Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/3yBwm1onPF5Kt9HWXQyClL03u2g.roa
File: 3yBwm1onPF5Kt9HWXQyClL03u2g.roa (raw, json)
Hash identifier: 4bLf1aSEcWY1kwpmZLVbf4mIfVPz+G19j8fshC/r9gI=
Subject key identifier: DF:20:70:9B:5A:27:3C:5E:4A:B7:D1:D6:5D:0C:82:94:BD:37:BB:68
Certificate issuer: /CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Certificate serial: 01856FF94CA9D7A9C9D1B4CE53BAB326049B
Authority key identifier: 53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/3yBwm1onPF5Kt9HWXQyClL03u2g.roa
Signing time: Mon 02 Jan 2023 00:54:47 +0000
ROA not before: Mon 02 Jan 2023 00:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16375
IP address blocks: 2001:67c:2568::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:4c:a9:d7:a9:c9:d1:b4:ce:53:ba:b3:26:04:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Validity
Not Before: Jan 2 00:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df20709b5a273c5e4ab7d1d65d0c8294bd37bb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:03:4b:c3:90:03:d9:e4:4c:d7:d9:28:15:a4:
0f:84:c0:26:8d:31:d0:00:20:7d:8c:f9:03:65:50:
4d:60:06:38:6a:04:e4:43:fa:70:27:c8:c1:1b:a6:
e9:10:43:3e:7c:e3:b7:ab:5b:d0:c1:90:c2:fd:39:
65:e4:8c:a8:46:58:73:5c:37:33:04:1d:93:03:a1:
ef:0a:4c:50:11:b3:91:2f:d6:07:c8:2e:d5:7b:57:
0b:c6:81:5a:a3:a4:35:97:2f:3b:1d:fb:ed:17:82:
30:86:e2:da:8a:79:16:42:ac:36:ff:5d:b5:49:1a:
6a:9e:6b:18:e0:f1:6d:b2:fa:85:91:43:89:81:77:
8d:ea:20:49:5a:e1:a2:96:fc:0e:77:75:78:16:a1:
d8:ff:c3:75:49:fb:b9:5e:ca:fb:95:6a:ff:28:01:
4a:78:fc:ec:27:c0:02:e2:9e:cd:37:b1:f7:26:57:
0e:d4:e2:6c:d0:9f:1d:8f:26:df:f4:f1:8a:cd:dc:
20:7f:ce:e3:2e:70:da:49:0c:ec:48:c4:84:55:df:
a2:03:3a:11:ab:96:0a:fd:cc:d8:04:c8:ca:48:cd:
08:65:04:03:2b:31:b7:96:84:30:0a:4e:4a:72:bc:
06:ec:c6:e9:c7:86:3f:31:3a:ba:b3:4b:07:e5:26:
8f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:20:70:9B:5A:27:3C:5E:4A:B7:D1:D6:5D:0C:82:94:BD:37:BB:68
X509v3 Authority Key Identifier:
keyid:53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/3yBwm1onPF5Kt9HWXQyClL03u2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2568::/48
Signature Algorithm: sha256WithRSAEncryption
3e:c5:9d:6f:d9:63:dd:b3:16:c3:72:d3:6a:6f:1c:5d:12:b5:
ce:e1:0a:7b:7a:d2:8b:9e:91:23:e0:97:dd:1d:1f:de:cf:65:
aa:85:3c:cc:6f:08:a3:51:3e:d0:3f:21:9f:2d:81:61:5e:aa:
29:6c:f7:6d:b4:e2:70:f1:1f:68:76:6a:ed:4a:9a:8f:07:4d:
47:f0:1f:e2:64:9a:17:b0:c0:3c:3f:cf:4a:5d:dc:0e:6e:ef:
fc:3c:18:fa:55:16:f6:e6:df:73:d5:b6:f0:b0:d1:1f:78:79:
55:23:76:3d:92:c0:51:24:89:27:bc:72:8a:dc:dd:69:a5:02:
7c:0d:3d:ce:96:81:9c:32:e6:b0:f7:31:a1:28:bd:a1:f0:0f:
48:b1:9e:66:f1:ec:e8:17:b9:ee:c2:89:3a:6c:5e:b8:da:15:
21:10:8c:00:18:21:72:69:03:c4:8c:a2:95:7e:4f:e2:09:65:
72:32:28:87:ff:54:58:dd:17:c1:0c:e3:b2:b2:13:99:30:8a:
96:a8:a1:6d:d7:90:ed:cd:20:85:37:05:ff:d9:8b:50:14:1d:
c3:53:3e:ed:f6:ed:9f:40:ae:82:37:68:c8:49:c7:59:84:73:
b3:64:83:bc:b8:37:da:86:26:7f:f2:23:91:1f:2a:f9:05:c0:
d9:d2:77:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:43 2025 by rpki-client