Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/9N4uHQk7WCXL1T6Nz0NEgCHDJTg.roa
File: 9N4uHQk7WCXL1T6Nz0NEgCHDJTg.roa (raw, json)
Hash identifier: xGCtEVFQauGY2uPMNL7e1BgD4FTLIMC6R1ziXbrq1bs=
Subject key identifier: F4:DE:2E:1D:09:3B:58:25:CB:D5:3E:8D:CF:43:44:80:21:C3:25:38
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 0185558B78977B85D36FB1CC3FC870412706
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/9N4uHQk7WCXL1T6Nz0NEgCHDJTg.roa
Signing time: Tue 27 Dec 2022 21:44:41 +0000
ROA not before: Tue 27 Dec 2022 21:44:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399976
IP address blocks: 2a12:c6c0::/29 maxlen: 64
2a12:c6c4::/32 maxlen: 48
2a12:c6c7::/32 maxlen: 48
2a12:c6c6::/32 maxlen: 48
2a12:c6c5::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:55:8b:78:97:7b:85:d3:6f:b1:cc:3f:c8:70:41:27:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Dec 27 21:44:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4de2e1d093b5825cbd53e8dcf43448021c32538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:dc:f5:85:4d:e0:60:06:25:5b:b4:08:3c:
27:7e:d4:4e:8c:57:e6:74:06:b2:8b:a3:75:6f:08:
32:51:b4:e6:03:c5:ce:7c:75:b1:f5:8e:10:e6:38:
68:c1:ac:48:66:9c:a0:f3:9d:db:1b:b1:d6:a2:93:
9f:98:eb:bb:61:24:6d:92:97:a2:df:97:f1:fd:ac:
2d:e6:df:48:9a:d2:28:70:e0:71:33:9e:fb:34:8c:
0d:60:28:8c:02:9f:4f:27:33:c4:25:7f:77:e3:67:
c7:d6:3f:af:52:98:48:bf:0d:90:45:64:02:8d:93:
e9:05:69:45:e4:07:30:c4:a9:26:98:ad:0b:b4:d1:
4b:ce:5c:9b:93:15:95:87:4a:41:3f:93:a7:cf:58:
bb:d8:fc:33:cd:3d:01:60:4a:7f:89:8e:98:a0:25:
1a:d1:1c:7e:f5:4c:3a:40:9b:5f:4e:d9:00:53:a2:
d1:b8:a1:6d:f7:6e:ef:a2:68:f5:b6:0c:58:ec:b7:
14:97:21:a0:36:64:7b:32:a8:9e:d1:a4:51:cb:9c:
8b:2c:14:a1:34:1c:8e:1d:35:00:a2:4b:96:c6:ff:
c5:29:1e:ba:b2:eb:2e:bb:6b:96:58:01:e2:e1:0f:
ce:0c:14:1f:20:58:35:d6:ca:c5:a5:75:15:66:1a:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DE:2E:1D:09:3B:58:25:CB:D5:3E:8D:CF:43:44:80:21:C3:25:38
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/9N4uHQk7WCXL1T6Nz0NEgCHDJTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c6c0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:90:73:04:cc:83:9b:70:c6:38:a1:b0:41:61:75:9d:c2:0e:
e7:2c:85:27:60:80:04:2a:60:b7:d9:cb:68:cf:a7:2f:6f:73:
28:ee:b3:73:91:89:f4:3d:a1:43:ad:bd:e3:26:c3:43:31:5a:
04:48:bc:1b:55:7c:7d:28:4f:57:00:01:db:63:46:f1:58:24:
91:8d:28:05:5a:4c:e2:7e:75:8c:5e:a0:f4:e3:f6:51:1b:28:
cb:15:e9:04:c2:55:1f:eb:f6:48:24:7c:15:10:34:77:da:7d:
65:93:99:9c:b5:e2:3c:5f:ee:14:af:58:f7:77:37:30:df:bd:
a0:0f:b9:d8:c6:ec:17:30:f6:39:f1:86:ee:4d:11:ce:ed:4a:
1f:ae:cd:cf:58:93:7e:fd:0f:77:ac:40:33:43:51:eb:1b:05:
45:70:5d:c9:b4:07:1c:b9:25:54:c8:b1:fc:9b:ad:4e:02:7b:
d0:59:bc:11:e7:da:99:04:ae:8a:4b:d4:1e:eb:86:68:8a:d4:
34:3a:ad:8e:cb:55:11:e1:ce:85:46:c3:0d:d2:ec:81:4d:f1:
80:9d:85:f1:f3:ec:98:2c:f6:1f:ad:46:d0:43:52:5a:84:d0:
a3:b9:52:34:55:df:6b:49:c1:9b:13:b3:90:78:a0:9e:42:29:
c8:08:51:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:25 2025 by rpki-client