Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/fm5O_GZeSkWhRQ7NSwAX3E3msrs.roa
File: fm5O_GZeSkWhRQ7NSwAX3E3msrs.roa (raw, json)
Hash identifier: 9meN0aJyEgdZ7ggy5wzbBUmYHs6+du0nQPo3StcZzG0=
Subject key identifier: 7E:6E:4E:FC:66:5E:4A:45:A1:45:0E:CD:4B:00:17:DC:4D:E6:B2:BB
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 0183D3EBE7789C117D7E0EBA7A8BCF5A957E
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/fm5O_GZeSkWhRQ7NSwAX3E3msrs.roa
Signing time: Fri 14 Oct 2022 00:36:36 +0000
ROA not before: Fri 14 Oct 2022 00:36:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47316
IP address blocks: 2a12:c6c3::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d3:eb:e7:78:9c:11:7d:7e:0e:ba:7a:8b:cf:5a:95:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Oct 14 00:36:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e6e4efc665e4a45a1450ecd4b0017dc4de6b2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:a2:fd:a9:ba:ff:8e:17:6c:f6:d2:33:38:
ac:ea:b1:f3:e6:58:ea:29:3a:16:4d:ea:69:f2:e8:
92:39:00:a6:43:59:22:e3:36:be:06:b8:cf:2e:f8:
ba:6e:89:e9:26:ad:4e:c6:d9:0b:94:f7:e5:fe:6a:
39:3c:62:66:95:e7:21:2a:5b:2d:37:d1:76:6b:3a:
83:e8:9f:1a:f6:1f:ec:5e:62:e7:26:73:c2:62:91:
ff:06:df:4d:73:a7:37:34:86:f1:81:21:b9:c2:a3:
3c:47:37:4f:49:27:7e:18:63:b8:9e:50:94:2f:91:
97:04:22:df:6d:c3:8b:c7:16:7f:36:41:36:ed:f4:
1b:0a:2c:00:50:5a:c5:88:d9:fc:c0:4c:5b:85:43:
9b:78:f1:a6:97:b2:b4:88:e0:3e:90:a8:4a:0e:3f:
05:f5:fb:b6:75:d1:12:86:5c:6c:be:93:1b:31:40:
80:0a:25:48:10:9d:d4:e0:e4:fb:42:e7:14:2f:e9:
3c:68:45:bc:2f:06:32:7f:d3:f1:0e:0b:36:cf:15:
d6:94:2d:1f:f3:2a:b3:58:39:c5:c1:ca:80:d3:72:
95:21:8b:29:58:bb:42:a3:41:7a:f3:b6:a8:36:e6:
07:f2:92:2f:ec:18:28:fe:cb:38:aa:db:61:81:c8:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6E:4E:FC:66:5E:4A:45:A1:45:0E:CD:4B:00:17:DC:4D:E6:B2:BB
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/fm5O_GZeSkWhRQ7NSwAX3E3msrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c6c3::/32
Signature Algorithm: sha256WithRSAEncryption
71:29:dc:53:87:26:a1:5b:dc:77:d0:8c:c9:80:fe:5b:1d:20:
eb:e1:ab:50:8a:53:6b:ff:77:86:5a:6b:5c:a2:34:21:84:11:
ac:8b:04:9b:b3:13:8b:d2:bb:75:7f:dd:aa:b8:e5:a3:9e:19:
c6:8b:76:bf:43:7a:ac:02:22:12:6e:6d:8f:87:b6:36:e2:a8:
af:ba:41:5b:96:6f:a3:1f:28:50:02:66:43:e3:ec:80:67:a1:
09:4a:55:cf:cd:3d:ed:aa:e5:59:c4:82:e0:11:95:f7:77:84:
c6:0c:0a:26:ec:75:96:8b:c7:12:76:0f:d7:1c:6d:28:34:0b:
e5:55:c2:ba:53:ca:59:02:e5:45:dd:61:1b:22:35:84:48:ef:
3d:cc:c9:c2:ba:c3:98:07:3e:e9:1b:2c:68:12:cf:0a:46:9d:
1d:da:84:05:be:32:0f:1e:ad:01:ec:8b:b7:cd:eb:ef:e8:5d:
00:0c:d8:88:d5:f9:4b:89:12:3e:21:22:75:23:d2:54:eb:ab:
63:30:86:eb:f9:66:c9:2c:c1:e5:30:b9:ff:e8:82:fa:bf:a6:
2c:02:b5:98:f2:08:24:e4:71:74:6e:91:a5:d6:cd:68:88:b0:
c0:98:0f:78:3d:d4:db:dc:84:69:5b:23:d1:06:72:07:33:35:
03:60:78:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:04:02 2025 by rpki-client