Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Fa9PT9U7PbWJmQ3TvsgigHYYl6g.roa
File: Fa9PT9U7PbWJmQ3TvsgigHYYl6g.roa (raw, json)
Hash identifier: XshJQUawRUiO5ewVzl7WrgxItzzKUrrIr4/xj0HitVU=
Subject key identifier: 15:AF:4F:4F:D5:3B:3D:B5:89:99:0D:D3:BE:C8:22:80:76:18:97:A8
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018A2B98F7453142B13DD25C1BED15B005D7
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Fa9PT9U7PbWJmQ3TvsgigHYYl6g.roa
Signing time: Fri 25 Aug 2023 07:29:19 +0000
ROA not before: Fri 25 Aug 2023 07:29:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216438
IP address blocks: 2a0f:7803:fee0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2b:98:f7:45:31:42:b1:3d:d2:5c:1b:ed:15:b0:05:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Aug 25 07:29:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15af4f4fd53b3db589990dd3bec82280761897a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:68:a9:2d:86:9c:5b:27:9a:14:71:79:52:5f:
ae:22:42:25:c9:04:81:c8:0b:2f:e6:91:a9:b9:7e:
92:0e:d2:9f:e4:68:52:af:c7:fc:c0:1a:fb:79:e4:
ba:43:82:13:cb:64:1c:02:c5:b5:9d:94:64:bb:30:
49:f0:94:72:44:cc:b5:8e:34:bb:31:09:c6:36:42:
71:fb:60:11:4a:3a:ff:b3:db:6c:02:fb:27:92:c2:
1c:79:bd:32:dd:7a:22:80:99:1f:5e:62:9c:e8:aa:
c5:c7:55:f8:90:bb:2a:ae:de:00:00:ff:dd:2f:37:
cd:35:20:90:a1:2a:bb:ae:a8:d2:5c:7e:56:0a:4b:
9d:41:25:72:31:52:66:10:c5:3f:22:93:b9:20:d6:
d4:b5:3a:ee:21:cd:30:bc:54:54:64:b3:89:4d:73:
24:8a:9b:a2:2b:9c:3c:90:5d:a9:d1:c6:31:59:9b:
fe:ab:de:3b:ac:b2:67:73:05:41:95:cd:40:c8:88:
00:52:3b:b4:cb:46:fa:a4:13:aa:db:64:5e:16:62:
a5:d6:9a:ab:72:a2:74:2d:6b:6e:b8:dc:d1:35:ba:
54:d6:1a:5f:0e:26:f3:6a:2b:2f:4a:93:8c:7e:c3:
ff:ea:03:07:77:e6:21:ff:ee:83:b4:f2:bd:ee:85:
63:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AF:4F:4F:D5:3B:3D:B5:89:99:0D:D3:BE:C8:22:80:76:18:97:A8
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Fa9PT9U7PbWJmQ3TvsgigHYYl6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fee0::/44
Signature Algorithm: sha256WithRSAEncryption
24:ff:28:9b:3c:43:d2:93:2c:65:44:ca:5e:78:55:cb:10:77:
05:9d:9b:73:6f:3f:4b:91:49:3c:d5:d5:5c:31:4d:db:16:aa:
fd:36:fd:b5:dc:02:63:f2:38:01:20:8f:85:7f:af:b0:a1:90:
8d:1f:50:78:e3:e6:67:25:2f:21:61:58:35:46:7f:5e:b4:a1:
28:d2:bc:87:fc:61:6c:02:e2:88:72:64:30:37:50:a1:82:05:
be:ae:e5:47:ba:d8:c2:87:29:24:93:01:9d:d6:2b:ef:d2:5a:
73:2e:72:84:2b:5b:ba:45:68:83:8a:cb:6d:4d:9f:a7:e8:70:
ad:37:57:77:a9:00:0d:a0:a4:51:58:e7:f7:5c:cd:b3:74:92:
8b:b5:87:94:de:8a:33:48:37:1f:02:f5:fc:cf:7a:85:b3:7e:
07:da:f3:09:09:cc:be:2f:7d:39:7d:ed:f5:38:ad:39:fa:f2:
20:d1:22:26:5a:c7:1b:06:f5:71:e3:5c:32:63:4f:fe:cc:cb:
17:81:e4:df:db:99:0a:58:66:7b:dc:38:ff:68:3a:a4:4a:1c:
38:de:4b:19:7b:ac:0a:16:59:7a:47:a4:73:70:fd:99:f2:c9:
20:80:3d:f0:e5:ef:9a:de:30:e9:6a:ef:45:cf:ac:1b:1b:d1:
52:f1:27:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:57 2025 by rpki-client