Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/5oP-oMXIVMJYU1I19c9Wivvo5-g.roa
File: 5oP-oMXIVMJYU1I19c9Wivvo5-g.roa (raw, json)
Hash identifier: 6pNM0KLJX2VD04m5lImgT9xfq1Oj2iRpWEaaViL7Gl0=
Subject key identifier: E6:83:FE:A0:C5:C8:54:C2:58:53:52:35:F5:CF:56:8A:FB:E8:E7:E8
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 01856C6F07FD5189F61B663A1335D01FDAE8
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/5oP-oMXIVMJYU1I19c9Wivvo5-g.roa
Signing time: Sun 01 Jan 2023 08:24:53 +0000
ROA not before: Sun 01 Jan 2023 08:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142419
IP address blocks: 2a0e:46c4:107::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:07:fd:51:89:f6:1b:66:3a:13:35:d0:1f:da:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 08:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e683fea0c5c854c258535235f5cf568afbe8e7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:c0:70:91:49:4e:41:20:70:4f:f3:4c:56:
ca:46:45:2c:be:48:be:dd:78:3c:40:a7:9e:f0:97:
ae:62:25:aa:09:95:87:c4:cd:44:5d:5f:2d:95:36:
2c:30:a9:8e:39:dd:2a:09:00:ff:4e:9a:99:c4:d0:
1d:95:cd:bc:d2:10:87:6c:32:45:c5:2c:fb:8e:c6:
c8:5d:27:88:e1:81:69:d5:c8:3d:6b:df:77:ab:d6:
d4:e6:f8:ac:3f:62:54:85:ed:e9:f2:94:9c:9a:d5:
a0:b0:02:ba:91:86:a3:1a:ba:55:1a:55:f9:a0:72:
9d:c2:f9:d1:1e:d1:79:1e:c0:da:81:38:31:ad:1c:
40:14:b2:ba:04:5b:96:4f:4a:8d:fc:41:5a:23:b7:
a5:80:a7:44:c4:8a:a7:19:4b:0f:eb:49:29:24:37:
55:43:34:91:18:4c:ad:44:3a:61:a1:74:09:42:4c:
f2:d2:59:cb:21:d5:e1:9f:d6:4a:da:4d:a3:08:fd:
11:7c:d5:2b:23:b9:fd:95:2a:d1:cf:28:a9:e5:38:
98:f4:b8:4a:35:19:12:a0:16:08:2e:86:d6:57:c9:
5c:03:64:2e:a0:a3:9f:bf:c6:33:a9:06:f9:20:fe:
88:02:3d:be:e4:18:8a:69:83:3d:5a:1b:c8:9d:dc:
44:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:83:FE:A0:C5:C8:54:C2:58:53:52:35:F5:CF:56:8A:FB:E8:E7:E8
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/5oP-oMXIVMJYU1I19c9Wivvo5-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:107::/48
Signature Algorithm: sha256WithRSAEncryption
84:88:40:ec:7c:5f:4e:e1:d2:cc:59:7b:3d:d8:82:62:c9:1a:
f9:89:7a:27:af:46:bd:c1:d2:c9:ab:87:27:21:15:6d:b0:28:
f7:5c:da:de:b6:9c:f2:92:6c:17:58:1a:c1:c8:1e:93:e8:1e:
dc:9d:da:e3:9f:01:14:11:09:68:1f:16:4f:e7:c5:c5:5a:43:
02:97:0b:44:22:af:ed:10:2c:fd:59:0f:52:90:ba:6d:b2:54:
af:7f:32:93:59:19:0b:8c:c7:70:86:ff:27:8d:2f:c8:10:01:
c3:1a:af:fb:4e:8e:29:90:ce:bf:b8:5b:38:6a:8d:5e:5d:67:
1d:87:bd:ef:37:e4:15:4a:aa:2c:86:7b:ee:1f:35:81:07:9e:
de:6f:01:23:3e:70:36:21:ad:7f:5a:af:56:95:75:64:5c:02:
e9:4f:1a:62:36:97:d2:6c:5c:93:9b:8b:52:4b:78:a1:23:7b:
aa:f0:8e:76:1a:a3:0c:b2:4a:cb:bf:2a:a0:89:a7:81:ed:47:
11:ea:3d:56:12:42:ff:49:1d:63:a8:af:ae:55:c2:b7:5a:84:
ad:5f:12:6d:f6:ee:91:6f:a9:23:8a:dd:76:5f:7f:00:59:12:
18:51:ac:19:bc:fa:c8:02:4b:c7:40:02:3f:5e:74:ae:44:c1:
e1:33:ba:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:06 2025 by rpki-client