Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/6Fp7gMt-hRyBZnR657ALWHrSYFM.roa
File: 6Fp7gMt-hRyBZnR657ALWHrSYFM.roa (raw, json)
Hash identifier: nIMngM0dQTs3BdI0ks9sslQUOzUGeZlHLOm+DwoRnQc=
Subject key identifier: E8:5A:7B:80:CB:7E:85:1C:81:66:74:7A:E7:B0:0B:58:7A:D2:60:53
Certificate issuer: /CN=4516eb0ee37a71076461ec6cba8b925ac5e28a04
Certificate serial: 01869769991B8C4F6D885AB89E4CCA96E5EA
Authority key identifier: 45:16:EB:0E:E3:7A:71:07:64:61:EC:6C:BA:8B:92:5A:C5:E2:8A:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRbrDuN6cQdkYexsuouSWsXiigQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/6Fp7gMt-hRyBZnR657ALWHrSYFM.roa
Signing time: Tue 28 Feb 2023 09:45:25 +0000
ROA not before: Tue 28 Feb 2023 09:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51574
IP address blocks: 2a13:5a07:fe::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:69:99:1b:8c:4f:6d:88:5a:b8:9e:4c:ca:96:e5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516eb0ee37a71076461ec6cba8b925ac5e28a04
Validity
Not Before: Feb 28 09:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e85a7b80cb7e851c8166747ae7b00b587ad26053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:11:77:ef:a3:13:41:1c:a1:e1:a6:0c:2d:
cc:9e:2a:63:77:fe:b8:bb:6c:d8:9f:6f:7b:93:2d:
f5:c7:bc:be:96:f3:45:8c:2d:d7:64:4e:ae:8f:ab:
ae:fa:1b:ff:89:61:1d:e2:1a:e3:95:eb:7b:4c:f9:
c6:61:c7:2c:7c:0a:92:95:32:5e:dc:a9:4d:73:42:
d6:d6:39:ea:2d:d1:ff:d2:79:a8:00:26:fe:6c:05:
f4:a8:a6:4d:82:1e:5e:a3:f0:91:87:9f:e8:8c:f6:
62:fa:f1:f5:b1:4b:15:84:ca:d8:61:3e:ce:1d:54:
a7:ef:41:2b:c7:cc:ff:66:43:80:d1:3a:c6:46:5c:
e0:b3:be:91:d6:4e:5b:66:f2:23:0a:f6:d9:db:ad:
6b:39:f1:8c:68:b3:14:4b:07:d4:44:92:53:0f:d8:
4e:fe:5c:0c:36:d7:a8:e9:51:b7:a4:a1:b6:38:f0:
55:89:7f:39:7c:71:ec:2a:c0:ee:7a:19:a5:3b:90:
bc:cf:44:73:17:ba:b7:ac:6e:5c:e3:b9:a6:80:a5:
94:05:62:98:78:14:d6:18:97:ce:ae:73:e6:a5:2c:
c6:ab:9e:22:0b:06:62:aa:4d:ac:dc:a5:00:82:e3:
c9:2a:e8:5c:07:5f:a1:08:45:64:60:ba:59:8b:f2:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5A:7B:80:CB:7E:85:1C:81:66:74:7A:E7:B0:0B:58:7A:D2:60:53
X509v3 Authority Key Identifier:
keyid:45:16:EB:0E:E3:7A:71:07:64:61:EC:6C:BA:8B:92:5A:C5:E2:8A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRbrDuN6cQdkYexsuouSWsXiigQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/6Fp7gMt-hRyBZnR657ALWHrSYFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2923ab-3ff8-4aa9-9220-5e292aa544af/1/RRbrDuN6cQdkYexsuouSWsXiigQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5a07:fe::/48
Signature Algorithm: sha256WithRSAEncryption
6f:0e:62:a1:cb:b5:c9:d8:06:19:16:fe:61:21:9f:22:4b:24:
e5:c0:ac:dd:ee:16:bd:ab:a4:9c:5e:5d:db:f5:2b:36:bd:4f:
bb:59:56:f0:17:ab:2b:a8:2c:c5:2a:e0:51:e9:08:77:ab:e9:
86:9f:bf:60:9e:c3:e3:ab:99:4a:8f:9f:55:09:32:72:60:c3:
b6:2d:fc:e3:42:3d:f9:f9:15:8e:a3:e0:89:60:56:11:30:4b:
85:78:a5:c0:29:bb:53:1c:b3:e1:fe:2a:d3:a8:21:e2:e2:c1:
00:2a:30:5c:b5:bf:eb:a0:2b:ed:5e:77:f4:a9:52:52:ce:a8:
80:5d:3b:b2:14:c6:1a:fa:cb:8d:2d:3b:9a:85:8a:7e:dd:6c:
7d:f5:c1:7a:c4:25:81:68:c9:ad:a6:45:2a:f4:bd:75:ee:2b:
90:bc:4f:83:d7:56:26:3c:6d:87:4f:3e:be:ed:5c:96:ac:07:
e0:cb:30:e6:fd:0e:e9:4e:01:bc:a3:27:02:42:a5:94:d0:89:
d1:de:d0:ba:6a:70:f4:f0:b1:f4:e5:d1:11:2f:66:97:fb:9f:
08:01:cd:30:e8:83:bf:52:75:68:b9:30:d5:64:a8:f7:67:cd:
f7:8c:7b:5a:86:3a:01:9f:0c:67:ab:17:d3:58:13:2f:b9:f6:
33:99:c7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:23 2025 by rpki-client