Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/H4FjswIlWgr1Ss5CU6C08Xxc2z4.roa
File: H4FjswIlWgr1Ss5CU6C08Xxc2z4.roa (raw, json)
Hash identifier: Hxc8lwzu5puitmGCsA/cEOHnIaohuAZpLGyx3DyE6rQ=
Subject key identifier: 1F:81:63:B3:02:25:5A:0A:F5:4A:CE:42:53:A0:B4:F1:7C:5C:DB:3E
Certificate issuer: /CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Certificate serial: 01856D8AB9405B3F6D6B2E5ADE662B6E31F8
Authority key identifier: 73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/H4FjswIlWgr1Ss5CU6C08Xxc2z4.roa
Signing time: Sun 01 Jan 2023 13:34:46 +0000
ROA not before: Sun 01 Jan 2023 13:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15703
IP address blocks: 2a0b:b600:3000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:b9:40:5b:3f:6d:6b:2e:5a:de:66:2b:6e:31:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Validity
Not Before: Jan 1 13:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f8163b302255a0af54ace4253a0b4f17c5cdb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d2:e3:4c:2f:08:90:91:d6:a8:1e:88:ea:3a:
d8:ce:16:dc:ab:46:7b:fd:3e:93:f2:04:37:f5:09:
3f:c0:89:d3:44:e4:cb:0f:b9:cc:3e:95:98:dd:b5:
da:22:e2:90:ac:b9:f1:c4:38:3c:18:70:a5:f6:9d:
42:72:4a:a2:72:cc:86:e9:a6:9a:2b:00:66:e1:d3:
91:fc:73:91:ed:7c:65:cd:1c:05:12:8c:53:b3:b8:
bb:41:02:55:e7:bd:5e:c2:21:0f:0a:4a:ce:a4:34:
51:08:5a:85:ef:20:fb:fd:99:0f:7d:95:0d:72:85:
09:a9:6a:aa:5a:73:70:98:0e:24:b2:77:bc:7d:d0:
a7:f2:8f:e5:f0:c7:89:d0:9f:98:86:68:85:6b:4c:
01:e5:c6:ea:26:ed:0d:81:9a:ac:60:b8:bb:d3:f0:
93:ca:be:79:d8:ea:28:11:52:13:75:a1:21:96:1b:
66:b3:fa:b7:25:55:08:d5:a8:1d:40:1d:22:46:ec:
8f:d9:91:bd:05:bc:cf:12:9e:4b:ea:b8:5c:59:f6:
03:ef:bc:0e:46:74:31:0d:9c:e1:f0:3e:4d:33:73:
84:26:42:6c:fe:2e:03:e1:c3:72:f4:85:a2:fe:34:
7f:50:16:c4:d7:26:b6:f1:bd:9e:c5:55:55:7e:44:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:81:63:B3:02:25:5A:0A:F5:4A:CE:42:53:A0:B4:F1:7C:5C:DB:3E
X509v3 Authority Key Identifier:
keyid:73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/H4FjswIlWgr1Ss5CU6C08Xxc2z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b600:3000::/48
Signature Algorithm: sha256WithRSAEncryption
38:f2:d3:ab:ea:a2:9f:29:6f:9b:0b:e2:60:40:69:f8:d4:14:
de:e3:d2:5c:cd:82:66:42:88:46:97:32:a3:b3:44:f4:59:1b:
66:02:ee:8a:ea:57:0a:7f:cd:c8:7a:15:2d:5d:19:a0:39:0a:
55:ea:fb:a4:da:12:8f:08:11:49:9d:57:50:2f:68:2c:53:63:
46:94:a8:5b:28:db:9a:24:45:3a:1e:79:cf:9e:36:bb:6b:50:
da:f1:a2:96:64:82:5d:08:b1:b7:1a:72:10:e3:e9:ab:00:d7:
cc:bc:9c:a3:68:a6:0c:a1:77:15:2c:d4:0e:6f:91:d2:4d:aa:
c6:2f:72:f9:e1:97:ce:3b:c3:d8:1c:91:04:a5:08:52:76:1b:
21:8f:e0:d2:1e:0e:68:a5:5d:c7:8c:f4:f5:7d:bf:4f:af:f8:
ce:fc:65:56:43:4e:7e:09:6d:fb:99:b1:55:64:09:b0:2a:51:
b2:82:1e:de:59:d9:1d:71:9f:1b:f9:4b:15:94:e4:f7:df:a1:
13:1f:e3:88:56:f9:53:9a:df:62:7f:05:61:4f:e8:71:e6:50:
6b:70:7f:be:db:5e:4f:5c:1b:b0:4f:f5:a3:06:a1:c8:4c:9a:
67:7f:37:01:91:75:8f:da:45:d3:ce:1c:c8:fb:a2:3d:0d:4e:
11:3d:1e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:47 2025 by rpki-client