Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/9_WRJBCIw8TdjntCEIrIpwvfaWs.roa
File: 9_WRJBCIw8TdjntCEIrIpwvfaWs.roa (raw, json)
Hash identifier: GqEC4NccST904ELQNPiOgkb6y9xS/fjHBQ/bO0Tqds4=
Subject key identifier: F7:F5:91:24:10:88:C3:C4:DD:8E:7B:42:10:8A:C8:A7:0B:DF:69:6B
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 0185736855C0EB06970B29F55C6EACFA4F67
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/9_WRJBCIw8TdjntCEIrIpwvfaWs.roa
Signing time: Mon 02 Jan 2023 16:54:55 +0000
ROA not before: Mon 02 Jan 2023 16:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8708
IP address blocks: 2a04:1240::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:55:c0:eb:06:97:0b:29:f5:5c:6e:ac:fa:4f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Jan 2 16:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7f591241088c3c4dd8e7b42108ac8a70bdf696b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:02:c9:f7:0e:1a:e9:40:47:70:a9:3a:7e:
23:5f:73:8e:51:d4:6c:af:84:ce:38:6a:34:25:1e:
79:8d:30:0c:39:0e:80:7e:3d:6d:4e:67:9f:10:60:
ed:98:5e:be:30:bc:c9:aa:39:bb:ad:39:46:d8:9f:
5c:2e:6e:d1:d4:e7:af:69:00:9d:1d:61:be:ad:83:
ef:8c:10:f0:70:cb:a8:b8:bb:cd:a4:08:f1:b8:8c:
59:23:31:99:44:67:ba:63:43:c6:ec:13:27:cd:96:
27:53:97:28:49:69:c3:81:54:74:a1:2a:d5:d0:cc:
b5:d7:31:10:b7:87:f5:1b:7a:21:23:d0:72:3a:60:
52:22:d5:de:91:db:ed:ed:ac:10:41:48:35:7f:8a:
50:3c:14:90:53:9b:93:95:87:e4:24:c9:6e:87:9e:
42:9b:6e:e0:19:b5:cd:d0:19:cc:1f:ee:36:8c:b6:
d1:39:c4:87:a0:d8:b0:a2:92:e6:f8:88:40:05:0c:
d2:c2:08:7d:81:03:90:b8:58:43:da:64:02:6d:af:
13:fb:20:ad:92:5d:39:d8:11:74:20:40:14:ff:d5:
a2:94:c0:d7:d0:5f:09:c4:8f:e9:3f:de:9c:69:96:
95:4d:67:f7:3d:82:9a:f7:54:42:e8:70:78:53:b3:
04:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F5:91:24:10:88:C3:C4:DD:8E:7B:42:10:8A:C8:A7:0B:DF:69:6B
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/9_WRJBCIw8TdjntCEIrIpwvfaWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:1240::/29
Signature Algorithm: sha256WithRSAEncryption
b7:16:57:0c:c1:c0:ea:57:22:f2:1b:3a:d8:35:8c:4d:26:87:
1a:11:9c:83:76:c8:02:70:b0:e4:6f:8a:14:85:80:b5:b8:15:
77:70:2a:b5:f9:d6:93:88:a4:b9:c9:d3:a3:97:ec:ae:2c:e5:
09:c4:5c:b0:6f:94:04:e0:96:5e:1f:58:15:91:40:74:cb:7b:
8b:88:d5:c6:7a:2d:18:74:86:ef:da:80:59:76:d7:b3:b5:26:
cb:f1:64:9b:04:9b:8c:80:4b:2f:cc:7a:a8:77:96:77:ee:2e:
88:57:40:8d:0d:a2:11:95:6a:55:6e:9e:ea:67:6a:7e:22:57:
dd:65:ff:ff:6e:61:17:02:aa:7d:aa:21:6a:96:62:01:83:65:
6b:e9:e5:ad:ba:3b:d7:88:4e:c3:b6:cd:d0:d4:16:4c:6c:2b:
60:71:08:b0:96:f4:de:b7:1d:0b:38:58:8a:62:4f:01:51:6e:
a7:0c:2a:3a:ab:7a:3a:d3:ce:ee:dc:29:c1:64:5d:7b:ad:58:
f1:1f:a3:3d:b6:9c:ac:f2:dc:07:81:32:52:c0:b2:f6:ef:80:
1e:19:49:28:ba:f5:dd:57:49:36:c6:80:58:f8:b3:d7:ed:e5:
00:bf:15:1f:2f:81:bd:68:a3:f2:45:42:b2:d4:ed:9a:fa:32:
86:60:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:55 2025 by rpki-client