Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/6d7G-eYaKdovQNyUX_t4hmAXSr4.roa
File: 6d7G-eYaKdovQNyUX_t4hmAXSr4.roa (raw, json)
Hash identifier: PYqf9I+KlArdssMY2CCn06c0W73ZiBY4TLF2GbQeGkA=
Subject key identifier: E9:DE:C6:F9:E6:1A:29:DA:2F:40:DC:94:5F:FB:78:86:60:17:4A:BE
Certificate issuer: /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Certificate serial: 01851A12270450823876F78554C5A72CC746
Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/6d7G-eYaKdovQNyUX_t4hmAXSr4.roa
Signing time: Fri 16 Dec 2022 08:34:35 +0000
ROA not before: Fri 16 Dec 2022 08:34:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 2001:67c:2ccc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:12:27:04:50:82:38:76:f7:85:54:c5:a7:2c:c7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Validity
Not Before: Dec 16 08:34:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9dec6f9e61a29da2f40dc945ffb788660174abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:c5:af:7b:a6:1c:24:02:9c:1f:d0:50:38:
72:a4:fc:f9:90:8b:29:ad:99:41:56:0a:02:c5:ab:
db:de:48:a0:2d:e1:01:98:b2:9e:c7:fc:21:77:1f:
e1:5a:a7:f7:fa:18:86:21:19:2e:e5:36:c5:16:92:
41:fd:22:09:c1:86:0b:a1:e0:e9:34:3f:b1:45:e7:
cb:fb:e6:d6:23:45:c5:5e:b8:56:f6:ac:ee:76:46:
bf:71:8e:97:14:a9:83:de:0e:8e:4e:3e:a5:17:df:
47:30:3f:0d:e9:1e:f1:2f:a5:5d:48:29:d4:7e:26:
2d:6a:fb:a3:fa:12:32:b9:68:7d:dd:f3:da:cb:ab:
d9:8e:a4:72:cf:32:ea:18:8e:df:c9:b1:78:f8:63:
b5:72:86:e4:e0:b0:fe:08:5e:5c:dc:f3:d1:42:14:
c7:92:cf:e9:6f:a3:44:8f:4d:4a:16:7a:59:43:8e:
05:f9:54:3c:54:1a:99:a4:59:c4:13:eb:72:a1:b4:
36:70:e6:38:9a:67:bd:c0:aa:b3:50:29:16:d5:13:
15:52:85:6c:f0:75:e8:66:93:ca:fe:13:7f:40:5c:
28:91:65:66:62:92:eb:0b:ab:05:77:4a:5e:b4:06:
98:c4:60:ec:ad:42:fa:51:ca:53:b4:49:3e:4f:c8:
59:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DE:C6:F9:E6:1A:29:DA:2F:40:DC:94:5F:FB:78:86:60:17:4A:BE
X509v3 Authority Key Identifier:
keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/6d7G-eYaKdovQNyUX_t4hmAXSr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ccc::/48
Signature Algorithm: sha256WithRSAEncryption
80:7f:ff:93:31:10:21:4f:4a:eb:ee:c7:f2:f8:2c:14:86:2a:
3d:de:64:f7:c2:21:28:91:5d:a9:ab:31:fc:c1:70:93:a9:92:
ec:e6:ee:82:a7:2d:62:3e:3a:cf:1a:e9:75:e7:92:8b:ce:70:
92:8f:bb:c4:75:5e:a7:75:bc:93:59:01:ac:d4:0b:3b:90:dd:
7f:17:8e:ad:ba:87:c0:e1:cf:13:04:af:2f:4b:66:85:cb:b0:
53:0f:fb:60:fe:79:be:92:8c:e8:2a:ac:e2:7a:6f:1a:7f:a3:
68:4e:d6:c9:21:2c:50:03:c3:c7:0f:e6:85:68:58:13:2e:00:
12:da:a3:f6:8a:1b:44:87:50:4f:0c:6c:36:04:16:96:93:53:
c7:22:eb:a6:fb:1d:ae:71:6b:81:fa:3e:aa:0c:92:93:17:29:
5e:1f:9c:47:a5:70:3e:0b:47:60:43:4a:2a:13:33:fe:6a:1b:
df:b2:4d:1d:66:80:b6:dd:df:ab:80:0d:17:77:49:ad:a9:21:
59:4c:a7:12:3c:44:22:f1:1f:47:ca:47:f5:bb:fe:7a:98:64:
82:41:ac:e0:03:61:58:4f:d4:af:a9:d0:95:15:99:f8:78:06:
e4:11:ef:b9:a0:fd:a9:84:0f:15:a2:3d:fa:5d:2b:d4:95:99:
f0:21:ff:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:58 2025 by rpki-client