Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/mVh0qtT_8sahrC8UYXneh0LMG0E.roa
File: mVh0qtT_8sahrC8UYXneh0LMG0E.roa (raw, json)
Hash identifier: ouJGYFqsiqIS/Do/QkxqmBh7kGdJR/QX0lEX14oo/Ts=
Subject key identifier: 99:58:74:AA:D4:FF:F2:C6:A1:AC:2F:14:61:79:DE:87:42:CC:1B:41
Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial: 0185728C7C3BC3DE395FAEDB53C1A623CBF4
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/mVh0qtT_8sahrC8UYXneh0LMG0E.roa
Signing time: Mon 02 Jan 2023 12:54:47 +0000
ROA not before: Mon 02 Jan 2023 12:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34087
IP address blocks: 2001:678:464::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:7c:3b:c3:de:39:5f:ae:db:53:c1:a6:23:cb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Validity
Not Before: Jan 2 12:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=995874aad4fff2c6a1ac2f146179de8742cc1b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c5:7a:78:01:68:f8:95:e5:fa:4c:35:6e:db:
8c:20:a8:d1:d8:a9:81:3c:0a:f1:86:d8:ae:7f:b1:
6f:8f:5a:6c:9c:32:0f:2f:23:fb:95:0c:70:b3:db:
b0:fd:d3:a7:d8:67:9e:17:ed:5c:1a:9b:a5:60:40:
b1:95:11:85:df:c4:76:30:a7:2d:3b:19:7a:08:a0:
63:ce:dc:0c:a0:df:9e:73:ee:52:2d:25:4e:24:ae:
cf:0e:af:d9:e8:0e:ca:a9:f7:f1:69:39:eb:c3:df:
99:1c:26:d9:d2:5c:b6:f4:b5:ec:be:96:b0:31:29:
da:62:a6:2b:af:45:8b:5d:7e:28:48:ab:d4:87:b3:
5b:ef:ea:b5:5e:43:89:89:0b:4c:d1:d5:12:00:22:
4c:8b:23:1e:04:10:5e:98:24:69:9d:f8:69:97:25:
5c:e3:f3:c3:eb:30:7c:35:09:35:77:1a:3b:63:c6:
a0:f0:f3:3f:59:04:e1:82:5d:e8:6b:32:e1:55:a5:
57:0f:ff:cc:05:24:78:9e:47:38:05:1e:9c:84:2d:
14:93:b6:ec:05:5b:c4:c4:7c:f1:06:b2:6f:41:2f:
40:d1:cb:94:8e:68:90:8d:1d:b4:e0:b9:d6:df:3e:
e2:b3:d5:41:27:71:2e:19:be:c2:35:98:e2:a2:3c:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:58:74:AA:D4:FF:F2:C6:A1:AC:2F:14:61:79:DE:87:42:CC:1B:41
X509v3 Authority Key Identifier:
keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/mVh0qtT_8sahrC8UYXneh0LMG0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:464::/48
Signature Algorithm: sha256WithRSAEncryption
15:53:5b:4a:39:24:76:5f:0a:ec:3d:29:e9:b5:82:f5:d8:d1:
19:02:ae:d1:1d:48:0c:e2:8e:25:44:a6:f3:69:bf:12:6e:e2:
eb:2f:7c:98:58:de:cf:94:30:f4:55:19:74:ba:57:91:33:8d:
20:1f:90:d0:6b:94:fa:6a:4e:e8:13:45:c0:86:d6:0d:73:e2:
85:64:be:93:cf:5a:47:f3:93:0e:19:3a:71:35:65:2e:a8:62:
5a:6e:cc:85:c6:07:fe:e6:5b:f4:95:6d:75:c8:cf:34:c0:e2:
12:7a:b2:4c:c7:6a:b8:e3:ef:46:61:e1:03:33:e6:02:b7:7b:
b1:52:96:86:6b:05:25:c9:9d:5f:33:68:5d:09:58:15:9b:98:
80:a7:7d:6b:7e:88:11:22:53:56:f3:ee:d6:cb:9c:26:74:35:
fe:ee:ad:36:2f:6f:d5:07:ac:d1:77:32:66:32:5a:2d:f9:50:
98:ad:bd:a5:b1:e4:dc:36:a9:64:ab:a9:ab:8b:5b:b2:1a:65:
ad:10:78:65:e8:84:35:f0:7e:0c:4a:30:3f:95:88:e8:8e:26:
55:7e:7a:12:c0:87:43:cc:11:12:14:4c:ee:da:72:7e:69:ea:
90:a4:33:f3:00:4e:46:f4:80:22:12:e6:2d:11:b4:2d:0a:b5:
5d:f9:30:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:44 2025 by rpki-client