Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/_jygR2NvClakdMAzRp0cFPIoXi8.roa
File: _jygR2NvClakdMAzRp0cFPIoXi8.roa (raw, json)
Hash identifier: 9Rqd460wGbLcIx6k0hlMGB+alpmuPI4FcPfUB7DFZYM=
Subject key identifier: FE:3C:A0:47:63:6F:0A:56:A4:74:C0:33:46:9D:1C:14:F2:28:5E:2F
Certificate issuer: /CN=782325321a302f0bac131bee11c9aea696e510ba
Certificate serial: 0181D750C7E9C26412889A1C5F17ADB5CEC5
Authority key identifier: 78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/_jygR2NvClakdMAzRp0cFPIoXi8.roa
Signing time: Thu 07 Jul 2022 06:20:04 +0000
ROA not before: Thu 07 Jul 2022 06:20:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8867
IP address blocks: 2001:678:a3c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:50:c7:e9:c2:64:12:88:9a:1c:5f:17:ad:b5:ce:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782325321a302f0bac131bee11c9aea696e510ba
Validity
Not Before: Jul 7 06:20:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe3ca047636f0a56a474c033469d1c14f2285e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:b5:67:0a:28:3f:bf:67:f9:56:96:3d:4f:
15:b0:82:b4:61:7a:d9:f1:1d:3c:77:49:a2:e2:c4:
6b:8f:52:5d:94:f0:c8:99:e4:95:0e:56:47:d2:fc:
f9:88:a4:ea:ea:9a:ff:e7:c1:9d:fc:15:85:9a:a6:
4c:71:9d:df:78:0f:b3:d6:c3:6a:f7:43:7a:ef:b8:
d6:28:c4:b1:5d:5f:95:90:55:e7:a6:d3:18:f1:60:
15:c7:df:9c:9a:6a:18:08:41:ff:9b:f4:43:6b:ec:
92:1e:78:66:c3:bc:28:e2:38:c6:f4:aa:13:a4:56:
f9:e6:1e:1d:27:64:31:c7:80:f2:5b:ce:7b:1e:62:
33:9f:78:fa:8e:78:58:69:cb:ec:50:4b:e8:75:31:
a1:7e:15:b8:3e:1c:3e:93:d0:e7:fb:90:6d:92:f5:
9f:c9:f4:1d:b8:f8:85:89:19:7b:37:a5:e6:84:fc:
df:b8:2a:5c:f5:89:f1:74:72:93:59:b2:2c:93:5d:
da:36:e7:4c:0c:c5:5a:86:e6:b7:3f:b9:47:0c:19:
89:06:ad:da:9b:78:0a:2e:f5:06:7d:ca:18:68:ab:
97:d5:32:b9:d1:bf:0f:d2:27:b1:4f:d1:3d:19:5f:
27:a4:9f:ab:6f:5f:a7:33:cb:b6:a6:cf:4f:17:c2:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3C:A0:47:63:6F:0A:56:A4:74:C0:33:46:9D:1C:14:F2:28:5E:2F
X509v3 Authority Key Identifier:
keyid:78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/_jygR2NvClakdMAzRp0cFPIoXi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a3c::/48
Signature Algorithm: sha256WithRSAEncryption
1a:58:c2:1a:67:60:f6:cc:9d:6e:c6:2b:0d:46:35:00:80:dc:
68:d7:e1:5d:4d:c3:91:ac:f9:91:56:13:3f:82:50:24:f3:71:
1e:04:37:fe:dd:2f:af:af:f6:fa:c2:97:0b:53:c6:a7:95:92:
af:eb:f7:f0:76:df:0c:ed:31:df:ca:c4:0a:06:56:cd:31:01:
5b:29:45:cc:b3:2c:ac:32:17:9b:87:2b:eb:1b:db:bc:59:f2:
dc:08:32:5e:f4:db:9b:27:3b:9f:5c:1d:f9:b6:34:3b:87:ec:
ab:df:77:de:b9:a0:b0:ca:99:08:fe:a6:a3:d2:c4:6d:4f:98:
27:d3:b1:8d:91:63:bd:db:52:96:93:3e:c1:db:e0:16:bc:2b:
76:2f:40:f1:4c:96:77:34:a8:b0:a7:91:27:3e:0b:9b:92:30:
e2:17:c4:9c:9e:43:24:cc:24:c0:f5:73:85:7c:dd:fc:e7:01:
c6:a4:64:58:f5:fc:17:4a:0c:52:c8:f6:a2:8e:aa:df:00:1b:
ce:4a:5b:4a:ee:eb:ad:73:30:1f:05:bf:5a:67:bf:a2:b5:48:
60:74:bd:43:bb:e8:85:32:03:eb:f9:b4:bb:7a:72:6d:25:8f:
86:64:f8:be:14:20:25:39:34:ec:07:24:04:c8:97:c9:5c:25:
98:cc:ff:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:10 2025 by rpki-client