Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Sm820VlIECYPCGzsUSa7g3qmID4.roa
File: Sm820VlIECYPCGzsUSa7g3qmID4.roa (raw, json)
Hash identifier: WZ0Qr3QcXfyQ8G2Y7yA+Sp+KhwB9ScA4TrpqZQQ3260=
Subject key identifier: 4A:6F:36:D1:59:48:10:26:0F:08:6C:EC:51:26:BB:83:7A:A6:20:3E
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 01856D418D87CD95D4928A963E16F53EAD70
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Sm820VlIECYPCGzsUSa7g3qmID4.roa
Signing time: Sun 01 Jan 2023 12:14:50 +0000
ROA not before: Sun 01 Jan 2023 12:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51454
IP address blocks: 2a01:190:15f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:8d:87:cd:95:d4:92:8a:96:3e:16:f5:3e:ad:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 12:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a6f36d1594810260f086cec5126bb837aa6203e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:45:db:f3:3e:60:d0:d0:47:6c:7b:f2:95:
33:16:3e:4c:ee:c1:ef:e4:dd:b8:62:3d:05:d0:60:
da:23:ad:ce:8b:be:eb:ac:c6:38:61:21:fa:7a:23:
3b:32:38:41:71:5f:ce:9a:6e:a0:b7:a4:00:8b:8b:
1f:50:b4:22:b1:11:48:3a:e2:3c:3b:d3:2e:92:88:
b2:4b:cb:6e:67:2b:93:3a:1f:73:79:9f:15:cf:95:
77:71:d5:32:22:02:52:7a:af:67:59:34:e8:9b:da:
fa:90:35:49:1d:c3:cc:71:b7:09:a4:c8:18:bf:62:
8c:fe:ea:0c:ac:8a:6d:71:73:d9:c9:58:42:07:3f:
af:66:ae:07:a4:8a:f6:c7:1c:75:9e:93:ae:3e:8a:
f7:9c:3f:ca:ff:fc:55:25:7d:a9:92:d5:87:a0:a2:
55:a0:30:6c:fa:fd:39:49:d7:a2:7b:ff:cf:5d:79:
9a:f8:b5:2c:75:a9:99:f2:4e:6f:2b:bb:01:b9:5c:
58:8f:be:ff:35:e5:26:b2:e9:a1:9d:09:8a:99:3c:
98:a4:97:f9:1b:c1:d0:60:d3:92:51:04:76:63:c7:
e8:fa:32:8d:89:6b:07:60:a4:a3:d0:74:5c:0a:94:
3a:56:f7:f0:1e:f6:64:13:4c:90:ad:14:b6:29:a1:
df:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6F:36:D1:59:48:10:26:0F:08:6C:EC:51:26:BB:83:7A:A6:20:3E
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Sm820VlIECYPCGzsUSa7g3qmID4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:15f::/48
Signature Algorithm: sha256WithRSAEncryption
15:f2:8d:70:65:41:e8:03:a1:db:8c:73:89:e8:fc:65:9e:d5:
be:85:e2:f0:99:bd:24:b7:bd:31:25:c4:d7:5a:a4:65:88:7e:
6f:7c:c0:ed:35:b6:4b:35:72:22:b7:30:a1:59:86:21:a2:14:
ac:68:6b:ec:1d:4f:21:30:ad:e9:c7:05:37:1a:9d:ca:d9:0d:
c5:e1:83:85:a3:7b:2c:a3:fb:c5:b2:af:ac:bc:1a:68:d9:39:
f5:98:6c:b1:32:1d:a7:e3:5c:99:c6:09:5a:6a:20:53:ac:3e:
38:a5:ed:46:b3:8c:be:69:29:09:3c:af:d2:74:bd:cf:3f:c3:
a5:29:23:12:12:72:ed:9c:1d:63:22:38:5f:7a:62:17:e4:ae:
70:d7:1e:04:ea:e9:0f:ed:64:b6:54:6a:f3:d4:6b:0f:05:49:
d3:01:3d:47:d5:9d:f4:67:a8:43:b4:f3:bc:02:dd:3a:50:30:
8e:50:b6:be:ee:4b:77:a1:a7:06:0f:96:17:cd:f3:b3:bc:6e:
a9:7e:d4:10:0c:d6:5c:bf:f6:1a:9f:86:85:0f:0d:bf:8f:ed:
76:fc:3d:09:aa:1f:1c:08:59:9b:4c:6a:39:75:a5:99:79:37:
91:20:ff:e1:29:a7:17:3a:40:4c:3f:db:52:11:2b:a2:f9:33:
57:98:84:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:37 2025 by rpki-client