Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/SceQkoqC-uadwO8c5E5SQg3HwDs.roa
File: SceQkoqC-uadwO8c5E5SQg3HwDs.roa (raw, json)
Hash identifier: sKQ9WSddqNDutPLDMiebtZ2KauE+84ZF8HYXcEg5nHQ=
Subject key identifier: 49:C7:90:92:8A:82:FA:E6:9D:C0:EF:1C:E4:4E:52:42:0D:C7:C0:3B
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 018978D586AA4C68807D1FF257BA49A4CE6C
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/SceQkoqC-uadwO8c5E5SQg3HwDs.roa
Signing time: Fri 21 Jul 2023 14:23:26 +0000
ROA not before: Fri 21 Jul 2023 14:23:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207780
IP address blocks: 2a12:3fc6:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:78:d5:86:aa:4c:68:80:7d:1f:f2:57:ba:49:a4:ce:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jul 21 14:23:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49c790928a82fae69dc0ef1ce44e52420dc7c03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:56:d8:d2:27:4f:ef:fa:c9:4f:d1:c6:a8:
11:65:8f:c9:1b:28:87:42:25:36:3e:08:89:8b:26:
3c:78:7f:91:a9:53:6a:67:15:19:46:ad:74:8e:37:
63:85:69:e9:ba:a1:d1:45:a3:ae:30:0a:0f:cb:64:
cc:24:ba:77:48:75:8a:4b:c3:1a:ac:bd:e9:16:b5:
ab:3d:01:08:b0:43:34:ca:0c:f3:b3:c9:90:87:31:
c0:fb:ab:ac:c8:d5:3f:ac:e7:c2:15:0c:12:91:8c:
04:83:40:d3:f2:63:77:5a:f8:ee:b5:29:cd:aa:33:
6a:e4:d3:ce:0f:8b:57:b8:37:3b:50:0e:9a:91:d3:
d0:59:b3:95:5a:55:43:a0:9b:37:20:b9:1d:8d:8c:
a8:36:b3:7a:40:c6:08:21:c9:62:e0:c3:0e:c9:7e:
2a:68:82:b4:c8:2a:82:1a:2c:ef:4a:c6:81:b0:af:
67:2d:4d:77:5b:df:ed:14:a0:c5:35:e0:5b:f8:8c:
02:1a:37:5a:87:e2:6a:5c:35:ae:12:07:f5:47:bc:
f5:d5:a8:8b:13:15:cf:30:a5:50:35:0f:d1:8e:36:
53:c5:58:dc:3e:0d:c0:69:18:fd:66:bc:25:3d:8a:
a5:95:66:2f:8c:b3:37:1a:fd:3d:bf:dc:b3:f9:54:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C7:90:92:8A:82:FA:E6:9D:C0:EF:1C:E4:4E:52:42:0D:C7:C0:3B
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/SceQkoqC-uadwO8c5E5SQg3HwDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc6:1::/48
Signature Algorithm: sha256WithRSAEncryption
43:eb:a6:98:de:b6:5f:d8:95:8c:58:15:bf:89:12:a5:e7:d6:
d3:87:d0:40:e9:ea:fd:3b:bd:77:f1:7b:c8:93:3e:e6:9a:7d:
e1:e3:82:c2:4c:5d:7c:6c:1a:4d:b2:b4:99:4f:05:70:ce:8b:
49:4d:55:ca:15:67:fc:ec:fd:0f:62:1f:ba:04:a1:da:71:9c:
71:46:b0:7d:d6:04:15:c4:8f:d7:bf:54:c2:65:cb:6c:ca:84:
da:51:92:0e:f1:11:98:ab:8a:b0:22:69:3e:51:52:8f:45:4a:
c4:7b:39:7e:b3:cd:47:e0:ee:1f:7f:2a:fb:10:9c:1d:60:57:
c6:eb:58:33:be:41:49:de:5f:b4:30:28:c9:d1:b8:66:14:92:
dd:85:1a:b4:e6:5a:48:ef:a4:c0:86:63:8f:9d:27:78:9f:b6:
a5:ed:bd:55:11:de:27:b4:6a:1f:e0:9b:1c:8e:0d:97:e6:20:
4d:25:45:2d:fe:6f:ed:fb:6f:02:8a:11:49:ab:e0:54:d9:90:
02:bd:37:2e:f6:7f:eb:b8:60:53:f3:51:a5:9c:e4:e4:45:f5:
67:33:39:e1:9a:1b:93:92:70:95:a9:9c:72:91:64:8b:ab:e4:
93:cd:4e:5a:78:60:a2:bf:56:c6:1f:fa:5b:75:5b:a2:20:b7:
03:73:cb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:39 2025 by rpki-client