Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/f3i2YvbxrhfXx2MtSTi2CyQsgYs.roa
File: f3i2YvbxrhfXx2MtSTi2CyQsgYs.roa (raw, json)
Hash identifier: eAybn+bz5WHw5BKpyDcON7sAtRq2JsRv4KHnxM6+gz0=
Subject key identifier: 7F:78:B6:62:F6:F1:AE:17:D7:C7:63:2D:49:38:B6:0B:24:2C:81:8B
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01856C1CA090F1609DC7805D928894C7B91F
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/f3i2YvbxrhfXx2MtSTi2CyQsgYs.roa
Signing time: Sun 01 Jan 2023 06:54:53 +0000
ROA not before: Sun 01 Jan 2023 06:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7721
IP address blocks: 2a12:3fc2:6600::/40 maxlen: 48
2a12:3fc2:6666::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:a0:90:f1:60:9d:c7:80:5d:92:88:94:c7:b9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 06:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f78b662f6f1ae17d7c7632d4938b60b242c818b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:49:04:88:ed:a5:4a:08:55:0f:12:08:f7:c4:
eb:75:59:fa:63:74:2e:cc:83:ce:dd:74:ae:d6:85:
b7:94:cc:3e:d3:aa:13:fb:00:23:58:23:a7:27:4e:
a6:7f:08:b7:b3:e5:be:3d:6e:82:b6:bb:f4:39:ad:
cf:c1:3f:0c:d0:18:cf:62:45:6b:d1:57:21:b9:a2:
91:55:ce:9d:61:f2:2b:a1:26:8b:19:23:8c:38:67:
5c:4a:45:13:94:c4:00:f5:82:72:1b:ed:8d:7f:6c:
2f:44:63:9d:ee:2f:df:96:9e:ea:fb:9f:d0:b6:78:
27:42:8f:32:e4:65:79:39:d9:de:10:22:96:84:34:
7a:59:e7:1e:aa:03:9c:60:3a:b3:95:ce:f7:46:94:
3b:7e:88:fc:0d:eb:f0:26:1b:4c:97:43:0c:7a:72:
c0:b6:a1:95:ab:05:31:fa:66:0c:9f:7c:a3:90:73:
46:23:f9:8f:d7:ee:52:1d:e4:f1:1e:f2:8c:7f:0c:
3f:42:89:d9:9f:60:37:91:2f:89:4d:f2:bd:d3:cc:
d1:a0:5e:d5:fb:f8:0d:65:10:0b:c0:9c:a4:56:ca:
29:1c:67:54:5a:d4:fe:12:2a:cd:18:c6:8d:c3:fa:
d8:54:d1:16:08:44:1a:7d:f3:55:bc:be:8c:5b:97:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:78:B6:62:F6:F1:AE:17:D7:C7:63:2D:49:38:B6:0B:24:2C:81:8B
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/f3i2YvbxrhfXx2MtSTi2CyQsgYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:6600::/40
Signature Algorithm: sha256WithRSAEncryption
09:ad:a4:07:02:a9:e5:c1:31:50:38:92:c6:ea:bb:ae:a4:22:
f8:aa:d8:0a:e6:96:d0:49:b3:cd:e2:f1:42:2d:41:2a:95:af:
3b:7c:27:81:d8:0f:ea:8f:3d:37:6c:41:7d:cd:21:5e:44:3f:
14:a5:ea:7e:98:86:ff:ae:4e:fd:1b:a1:67:04:f6:16:44:84:
cc:2f:90:30:f2:cc:b7:d6:4d:01:15:1e:7d:35:05:b8:1f:6d:
08:f4:42:0b:22:07:68:7d:da:0c:7d:d2:7b:00:06:d9:b2:96:
ef:36:33:9f:23:ce:7f:48:ba:9c:09:fc:5e:d7:2e:aa:f8:6f:
34:5f:98:26:2c:e7:b3:f2:ee:37:c1:a1:3d:56:3b:fc:a6:ec:
74:36:2b:a2:55:06:5d:82:a4:34:69:4f:62:c9:6d:97:14:2d:
1f:6a:3f:42:4d:20:eb:66:f1:8f:86:03:65:5b:3b:2c:bc:2a:
5d:40:63:00:0a:22:04:e0:72:89:2f:44:19:11:9d:a4:2c:89:
c5:f5:4f:0f:7d:2d:72:5d:a9:2b:26:cc:dd:49:a1:27:4e:da:
da:64:63:b9:bc:60:84:06:34:cd:f4:78:57:00:79:85:ef:54:
d8:64:82:f5:5e:e0:47:f7:89:92:02:10:3b:6e:3e:8f:c1:a1:
89:19:03:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:17 2025 by rpki-client