Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/fqEmaudzoJhO06lr9HlcdsY8taE.roa
File: fqEmaudzoJhO06lr9HlcdsY8taE.roa (raw, json)
Hash identifier: v7/Ga++SIIRh9RacZGNSq0SxCCY6Yy0C/EcRns32KWI=
Subject key identifier: 7E:A1:26:6A:E7:73:A0:98:4E:D3:A9:6B:F4:79:5C:76:C6:3C:B5:A1
Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial: 018AB84755F9335C4B180183BB1E5E1CA6A3
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/fqEmaudzoJhO06lr9HlcdsY8taE.roa
Signing time: Thu 21 Sep 2023 15:06:37 +0000
ROA not before: Thu 21 Sep 2023 15:06:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47504
IP address blocks: 2a13:cc87:ff00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b8:47:55:f9:33:5c:4b:18:01:83:bb:1e:5e:1c:a6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Validity
Not Before: Sep 21 15:06:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ea1266ae773a0984ed3a96bf4795c76c63cb5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a6:57:ec:69:38:e8:a1:06:8c:95:f2:71:76:
f5:72:04:e5:71:ea:59:a6:40:33:52:94:71:4b:45:
c4:27:08:ae:79:c5:b0:50:e2:bb:3b:81:d6:b3:40:
02:36:6d:06:32:d7:c3:31:fb:30:9c:b2:65:59:26:
23:fd:05:be:ef:38:ef:62:96:f7:9e:de:8a:00:cb:
28:ea:87:94:0a:96:a2:60:6e:ea:b7:c4:7c:06:7f:
7f:8a:b5:e8:d9:7b:64:de:09:ec:1f:50:aa:bb:42:
3f:7c:0a:24:a0:76:7d:cb:a4:16:a7:b9:18:68:12:
f1:a9:1f:3d:5c:ea:10:f7:1a:df:13:12:b8:80:5c:
37:9a:55:4f:c7:23:9f:be:5d:ce:1f:b1:87:82:dc:
cb:1a:f0:36:3d:d8:7d:de:37:96:1b:0a:44:8c:fc:
0e:da:2b:67:22:d3:6c:50:73:f3:7d:ec:be:c8:79:
c1:b3:9d:8b:b6:1b:e6:95:a4:5e:68:fc:13:7c:e5:
c4:ce:7a:81:31:a7:98:ea:a4:8e:56:71:d9:10:23:
5d:0a:54:72:42:6b:2e:f1:b2:c4:65:21:c6:f0:c1:
53:41:c2:8e:a1:8a:b7:02:3d:8c:a3:7c:1a:d3:99:
19:f4:ef:95:86:ea:e0:bc:e3:f1:85:7e:6a:c8:6d:
d6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A1:26:6A:E7:73:A0:98:4E:D3:A9:6B:F4:79:5C:76:C6:3C:B5:A1
X509v3 Authority Key Identifier:
keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/fqEmaudzoJhO06lr9HlcdsY8taE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cc87:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
52:12:23:d0:d2:be:11:73:fa:73:e2:fa:81:c9:fa:93:c9:ad:
80:34:b1:b9:74:48:24:75:c6:00:9b:7f:26:06:ff:56:15:46:
d9:15:f4:1c:46:b6:b7:41:99:03:75:dd:26:e7:a3:b2:69:d6:
a1:b0:31:76:eb:be:c3:78:d4:7c:33:67:10:5b:e7:a3:28:ce:
1c:29:9e:81:25:2b:a9:38:4a:80:08:19:e8:66:79:d3:f7:30:
7e:64:e8:a8:3b:77:97:8c:54:6a:0a:88:67:17:f4:9e:a2:d1:
9f:9e:ae:a2:49:fb:62:f6:25:a0:cc:10:bf:8e:b0:ac:ba:ba:
17:96:e0:7c:da:3f:51:bc:d6:c3:00:dc:61:1e:63:d3:bf:10:
59:c5:fb:ba:44:61:e7:3d:70:29:fd:d4:49:40:1d:70:2a:bb:
12:15:0b:6f:b5:3f:64:11:15:c0:0f:29:9d:c3:0e:37:da:81:
33:84:a5:91:7c:d1:e6:9f:2f:d8:54:9d:9e:78:70:1b:c2:ac:
31:d4:3f:ef:66:89:0f:81:19:88:a7:53:1d:f4:9d:8a:35:84:
25:a1:b0:36:aa:7f:8d:73:4b:26:13:1a:39:a0:4e:ea:a0:7d:
eb:cd:ba:f1:32:7f:4a:c1:5d:d6:8e:d2:3a:af:a8:de:ed:ce:
07:50:7b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:07:03 2025 by rpki-client