Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/Frn9pkz9vm3uvNcU1za-Op-S4UU.roa
File: Frn9pkz9vm3uvNcU1za-Op-S4UU.roa (raw, json)
Hash identifier: H8K7iOtNknvLtkxM8ozsf+fFaf0Ovjk37Sd8AgYMuw0=
Subject key identifier: 16:B9:FD:A6:4C:FD:BE:6D:EE:BC:D7:14:D7:36:BE:3A:9F:92:E1:45
Certificate issuer: /CN=4d946f4df2237491a68dfa407be41fae84bbda66
Certificate serial: 018571F9F18382186830F261CAF8C1A7919F
Authority key identifier: 4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/Frn9pkz9vm3uvNcU1za-Op-S4UU.roa
Signing time: Mon 02 Jan 2023 10:14:43 +0000
ROA not before: Mon 02 Jan 2023 10:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210729
IP address blocks: 2001:67c:1bc8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f9:f1:83:82:18:68:30:f2:61:ca:f8:c1:a7:91:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d946f4df2237491a68dfa407be41fae84bbda66
Validity
Not Before: Jan 2 10:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16b9fda64cfdbe6deebcd714d736be3a9f92e145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:26:4b:b9:4e:3e:0e:fd:fb:27:d4:91:84:d9:
85:59:bf:fb:c3:30:41:38:4d:fa:03:6c:6c:59:fe:
ec:97:7a:e1:32:1b:32:b0:83:07:90:fb:98:17:86:
ca:bf:a6:72:74:02:fc:89:31:41:e0:06:5d:37:80:
7b:45:2b:cd:2b:b0:1e:bf:ec:de:07:bb:85:fc:d8:
a9:08:d0:fc:73:5b:b5:ab:55:1e:95:cd:b3:cf:49:
c9:b3:45:da:ff:8c:e1:57:a1:cd:c4:f2:e3:fc:4f:
94:d9:c1:d9:43:a6:af:3f:30:7b:06:5a:d6:1d:ec:
69:98:22:9d:40:bf:66:fa:af:f2:39:cb:19:8a:c9:
75:56:46:0f:60:9f:0c:19:a1:b4:ae:10:06:ce:2d:
28:12:06:21:6f:42:46:58:07:0d:84:87:a3:0f:92:
15:ee:95:8e:93:8a:80:12:6c:ec:cb:48:90:50:7a:
2b:f2:c1:cd:35:12:91:c8:c9:70:e2:43:44:2c:94:
f1:d4:d7:d4:d2:41:c3:03:b7:5c:a1:7a:89:29:12:
f2:ba:eb:fa:d7:41:eb:4e:60:1e:f5:bf:28:4c:f4:
a3:03:14:1a:26:43:f5:9a:05:77:ba:80:35:9b:f3:
57:fc:aa:90:f5:1e:e1:40:f4:c6:7c:49:08:82:28:
7f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B9:FD:A6:4C:FD:BE:6D:EE:BC:D7:14:D7:36:BE:3A:9F:92:E1:45
X509v3 Authority Key Identifier:
keyid:4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/Frn9pkz9vm3uvNcU1za-Op-S4UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1bc8::/48
Signature Algorithm: sha256WithRSAEncryption
14:0e:d8:28:1e:a6:71:db:4a:ea:7a:7f:8f:98:48:7d:89:ab:
47:f8:82:dc:89:34:2b:44:d3:94:62:b8:fa:43:9a:16:26:16:
04:cb:24:da:71:01:1a:7c:90:79:f2:cb:2c:cb:c9:97:c7:62:
86:d2:38:95:4b:79:90:ec:a2:6f:78:eb:ad:e5:98:03:ad:31:
93:c1:32:b6:cb:73:2e:8f:79:34:93:44:2d:38:81:03:59:50:
73:40:bf:28:36:63:bd:44:b3:f5:93:e1:04:4b:bd:03:59:bb:
8d:8f:34:56:ea:73:f0:ff:76:c5:f4:4e:10:9c:ce:7c:b8:00:
45:0c:2e:76:e7:6e:2a:26:dd:d9:8d:eb:d2:50:87:87:6d:df:
d4:19:9b:8a:c6:a9:77:36:0b:05:f0:67:a3:f9:d0:89:36:b7:
1c:50:b3:9d:20:5e:37:f9:6d:ef:6f:b1:63:f2:c2:e0:53:6b:
06:28:7d:5b:c4:4b:0c:b9:50:29:35:77:a0:be:02:2a:f1:a8:
8a:41:b9:13:c1:a2:fe:8a:3f:02:5e:a4:07:6e:ab:25:fb:f6:
f9:f6:22:0c:2a:9c:14:99:dd:af:a9:e9:ea:a2:f7:f2:9d:ca:
9c:26:ff:64:10:d9:e3:01:90:d5:19:46:c4:d2:97:40:4a:b2:
ef:39:be:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:31 2025 by rpki-client