Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/84ge558UptLhuDDIo4L2Wc-Ip64.roa
File: 84ge558UptLhuDDIo4L2Wc-Ip64.roa (raw, json)
Hash identifier: 8iuvG/lKp2YwANxQtHWfL5ZxXe1fiY0hmc76kpNmn+w=
Subject key identifier: F3:88:1E:E7:9F:14:A6:D2:E1:B8:30:C8:A3:82:F6:59:CF:88:A7:AE
Certificate issuer: /CN=843cf5bb876b772b7ade432905cb696f134caa39
Certificate serial: 01856C4A3C7244309A09285F789D8A587F3D
Authority key identifier: 84:3C:F5:BB:87:6B:77:2B:7A:DE:43:29:05:CB:69:6F:13:4C:AA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/84ge558UptLhuDDIo4L2Wc-Ip64.roa
Signing time: Sun 01 Jan 2023 07:44:42 +0000
ROA not before: Sun 01 Jan 2023 07:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207901
IP address blocks: 2a09:5a00::/29 maxlen: 48
2a09:5a00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:3c:72:44:30:9a:09:28:5f:78:9d:8a:58:7f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843cf5bb876b772b7ade432905cb696f134caa39
Validity
Not Before: Jan 1 07:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3881ee79f14a6d2e1b830c8a382f659cf88a7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:15:78:c5:0e:ce:a8:fb:b7:1b:33:f8:78:73:
e1:f2:ef:66:14:3b:d4:15:93:7d:5b:b9:3a:c7:76:
ce:9a:52:1b:0c:a8:c5:c1:02:a9:09:4f:29:27:f1:
f5:76:78:00:23:8c:9a:4d:9b:11:14:71:ae:e9:11:
2d:70:92:9c:14:af:4f:38:a8:5f:6c:b9:69:f8:39:
3f:ca:9f:fb:ca:23:1a:d7:36:07:62:b1:be:da:53:
07:5f:ec:d5:a4:cc:8c:52:34:e0:2a:fd:ad:34:54:
ba:ea:d7:fd:d1:3c:76:24:cf:2b:a7:ef:8f:e0:fb:
f0:16:69:e1:79:99:ec:50:9c:81:30:6e:78:05:47:
8e:79:11:8e:b1:d4:c9:df:f7:01:54:0f:ec:90:4d:
11:cf:63:31:89:96:d6:fd:e9:dc:fb:eb:60:58:29:
48:19:d6:df:e9:81:d9:4f:e0:e9:95:26:5f:9e:8b:
f7:34:c5:6f:32:93:63:ac:8a:2f:bd:f0:de:fb:9b:
ad:9b:2f:4d:66:f2:f5:6e:b2:67:ec:17:7c:15:98:
02:25:66:c4:46:ba:99:74:a5:85:70:76:a6:69:8b:
b9:8e:49:a0:82:39:19:95:45:80:e6:57:f4:9f:41:
1c:69:f5:c4:9f:40:89:4c:42:c5:2f:cd:78:4e:70:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:88:1E:E7:9F:14:A6:D2:E1:B8:30:C8:A3:82:F6:59:CF:88:A7:AE
X509v3 Authority Key Identifier:
keyid:84:3C:F5:BB:87:6B:77:2B:7A:DE:43:29:05:CB:69:6F:13:4C:AA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/84ge558UptLhuDDIo4L2Wc-Ip64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:5a00::/29
Signature Algorithm: sha256WithRSAEncryption
58:2f:4d:b3:d5:6b:33:45:f5:01:92:7a:2a:c9:77:36:b7:a6:
cb:3a:62:6a:f5:22:66:60:33:76:7d:59:56:2d:f0:05:f9:aa:
6a:f1:5e:7e:bb:3b:59:dc:c3:ce:81:ce:bc:7a:01:54:b5:7a:
9f:fc:94:f1:01:c4:5f:71:1e:a1:53:e2:88:72:ff:51:b9:8e:
d8:8d:30:c2:fc:84:ce:ac:fb:64:2e:6e:76:84:e9:31:e6:12:
e4:d3:c6:7d:87:68:1c:ff:01:ba:69:fc:20:5e:a3:e8:79:f0:
a6:a9:04:34:24:55:41:a3:84:3c:35:26:cb:4d:9b:d6:dc:4e:
24:8a:fb:92:c1:42:41:21:12:be:b4:4b:a5:9f:8b:5e:45:08:
3f:ff:09:a8:aa:6b:c1:d5:29:9e:30:9e:14:66:c0:35:18:03:
85:6d:35:a3:c6:6c:9e:d3:93:5c:12:40:5b:6b:f0:3b:ad:51:
4d:26:e7:20:c9:c1:86:f9:0a:49:eb:45:b9:1f:a8:30:da:31:
30:56:ad:2f:3f:5a:23:4b:06:df:4b:25:8f:a1:3d:6b:f6:27:
13:0e:b9:90:64:ec:e3:b5:92:ed:3e:e0:d5:0f:15:b1:5f:5e:
66:88:ed:ba:96:68:fd:e1:f3:06:d5:3f:8c:10:d5:6e:7f:79:
63:6d:f5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:08 2025 by rpki-client