Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/q3zM0aRQUX2Zf7DI7NQ4ht1SkyM.roa
File: q3zM0aRQUX2Zf7DI7NQ4ht1SkyM.roa (raw, json)
Hash identifier: 2D8Jx/AGngVzlCkUud+dCKhUYg/yBmjM712mU6R/cI4=
Subject key identifier: AB:7C:CC:D1:A4:50:51:7D:99:7F:B0:C8:EC:D4:38:86:DD:52:93:23
Certificate issuer: /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial: 0187CEFD54619E3B670552C2FFD59E4EA8E7
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/q3zM0aRQUX2Zf7DI7NQ4ht1SkyM.roa
Signing time: Sat 29 Apr 2023 21:48:41 +0000
ROA not before: Sat 29 Apr 2023 21:48:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212077
IP address blocks: 2a13:7b40:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ce:fd:54:61:9e:3b:67:05:52:c2:ff:d5:9e:4e:a8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Validity
Not Before: Apr 29 21:48:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab7cccd1a450517d997fb0c8ecd43886dd529323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:16:bc:24:30:41:ef:66:bb:52:de:67:6b:
aa:e6:b2:f5:3b:0e:f0:d1:c1:03:93:f2:8c:ed:99:
dd:9b:c8:cc:29:1d:81:d7:9e:a7:a3:fe:83:49:e3:
b8:b6:f6:0a:f1:22:4c:31:51:48:86:f9:02:2b:bb:
c9:3f:79:e1:02:b5:ec:22:00:8a:41:2f:ad:60:3c:
9f:2b:96:81:73:28:d1:9d:ad:a7:22:0c:88:17:1a:
1e:58:1d:a9:64:1e:64:ad:e9:de:57:c3:27:00:96:
0a:16:d2:4f:bb:6f:86:9a:05:84:58:ac:58:8f:bc:
e9:a7:c3:67:ac:12:e0:4c:6c:12:5c:e8:79:06:b4:
52:89:29:51:3e:82:e3:27:df:1a:7a:45:b0:0a:d4:
50:50:fd:d1:c2:61:a9:2c:e0:11:c8:c0:f5:49:2d:
c9:73:26:bd:7b:0c:b2:8d:0f:a8:35:b3:91:20:d3:
70:f0:1f:11:45:86:13:45:3f:8f:9f:ee:9e:9b:12:
fc:72:67:07:de:ff:59:2a:ef:76:37:d1:32:10:55:
93:b5:a8:b8:39:27:a8:48:ea:16:2d:19:d0:73:6d:
4e:8c:d9:8e:25:9b:0c:20:31:71:58:a4:a2:c3:2c:
9a:3a:1a:5f:41:1d:6d:5c:5a:c6:7a:2b:73:33:2c:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7C:CC:D1:A4:50:51:7D:99:7F:B0:C8:EC:D4:38:86:DD:52:93:23
X509v3 Authority Key Identifier:
keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/q3zM0aRQUX2Zf7DI7NQ4ht1SkyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7b40:1::/48
Signature Algorithm: sha256WithRSAEncryption
3b:7a:68:c2:54:d2:c7:74:f5:ad:ff:5b:9e:a3:c0:c2:ee:33:
8f:4d:b0:c8:4d:c8:6c:58:40:e3:b8:59:1e:1f:86:17:4d:e8:
50:08:71:71:23:ff:68:dd:cf:91:f9:ae:08:22:d8:6d:04:c9:
d7:88:5e:7d:5e:5f:86:f6:68:c4:89:86:c1:c3:fe:d2:a3:77:
dc:f6:98:fa:1c:78:43:43:c6:43:d1:a7:5c:c4:bf:3e:c2:14:
88:60:3b:1e:7d:8e:90:86:42:e2:b5:e7:87:1c:f1:38:e6:f0:
35:00:d2:df:09:c1:d6:a5:89:ab:1e:5a:75:dc:10:07:a6:c1:
be:09:96:1d:8d:d6:8e:80:fc:88:83:40:f7:8d:19:4a:64:ef:
d6:83:a2:5f:17:4c:87:c5:65:22:5f:df:5d:23:f0:93:34:20:
2d:29:ee:99:70:e0:df:81:47:2b:76:55:d5:ab:c4:e8:4c:be:
b1:22:37:12:15:77:eb:ec:c6:a2:f0:1a:b6:69:c2:38:60:8d:
a2:c9:4d:7b:d5:7d:39:05:e6:cd:b9:c8:b9:81:7c:98:ef:d2:
71:3e:44:9f:84:fa:85:f7:a0:3d:e1:a5:fe:ad:ff:87:c3:c5:
e6:f5:63:72:07:81:82:5f:4d:7b:c9:d8:fd:80:a5:38:53:be:
77:58:a7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:15:03 2025 by rpki-client