Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/Dn6IlAOxqb5eiIIvI3rdUIy28jQ.roa
File: Dn6IlAOxqb5eiIIvI3rdUIy28jQ.roa (raw, json)
Hash identifier: qXT7ZQB929pCUDH0G2KRxr2t7WG5eTCtZAwxkMv8xXc=
Subject key identifier: 0E:7E:88:94:03:B1:A9:BE:5E:88:82:2F:23:7A:DD:50:8C:B6:F2:34
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 01856D0A9E51FA902BFFA47D80FC5D6E59E6
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/Dn6IlAOxqb5eiIIvI3rdUIy28jQ.roa
Signing time: Sun 01 Jan 2023 11:14:50 +0000
ROA not before: Sun 01 Jan 2023 11:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9095
IP address blocks: 2001:a98:8000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:9e:51:fa:90:2b:ff:a4:7d:80:fc:5d:6e:59:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 11:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e7e889403b1a9be5e88822f237add508cb6f234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:f9:38:0b:6e:b6:97:1d:15:49:94:58:6c:
de:15:9a:b2:32:a7:d4:1c:29:a1:36:ed:82:40:41:
75:d8:11:92:98:ef:d3:3d:32:96:2e:33:a6:a4:fb:
fc:23:99:9f:16:19:5e:03:a3:be:ab:96:f7:18:25:
4c:83:e6:21:fd:7a:7d:01:e8:37:1b:55:8c:67:68:
45:0d:76:a5:a0:63:37:ab:ec:22:95:b3:85:0a:ba:
18:a8:be:2d:45:a8:c1:4a:00:78:4a:17:63:bf:df:
21:eb:97:d6:a9:fa:30:6f:c8:f8:63:11:9d:9f:93:
7b:1a:3c:54:09:12:10:04:2e:c8:51:b7:13:d1:87:
f9:d7:ee:03:b2:57:3c:32:f1:3e:93:16:15:d6:9a:
0b:45:5c:7e:01:8d:f9:ce:90:42:5f:ff:c1:89:b3:
e9:92:b5:4c:c9:b7:22:96:4a:4e:0f:f6:57:92:60:
b8:5d:0e:79:ee:a4:8b:db:b8:2a:1f:44:b7:cd:04:
5d:13:75:2a:1d:cf:5a:93:8e:0c:61:19:08:76:d8:
f4:54:0a:54:4e:12:d1:2c:d4:d2:bc:a0:86:b3:3f:
dd:65:c7:c0:14:b6:e2:63:3c:7f:79:ab:98:21:78:
4a:32:d7:1f:b9:59:78:6d:9c:91:d9:ce:a4:db:cc:
1a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7E:88:94:03:B1:A9:BE:5E:88:82:2F:23:7A:DD:50:8C:B6:F2:34
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/Dn6IlAOxqb5eiIIvI3rdUIy28jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:a98:8000::/48
Signature Algorithm: sha256WithRSAEncryption
4d:92:1c:96:96:f7:ea:bb:fa:13:bb:67:4e:07:05:d7:9f:34:
ad:9f:88:a1:45:71:8e:ff:8c:af:35:a3:2e:6b:4b:7b:96:7f:
27:33:34:9a:92:36:e9:a7:e6:2f:5f:8a:9c:80:3c:14:34:9b:
bf:4a:2b:cc:9d:f2:18:c8:50:5a:2f:c5:05:5b:a0:f4:96:01:
84:2f:42:a4:2b:62:d8:29:7d:57:b5:16:9a:0c:6f:3a:38:d4:
a5:d0:61:c9:e8:49:e2:73:91:84:26:02:4b:76:a7:37:2d:2c:
16:a7:35:09:a8:20:95:23:75:8b:3f:24:d1:61:2d:23:50:cf:
b2:06:05:80:37:27:07:27:0b:ce:b3:36:3f:fc:e6:f8:7c:3b:
d0:c6:36:ae:73:a2:a5:92:30:9e:8b:c7:33:2c:72:8e:e6:cc:
25:90:c2:d5:03:fc:b9:82:e0:6f:9c:8f:3d:5d:04:cf:4e:24:
8b:c8:f9:a1:15:1b:61:f5:f2:2a:5f:d4:16:ce:ff:f3:bf:08:
55:6c:ba:99:04:a1:8e:27:84:28:77:cb:13:3f:43:bd:69:7f:
ef:58:38:59:60:60:47:5f:26:ac:98:be:a5:d5:37:cf:08:4b:
a6:9c:44:4c:1d:29:8f:96:29:af:86:8b:1f:46:17:14:0b:c2:
ba:3d:61:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:31 2025 by rpki-client