:62:80:c8:d3:4d:c8:28:
b2:f0:5a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:19 2025 by rpki-client