Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/yEAqyqt5uxQqetN_2DUKIK0GUiA.roa
File: yEAqyqt5uxQqetN_2DUKIK0GUiA.roa (raw, json)
Hash identifier: 65WDyLW/boLlkioF1nEkAkUM7GSvNW1lypkmYiuCM9M=
Subject key identifier: C8:40:2A:CA:AB:79:BB:14:2A:7A:D3:7F:D8:35:0A:20:AD:06:52:20
Certificate issuer: /CN=bcf5463680d14b64586b1d5b465663bcb577e693
Certificate serial: 13D30692
Authority key identifier: BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/yEAqyqt5uxQqetN_2DUKIK0GUiA.roa
Signing time: Sat 01 Jan 2022 15:02:25 +0000
ROA not before: Sat 01 Jan 2022 15:02:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198463
IP address blocks: 2001:67c:2d04::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332596882 (0x13d30692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf5463680d14b64586b1d5b465663bcb577e693
Validity
Not Before: Jan 1 15:02:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8402acaab79bb142a7ad37fd8350a20ad065220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:1f:5b:84:a1:5e:ee:cf:be:e6:85:2e:c2:
ba:aa:7d:6c:01:db:77:e7:36:3f:bf:ba:9d:15:45:
5f:bc:a7:67:4c:1d:8d:ea:3f:92:3a:1f:31:91:92:
9f:9c:5d:7f:d1:ce:8c:6d:cd:d7:b2:61:30:2d:ea:
74:5b:b2:5e:6a:90:c7:42:8e:93:be:93:96:9d:2d:
1f:ef:68:6d:93:18:49:ae:bc:a9:bb:18:60:90:8c:
5c:2f:95:b4:21:b2:0c:42:6f:2a:55:9c:87:b3:75:
7b:c8:87:5e:4c:3d:9a:fd:56:82:d5:25:34:bf:d3:
e8:f4:65:f1:9f:42:fd:88:4c:82:1f:e0:a5:61:bf:
bc:04:1c:db:b5:f3:76:38:5d:00:32:e2:9e:83:8e:
98:97:f5:28:b5:43:f9:ef:b9:8c:72:6f:69:ab:4f:
fb:91:5b:bc:1e:3d:30:b9:27:ef:da:c3:0b:aa:d8:
be:6e:bd:98:9c:fc:88:e7:b4:bd:25:7c:22:63:c1:
4d:a6:d7:67:23:a8:13:78:7a:c2:5d:b6:93:3c:5b:
2b:a1:f6:16:78:f5:4e:37:b5:87:22:6f:51:78:60:
93:a1:7c:af:8d:76:4d:0f:79:99:3b:0a:97:7c:d6:
9d:6b:37:52:27:47:1c:e0:97:38:56:4f:ec:66:4f:
f2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:40:2A:CA:AB:79:BB:14:2A:7A:D3:7F:D8:35:0A:20:AD:06:52:20
X509v3 Authority Key Identifier:
keyid:BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/yEAqyqt5uxQqetN_2DUKIK0GUiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2d04::/48
Signature Algorithm: sha256WithRSAEncryption
4d:74:fe:32:4b:84:78:46:8b:60:7a:d3:ee:2b:08:2f:76:a7:
af:bc:2c:b2:bf:c5:f2:eb:9a:fc:35:5b:9d:46:a8:5d:26:f3:
52:7d:9a:f3:6e:fb:52:2f:4d:78:af:76:f5:61:08:4b:9c:3d:
46:5b:9e:5b:31:df:85:ed:6c:28:a8:1f:1b:95:65:30:ed:d4:
50:37:3d:dd:f8:84:f0:72:5c:a3:1e:54:90:03:97:68:b5:26:
86:bc:34:ee:3b:6e:05:a7:3f:70:95:a3:9d:4c:42:c9:bb:a5:
aa:a0:c8:a5:ca:56:2e:2b:eb:f6:6a:5e:b6:72:25:6b:54:d1:
72:b4:17:56:87:ac:d1:bf:34:6e:84:f6:21:15:91:c1:57:8d:
95:94:9a:c9:4e:1c:41:d1:04:cb:a6:03:23:df:0d:fe:5f:49:
c7:3e:72:f4:22:80:84:46:4d:1f:5f:a8:b1:19:86:d9:7d:5d:
53:89:c1:e6:a4:17:28:6f:a8:ca:b1:52:27:ec:35:05:81:8f:
4a:9a:30:2a:ea:9e:6b:b1:c1:68:83:c2:8a:08:3a:84:72:e3:
d4:ab:f3:37:6b:10:4b:30:c9:a4:bc:d8:dd:16:85:a7:6a:67:
b2:08:52:d4:34:b3:a4:20:7d:78:b1:4c:8a:5b:70:da:58:52:
1d:c5:64:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:53 2025 by rpki-client