Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/FVgbbv6lYvbN7vUf04sAyKTHcJs.roa
File: FVgbbv6lYvbN7vUf04sAyKTHcJs.roa (raw, json)
Hash identifier: pvknmZTl4wXcwB4fGZPDypJHcY1wOTD9vrXKwygV7NI=
Subject key identifier: 15:58:1B:6E:FE:A5:62:F6:CD:EE:F5:1F:D3:8B:00:C8:A4:C7:70:9B
Certificate issuer: /CN=8f9ecd7d4ed59f4ce6e344618caedb27d2a358da
Certificate serial: 1181BFEF
Authority key identifier: 8F:9E:CD:7D:4E:D5:9F:4C:E6:E3:44:61:8C:AE:DB:27:D2:A3:58:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j57NfU7Vn0zm40RhjK7bJ9KjWNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/FVgbbv6lYvbN7vUf04sAyKTHcJs.roa
Signing time: Sat 01 Jan 2022 09:59:53 +0000
ROA not before: Sat 01 Jan 2022 09:59:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43074
IP address blocks: 2a02:6580::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293715951 (0x1181bfef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9ecd7d4ed59f4ce6e344618caedb27d2a358da
Validity
Not Before: Jan 1 09:59:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15581b6efea562f6cdeef51fd38b00c8a4c7709b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:97:be:02:b9:2f:2b:c5:32:7a:7a:7b:de:
23:7c:a3:7e:bc:b5:2c:f8:99:ff:3b:23:78:c7:9a:
87:77:e1:1f:4b:a8:4e:dd:2e:a8:7b:69:ab:6c:1b:
9f:6d:9d:7f:4d:a0:c4:d6:ea:b1:14:e8:ca:9a:5b:
40:5c:a3:50:62:9e:c2:38:96:65:56:bf:ef:e9:4f:
9c:f4:d6:8d:5c:ae:d2:9e:53:95:ca:fd:8b:7f:bc:
b2:cf:9a:48:af:4d:41:62:3e:46:05:79:2f:3e:36:
93:0e:3a:96:f0:a6:e4:73:15:96:cf:42:59:e6:14:
81:28:17:77:bb:2e:ea:f5:7e:00:b6:94:c7:07:0c:
57:31:33:86:86:a3:9a:aa:a5:dc:81:bb:88:55:a0:
56:27:c4:c0:0d:f0:97:f7:98:ec:21:51:f1:cc:d2:
f5:cf:ea:6c:d8:21:1f:71:3e:7a:3e:ef:e8:c3:e4:
90:8e:29:b2:f2:9c:c7:6b:dd:c4:c5:21:86:31:87:
52:c8:7d:37:04:68:44:d6:00:f1:d5:f6:13:9f:0b:
13:62:19:38:93:37:d3:4e:e0:3e:0e:32:9b:b5:df:
00:3c:2c:d2:16:70:56:b9:f2:08:4f:f1:fb:5d:42:
8d:fe:7e:93:ff:8c:3c:a2:af:ee:89:75:2d:13:04:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:58:1B:6E:FE:A5:62:F6:CD:EE:F5:1F:D3:8B:00:C8:A4:C7:70:9B
X509v3 Authority Key Identifier:
keyid:8F:9E:CD:7D:4E:D5:9F:4C:E6:E3:44:61:8C:AE:DB:27:D2:A3:58:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j57NfU7Vn0zm40RhjK7bJ9KjWNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/FVgbbv6lYvbN7vUf04sAyKTHcJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/j57NfU7Vn0zm40RhjK7bJ9KjWNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6580::/32
Signature Algorithm: sha256WithRSAEncryption
69:28:fc:af:5c:58:25:f9:d0:6d:9d:d3:c8:f3:94:32:1b:9b:
f5:61:5c:c1:b1:45:db:ad:08:4f:34:24:b2:90:e4:f7:1f:10:
d5:bd:98:e0:9f:b6:33:56:d9:b8:7f:63:89:75:e4:f7:44:04:
67:1d:22:35:9e:29:47:9d:b5:e6:ce:b5:a7:80:2e:a3:55:b6:
19:22:81:00:1a:56:fa:36:24:1e:d1:00:ff:39:05:06:29:2f:
84:5a:74:fd:20:91:f1:19:85:72:a8:ed:a2:60:fd:be:4a:8c:
e5:cf:e5:09:23:b6:ae:00:e9:c3:c7:72:fd:a2:96:15:ad:f5:
74:dd:18:4c:40:af:1a:b6:9a:64:fa:6e:ed:2b:5b:55:8a:13:
2c:54:17:ff:ae:b3:cd:6d:98:4b:02:1c:58:15:a7:f7:31:f3:
f1:d8:41:27:c0:a6:2d:a1:9f:67:c9:1c:9b:14:9c:fc:09:95:
7f:d5:4c:45:73:f7:e3:3b:50:c7:60:4f:19:3a:1c:ff:66:9f:
85:fe:2a:53:fc:c9:b7:56:a4:77:e0:a8:71:d2:38:6b:c9:65:
cb:e8:95:db:8a:4d:bf:be:64:4a:be:32:02:27:29:67:91:bf:
9c:85:7c:d9:73:48:f1:3c:80:f1:ac:1d:92:be:0f:8e:72:e0:
43:31:3d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:55 2025 by rpki-client