Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/e88ww8c1XFgfu7n90ETQAYVfahc.roa
File: e88ww8c1XFgfu7n90ETQAYVfahc.roa (raw, json)
Hash identifier: mmgbuKGdmxdBGYWsx+6OE2WiOG3VhcpW9tOp7uhR8oI=
Subject key identifier: 7B:CF:30:C3:C7:35:5C:58:1F:BB:B9:FD:D0:44:D0:01:85:5F:6A:17
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 0184D79A10A18F39B8D27C9B0FF6BA8863B4
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/e88ww8c1XFgfu7n90ETQAYVfahc.roa
Signing time: Sat 03 Dec 2022 10:48:28 +0000
ROA not before: Sat 03 Dec 2022 10:48:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139328
IP address blocks: 2a12:3fc2:e800::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d7:9a:10:a1:8f:39:b8:d2:7c:9b:0f:f6:ba:88:63:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Dec 3 10:48:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bcf30c3c7355c581fbbb9fdd044d001855f6a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ac:55:3e:14:83:b2:2f:19:61:9f:12:c7:22:
77:0d:0a:1c:68:a0:15:56:ca:77:f8:68:2d:68:91:
66:7b:09:b5:ad:bc:89:ab:28:96:79:86:fe:27:2e:
77:49:cd:0d:d7:ca:a1:55:53:f2:a1:75:c2:23:f9:
08:f1:fd:12:99:e9:4e:fb:8b:db:2b:b7:42:b2:d2:
80:ea:48:85:31:d4:6d:a1:d1:7c:ac:9d:21:1d:33:
7c:60:e3:56:e8:ae:ad:bc:4b:27:91:1e:c7:7e:e2:
c5:dd:1c:b7:76:b8:f7:69:b2:0e:17:50:ab:97:1e:
0e:4b:e7:e3:dd:59:4e:68:69:49:9e:cf:e7:b6:2c:
5d:f9:81:ba:d2:18:2c:2a:23:2a:13:68:33:e3:db:
48:37:bb:8e:d1:eb:bf:a2:f8:45:52:ec:e5:64:ce:
b7:5b:6c:58:ee:6e:b0:73:fc:6e:7c:a5:41:7a:6a:
c1:a0:09:a0:d4:d3:b7:c2:f6:fa:3b:cc:71:50:44:
27:91:5d:21:c1:d9:41:a0:de:2d:98:1f:ec:ce:7d:
d7:39:eb:4d:72:91:5f:f6:15:e5:29:59:a0:ae:55:
cd:f1:54:ac:94:ec:b1:d1:cf:25:15:a3:53:0a:99:
6b:8a:74:c2:18:52:27:05:55:62:70:90:88:c0:83:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CF:30:C3:C7:35:5C:58:1F:BB:B9:FD:D0:44:D0:01:85:5F:6A:17
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/e88ww8c1XFgfu7n90ETQAYVfahc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:e800::/40
Signature Algorithm: sha256WithRSAEncryption
5d:94:ab:63:33:54:a3:92:c9:07:5c:6c:55:17:b5:12:be:af:
82:9f:d6:9a:f4:12:64:66:07:d3:cc:23:3c:41:67:ed:c9:ea:
14:ba:f2:d5:66:6d:18:d8:e6:a9:4f:e3:fe:98:0a:0b:77:ac:
cb:03:ff:4c:28:61:ef:6b:72:0f:ec:6b:d6:72:e5:ea:98:6e:
a9:45:15:d1:3f:3a:06:41:31:29:bb:8d:5f:6d:28:7a:14:08:
c5:36:00:46:12:cf:87:af:c1:79:c2:67:2a:59:df:2d:79:c3:
3a:89:be:d8:43:a5:9a:ca:6c:bb:2d:9f:50:12:0e:0c:e6:e4:
6f:05:77:fe:66:bf:fd:e2:e3:57:a2:ad:b5:f0:4b:ca:88:44:
6e:f5:5b:18:d4:f6:9c:24:6a:77:b8:d0:8f:5c:f2:d5:5a:2a:
36:4f:74:0e:f2:c3:7e:e1:5d:67:1e:f9:d6:33:01:79:fb:ae:
4f:7a:9d:37:b6:d2:76:ce:70:e6:96:d6:a6:3e:55:2c:da:4f:
39:f6:ad:87:81:dc:58:37:c9:ed:cc:a4:0c:73:15:d8:7e:f4:
77:5b:48:08:06:80:59:0f:e8:56:3c:45:03:2b:e5:9b:d1:87:
60:5d:7f:f9:6c:4a:fa:4e:d2:ec:de:ba:9e:ba:85:b7:be:8a:
e4:59:1f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:51 2025 by rpki-client