Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/JS0LtdDkSZX5PnenyAGCSdy3Cjo.roa
File: JS0LtdDkSZX5PnenyAGCSdy3Cjo.roa (raw, json)
Hash identifier: IA/CMkAI4ofW0rDdc8hvJ2R1IBK7qqZENa1K4DApgfs=
Subject key identifier: 25:2D:0B:B5:D0:E4:49:95:F9:3E:77:A7:C8:01:82:49:DC:B7:0A:3A
Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial: 018AA9139F68D6D7A303485758E1D4D08F69
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/JS0LtdDkSZX5PnenyAGCSdy3Cjo.roa
Signing time: Mon 18 Sep 2023 16:15:50 +0000
ROA not before: Mon 18 Sep 2023 16:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216291
IP address blocks: 2a13:cc87:fc00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a9:13:9f:68:d6:d7:a3:03:48:57:58:e1:d4:d0:8f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Validity
Not Before: Sep 18 16:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=252d0bb5d0e44995f93e77a7c8018249dcb70a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:72:34:07:57:8e:28:9a:93:22:a6:81:78:
ad:3e:5b:75:10:96:04:ca:d2:9d:de:7f:4c:a3:cb:
e4:b2:ff:ae:32:5d:53:25:40:6c:e2:9a:94:95:90:
f7:18:39:9f:43:fb:60:48:36:5c:be:27:ab:3d:33:
d0:da:e8:80:d7:b8:20:94:79:cd:c5:07:51:bc:4d:
25:0e:69:08:93:ff:68:12:7e:67:c9:f8:13:bc:98:
2c:7f:f9:25:b5:85:ba:a9:e3:cd:0f:2a:f6:a7:09:
9a:b5:32:0a:ec:8c:2a:f6:61:b9:00:56:49:bf:dc:
5f:6a:4b:a3:73:eb:a4:9b:ed:df:d5:97:78:c9:05:
64:f4:df:6c:f6:4e:41:3c:df:08:d7:85:7d:39:61:
ea:d8:c5:20:59:0c:37:7b:52:22:46:18:5a:c5:4e:
77:d9:6c:6b:21:91:ef:2e:2c:6f:09:0b:b8:1c:bd:
41:85:e3:0a:0c:83:36:08:9d:de:0f:1a:b4:85:05:
63:85:67:e3:3d:ea:03:59:19:11:aa:22:b3:c5:60:
43:72:83:54:41:d8:46:ef:86:63:52:74:05:51:48:
a4:d2:d2:f9:1a:28:70:1e:36:a5:6b:40:45:d1:09:
f9:91:de:c6:c7:d0:35:8c:30:7e:95:18:f9:6f:1d:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2D:0B:B5:D0:E4:49:95:F9:3E:77:A7:C8:01:82:49:DC:B7:0A:3A
X509v3 Authority Key Identifier:
keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/JS0LtdDkSZX5PnenyAGCSdy3Cjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cc87:fc00::/48
Signature Algorithm: sha256WithRSAEncryption
9e:0f:93:76:7a:71:f1:bc:32:f8:75:98:58:01:8a:a4:48:63:
6c:02:a5:ba:b9:be:41:16:4e:bf:9e:02:ea:a3:5d:8a:8d:87:
c7:d0:a1:f0:5b:70:e6:5f:24:33:f9:52:4b:af:8a:fe:1d:8f:
99:10:f3:11:59:bc:34:3e:06:53:2a:d4:68:23:e0:0f:82:34:
78:d6:82:50:df:63:3f:35:08:6b:f1:c7:0c:53:c1:c9:fe:48:
fd:35:23:ff:6c:25:0d:12:70:af:56:7d:c4:0d:0a:77:5a:3e:
0f:d3:23:65:a8:e8:c6:2b:60:da:24:77:ac:76:c7:7e:57:a2:
af:ef:4d:cc:37:2f:ed:79:52:80:10:cb:29:c0:fa:72:c0:f1:
d1:24:47:d7:9d:71:27:fe:7b:df:5d:b5:04:7a:9f:cd:0e:22:
59:fe:e1:d5:b7:1e:a3:62:a2:b2:4c:3a:b1:04:bc:18:7a:6e:
19:f9:84:ec:c3:72:e5:b8:8f:f2:16:a8:c8:6a:f0:d9:ce:29:
5a:56:87:a8:93:30:27:db:16:62:ac:f8:03:b4:a0:c9:81:f5:
9c:78:d9:fc:eb:40:67:7b:3c:72:78:71:fd:d4:6b:9d:8a:26:
8b:1b:28:e9:06:be:5f:08:cc:99:64:1d:17:93:c1:a4:5b:fc:
2d:08:cf:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:55:27 2025 by rpki-client