Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/uxuISv5QXzOU19mcdJHTd8OE-Xg.roa
File: uxuISv5QXzOU19mcdJHTd8OE-Xg.roa (raw, json)
Hash identifier: a4R7ZHB19mloBmo7Zh2p4u6QoaExTOsg2w0lb6Lr9YY=
Subject key identifier: BB:1B:88:4A:FE:50:5F:33:94:D7:D9:9C:74:91:D3:77:C3:84:F9:78
Certificate issuer: /CN=f6b2c89d31f617516a860a7822bba68248a769a0
Certificate serial: 0189216CE11364FBAE977010F9D9C478E5DD
Authority key identifier: F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/uxuISv5QXzOU19mcdJHTd8OE-Xg.roa
Signing time: Tue 04 Jul 2023 15:02:10 +0000
ROA not before: Tue 04 Jul 2023 15:02:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204465
IP address blocks: 2a13:4600::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:6c:e1:13:64:fb:ae:97:70:10:f9:d9:c4:78:e5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b2c89d31f617516a860a7822bba68248a769a0
Validity
Not Before: Jul 4 15:02:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb1b884afe505f3394d7d99c7491d377c384f978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:f8:2b:68:03:fa:9a:a6:7f:e1:93:1e:55:
23:a5:eb:37:10:91:6a:a7:95:8b:2d:b9:ea:79:bc:
68:b3:0d:9c:c7:06:bd:44:ef:16:a6:45:ba:c3:c8:
5b:51:de:39:5e:74:66:25:1d:41:ff:d3:a0:7b:48:
7a:63:dd:90:4c:aa:a2:26:f2:b5:f6:d7:37:ac:1a:
64:d6:ae:e4:25:5d:b7:d5:ae:57:63:95:ff:b9:92:
e8:2b:b0:ca:32:96:08:50:fa:52:b0:4b:02:14:17:
86:a1:22:bb:d3:e0:f3:fd:39:ce:f3:3c:39:a8:ef:
aa:6b:d8:25:5a:e5:d9:f3:45:fa:41:6b:b2:a3:af:
63:c0:00:a0:fa:00:12:84:f3:02:19:db:58:70:68:
24:bb:b7:0a:94:23:bf:af:8e:d2:87:b2:27:2f:c3:
62:c0:4f:bb:c6:47:8a:b0:d7:53:93:80:9c:7d:c4:
6b:cc:50:8d:57:11:30:21:8d:16:52:e7:65:1a:e4:
4f:61:36:37:c5:fe:80:90:b8:05:6f:5d:cf:b0:26:
ab:81:68:05:dc:30:6c:16:34:01:71:a5:b0:99:92:
fb:b5:0f:0b:1b:38:70:ac:b1:1e:43:54:8d:67:5b:
34:b8:62:00:18:1c:08:f6:70:e4:d0:30:55:04:8c:
05:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1B:88:4A:FE:50:5F:33:94:D7:D9:9C:74:91:D3:77:C3:84:F9:78
X509v3 Authority Key Identifier:
keyid:F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/uxuISv5QXzOU19mcdJHTd8OE-Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4600::/29
Signature Algorithm: sha256WithRSAEncryption
4e:02:ed:92:ea:af:f8:81:a5:34:c9:57:b2:18:c0:ff:b1:9f:
11:49:f7:e4:b2:49:c9:45:18:d2:be:5d:8b:68:37:d7:8e:f4:
33:e8:86:40:a1:51:5e:f7:66:05:56:3c:9c:79:5e:18:c4:b7:
26:37:15:32:b6:46:d3:d2:88:16:34:b0:df:bb:35:fc:ea:a7:
23:34:cf:8e:d2:3f:90:64:64:d1:d0:a1:c2:45:71:6a:5c:de:
7c:1f:56:6c:76:10:fd:78:50:dc:ec:41:6e:81:be:c8:e0:aa:
c1:10:37:7b:32:f5:27:48:2c:4c:f6:a4:19:8a:06:85:83:3f:
57:42:3c:b5:be:3f:8e:8e:3f:a0:72:40:7c:27:32:03:69:d5:
c6:82:dc:fe:83:22:7a:23:4a:d1:70:0b:a3:a3:1c:a7:9f:01:
7e:49:e2:e6:fd:a7:72:fe:ab:0f:6c:ac:40:6d:f3:53:c2:59:
24:84:9b:31:21:39:79:f5:5c:fa:9c:84:c1:0b:16:f4:29:1d:
54:fe:33:f3:cc:0a:7e:7e:f1:91:22:7e:f1:e1:43:95:ad:76:
da:0f:8e:5b:dd:f1:55:31:75:72:99:0f:39:56:72:2a:9a:49:
88:30:b9:cc:23:62:6a:60:b0:5f:f1:8e:e0:4c:04:6c:f0:2f:
ab:d2:7f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:59 2025 by rpki-client