Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9em9PqVWk2o7E2mIOUrRGumarDo.roa
File: 9em9PqVWk2o7E2mIOUrRGumarDo.roa (raw, json)
Hash identifier: 2LE32GTtp82XTNdKVrTCKZvj6QjtwzgQev7K2u9yCPw=
Subject key identifier: F5:E9:BD:3E:A5:56:93:6A:3B:13:69:88:39:4A:D1:1A:E9:9A:AC:3A
Certificate issuer: /CN=f41180a7c51667ec3875e765f245f90938612571
Certificate serial: 018BD81038C3AEE6D9888308A3FE2C59681E
Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9em9PqVWk2o7E2mIOUrRGumarDo.roa
Signing time: Thu 16 Nov 2023 12:17:03 +0000
ROA not before: Thu 16 Nov 2023 12:17:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35332
IP address blocks: 2001:67c:a3c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:10:38:c3:ae:e6:d9:88:83:08:a3:fe:2c:59:68:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41180a7c51667ec3875e765f245f90938612571
Validity
Not Before: Nov 16 12:17:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5e9bd3ea556936a3b136988394ad11ae99aac3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:dc:68:7e:b3:36:21:67:5e:87:fa:df:e3:
71:b2:1c:61:c9:33:31:5f:fb:78:92:74:96:58:09:
62:5a:27:dd:7e:c2:8a:d2:85:5c:81:7a:19:4a:97:
b7:4c:c3:1d:e2:1d:d2:bf:81:bb:c7:2e:fa:0a:f6:
69:49:41:32:d8:1f:fd:99:21:73:37:f4:80:fc:50:
c1:f1:79:90:43:03:9f:7f:0a:f1:30:1d:4b:fe:f7:
a7:76:69:23:e2:46:29:3a:cd:b3:31:4c:ef:56:f8:
20:9d:bf:bf:b1:a2:8d:2e:5b:59:3c:c6:63:bb:7b:
96:3c:e0:cb:13:2d:fe:8d:50:f9:3a:8d:b2:20:21:
61:49:82:a6:e0:d5:f7:f7:8b:13:9e:95:40:f6:0d:
56:3f:2e:93:fa:b8:fa:93:01:53:da:1d:a8:61:99:
27:89:2e:85:57:88:c7:f6:de:a2:d7:eb:b6:d0:6e:
64:8c:5d:d5:d0:8c:f1:1d:6f:99:20:7a:da:7b:aa:
84:18:76:ec:54:6b:1f:72:83:a8:82:b7:1c:a9:55:
b0:dd:5e:1d:dc:79:a3:e0:62:e5:3c:a2:f7:ab:a3:
7c:a3:ad:04:b2:4e:1b:e0:cc:9d:07:6e:f3:48:a2:
a2:a8:46:32:0b:77:f5:7c:b3:b1:c8:e2:6e:47:dd:
5f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E9:BD:3E:A5:56:93:6A:3B:13:69:88:39:4A:D1:1A:E9:9A:AC:3A
X509v3 Authority Key Identifier:
keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9em9PqVWk2o7E2mIOUrRGumarDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a3c::/48
Signature Algorithm: sha256WithRSAEncryption
a2:41:a7:aa:ea:7d:62:56:ca:fc:44:7a:89:91:6f:0c:39:6f:
a4:44:fc:48:6c:fe:7a:8c:ba:28:6b:e7:c4:e3:33:88:2c:94:
20:94:9f:1d:26:25:c4:1a:cc:a9:ee:f9:8a:ff:8e:6a:6b:42:
d5:84:6f:6c:53:f5:8e:c9:15:8f:94:d3:a2:a7:da:28:06:8e:
49:6b:af:cd:43:2d:22:ca:e6:61:dc:92:02:d6:a3:41:75:ff:
d7:bb:b3:1e:9e:a0:d5:41:ab:b1:2c:f2:fd:88:c6:c0:f7:33:
d5:2b:9e:21:a5:33:f7:5f:cf:ec:4e:80:8f:ec:2a:72:f7:00:
f1:16:28:37:67:d2:25:19:1e:b5:88:36:ca:46:49:98:83:bf:
c1:ca:b6:a6:03:d4:5c:74:94:31:99:31:19:41:21:bf:43:8a:
9d:d2:40:99:a3:d9:18:3a:23:2f:4c:b0:d4:ea:d9:23:42:3e:
18:84:1b:d7:97:e6:e2:94:98:16:e4:d5:5e:83:ed:88:49:6b:
3f:74:7e:8c:f8:10:7d:d2:b0:8f:72:b3:f2:96:37:3f:70:6e:
13:87:a3:62:97:5a:18:c6:10:19:77:b4:47:d3:3d:6b:2c:34:
75:2a:de:b6:93:6a:23:32:53:ba:96:9f:45:00:5d:65:40:04:
2f:cf:89:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:58 2025 by rpki-client