Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/r9uYhBmZRP4VusnwOIYbwA2yJnY.roa
File: r9uYhBmZRP4VusnwOIYbwA2yJnY.roa (raw, json)
Hash identifier: kjjYLm9L6q8FN20hWnis2m01ETQDw2Qr/b7+TCF3Ns0=
Subject key identifier: AF:DB:98:84:19:99:44:FE:15:BA:C9:F0:38:86:1B:C0:0D:B2:26:76
Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8
Certificate serial: 018836684BA76092E8A79EA89A1D754CE209
Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/r9uYhBmZRP4VusnwOIYbwA2yJnY.roa
Signing time: Fri 19 May 2023 23:46:24 +0000
ROA not before: Fri 19 May 2023 23:46:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49775
IP address blocks: 2a0c:7d80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:36:68:4b:a7:60:92:e8:a7:9e:a8:9a:1d:75:4c:e2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8
Validity
Not Before: May 19 23:46:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afdb9884199944fe15bac9f038861bc00db22676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:7c:78:b1:92:ba:b7:fa:e0:f2:6e:ac:e8:
30:22:64:d1:f2:5e:2f:25:69:b8:b5:be:04:1c:1c:
0a:00:d5:7e:37:32:3a:f8:cd:b8:75:ab:18:2a:7a:
11:e8:12:98:72:e9:d9:3b:bd:15:b2:ac:89:2f:09:
dd:89:e4:e9:67:37:be:0b:15:55:f9:69:ac:db:34:
26:b1:f0:4e:1f:b5:1a:fa:ca:6c:3c:37:18:2f:0b:
e5:65:a5:91:20:da:32:ba:c4:4b:68:3c:96:01:f9:
86:cc:5b:88:d7:bc:c1:b7:23:b8:31:ab:ab:51:e2:
d0:12:4d:f5:23:aa:f8:c6:43:3c:80:60:33:f7:26:
32:97:34:49:ed:69:9d:3a:70:42:25:be:fc:25:02:
e6:54:de:b6:49:04:eb:07:15:ec:ab:f2:14:47:39:
ab:2c:6b:be:ff:57:01:cd:ce:b2:99:1d:d7:1f:85:
da:39:9e:6e:bc:a0:5c:c9:39:95:71:6b:29:a5:51:
e0:4a:21:38:86:39:41:d5:3a:1a:fa:b2:12:b3:08:
99:8a:55:83:ba:8f:84:c1:5e:77:90:cc:ba:e7:66:
95:a3:29:09:c5:01:f8:14:32:2c:07:57:f0:c2:3b:
ae:3b:1d:53:d2:42:ba:71:da:2d:c5:4d:10:ae:b7:
a2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DB:98:84:19:99:44:FE:15:BA:C9:F0:38:86:1B:C0:0D:B2:26:76
X509v3 Authority Key Identifier:
keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/r9uYhBmZRP4VusnwOIYbwA2yJnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
22:ed:f7:a8:dc:39:69:25:23:b4:d6:3a:e9:a8:5e:e4:9f:23:
88:9e:6c:30:79:c0:4d:1c:f6:c1:0e:95:ca:a7:b7:10:9b:7f:
f6:13:e2:fd:64:11:d5:45:f0:ad:50:8d:0d:9d:e7:c0:ad:b1:
f1:fb:69:b3:16:88:66:8f:cd:2a:f6:95:3c:1e:e7:01:f0:c5:
74:25:d2:e0:1d:e1:c2:f0:1c:ef:57:47:a5:cf:53:e6:c1:0c:
26:cc:3a:15:66:8b:8c:65:c0:2f:a4:3a:55:69:17:ce:c6:a5:
73:53:23:e4:3e:8f:38:12:78:57:8f:15:80:9c:93:b6:3f:56:
52:f4:04:24:ab:f8:b3:6b:fe:ba:64:0c:62:d9:a1:8c:f1:a5:
7d:d5:f1:37:f4:cf:4c:d0:bf:ff:49:cb:51:2c:bb:9c:89:4a:
c1:45:ce:c0:04:0c:1c:1f:56:12:a6:4e:13:d4:64:f0:07:d3:
60:10:50:5f:7f:3d:40:b4:50:2a:b2:c5:64:85:88:3c:0d:e8:
46:88:11:48:21:a3:63:07:63:1c:95:40:8a:8e:67:ab:f0:90:
12:64:c2:60:7b:06:a8:26:3f:6a:58:24:0b:98:4a:07:22:cf:
b7:32:6c:78:85:2f:76:34:c2:6c:0e:3f:2d:bc:fb:f4:db:7a:
96:3e:0e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:56 2025 by rpki-client