Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/KeU1nGzhvife5QMUKuQVkZxmoIc.roa
File: KeU1nGzhvife5QMUKuQVkZxmoIc.roa (raw, json)
Hash identifier: lbmlLuv8jgMvNOBgYEjNyw93hWi1tGDS9v6yUa3s4P0=
Subject key identifier: 29:E5:35:9C:6C:E1:BE:27:DE:E5:03:14:2A:E4:15:91:9C:66:A0:87
Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial: 018B458EC56F06B4F12323CC3ECC4F6A3037
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/KeU1nGzhvife5QMUKuQVkZxmoIc.roa
Signing time: Thu 19 Oct 2023 01:31:06 +0000
ROA not before: Thu 19 Oct 2023 01:31:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47504
IP address blocks: 2a13:cc87:ff00::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:45:8e:c5:6f:06:b4:f1:23:23:cc:3e:cc:4f:6a:30:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Validity
Not Before: Oct 19 01:31:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29e5359c6ce1be27dee503142ae415919c66a087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:1d:8c:4d:ad:94:3f:a5:b0:a4:d3:b1:50:
6c:af:24:7a:f6:52:51:9e:6e:01:e2:d4:a4:ce:f8:
88:60:63:2b:71:6c:9d:da:be:3f:9b:7a:75:01:ae:
8e:18:18:c0:64:df:9c:49:fc:3c:05:08:b7:ab:35:
83:b8:cb:db:1d:8f:73:ee:08:26:38:41:13:0c:c5:
1b:67:d9:d0:45:bf:3a:1c:99:90:7f:ba:d4:02:89:
dd:bc:99:3a:8e:9d:00:34:04:88:ff:8a:c8:d1:21:
95:76:58:4e:5c:60:44:90:b2:34:6b:53:44:d0:d3:
bc:2e:b0:71:23:a9:36:21:4e:04:cf:36:9a:06:04:
48:d4:53:a2:d6:b8:31:2b:f0:b2:9a:21:9a:d0:38:
3f:1c:a7:31:ba:41:59:30:71:a6:35:89:f8:8a:11:
b9:8f:2b:25:81:28:63:2d:35:e7:77:c5:bc:a8:d1:
05:5e:db:1d:07:01:f7:c9:ca:32:22:21:30:cc:b5:
52:91:78:51:ed:35:a6:4b:7d:88:3c:ce:f9:8f:59:
71:75:bd:9e:de:5d:78:28:14:da:7f:7f:2c:f3:20:
48:36:2c:b5:5f:e4:9a:e9:e6:76:3b:da:af:60:4b:
90:a9:fc:c5:1d:fa:54:9c:1c:98:f5:47:c3:d3:fd:
f0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E5:35:9C:6C:E1:BE:27:DE:E5:03:14:2A:E4:15:91:9C:66:A0:87
X509v3 Authority Key Identifier:
keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/KeU1nGzhvife5QMUKuQVkZxmoIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cc87:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
df:0e:7d:5b:f5:1b:b5:7b:43:75:0b:08:d7:3d:27:ff:59:58:
64:1e:6d:e6:09:95:f5:c5:c9:e1:b9:74:fb:d5:9c:64:93:7e:
9e:37:a9:39:fa:f4:42:b6:a8:94:54:47:da:19:84:f5:55:ca:
7b:5c:0d:72:f5:55:03:ca:41:90:ce:f6:37:db:1b:b5:0e:52:
76:b0:b0:f2:7f:d9:d4:ab:3a:92:47:3b:6a:c6:41:ab:91:b6:
a4:b9:8c:f6:15:16:cf:7a:60:10:9f:16:78:7d:07:e9:f9:9b:
83:67:05:e4:d1:93:4f:60:2a:4f:5d:48:38:e4:f3:91:fb:fa:
24:6f:d5:28:c5:6b:89:1e:d8:2b:75:41:1e:4f:4e:54:5a:7d:
3b:dc:dd:29:77:36:6b:1c:05:09:3c:86:be:1e:15:b9:ec:13:
ff:5e:4c:45:d8:33:85:e8:89:55:64:4f:11:b7:e7:3c:23:3b:
87:d7:cf:31:f8:6f:ee:99:a4:44:1d:9d:c7:e6:5f:4e:f1:02:
46:74:84:70:b2:3a:29:d3:0d:3c:32:ac:9f:6a:1b:af:bf:80:
36:37:08:e2:63:98:e5:a1:be:bc:2c:5b:52:77:16:be:f4:1d:
6b:44:d1:75:60:ca:8e:9c:02:18:86:f1:e0:66:74:88:5e:ef:
ed:f9:b8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:05:59 2025 by rpki-client