Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/0eCpfi1qBd64kGrYjFH3L0GOnj4.roa
File: 0eCpfi1qBd64kGrYjFH3L0GOnj4.roa (raw, json)
Hash identifier: qs8Xom9HOqyDUCe/j04RdUhNkjHV1pNYNVjezsVpn7w=
Subject key identifier: D1:E0:A9:7E:2D:6A:05:DE:B8:90:6A:D8:8C:51:F7:2F:41:8E:9E:3E
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 041665BD
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/0eCpfi1qBd64kGrYjFH3L0GOnj4.roa
Signing time: Fri 21 Jan 2022 13:32:18 +0000
ROA not before: Fri 21 Jan 2022 13:32:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3573
IP address blocks: 2a02:ee80:4171::/48 maxlen: 48
2a02:ee80:415c::/47 maxlen: 47
2a02:ee80:4170::/48 maxlen: 48
2a02:ee80:41a8::/47 maxlen: 47
2a02:ee80:4170::/47 maxlen: 47
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68576701 (0x41665bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Jan 21 13:32:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1e0a97e2d6a05deb8906ad88c51f72f418e9e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:9e:ed:ae:a8:08:a4:1e:ec:f2:cb:bc:a4:
d2:75:d0:ed:e9:06:c4:0f:d2:16:eb:d7:10:6c:73:
b1:d7:c0:15:06:6b:fa:8c:2c:2f:05:82:b5:8d:50:
1d:b9:93:44:83:9a:3f:8d:83:52:ce:df:6b:dc:40:
c6:0b:9e:15:b5:97:51:84:0b:74:7e:94:df:56:cf:
58:3a:06:61:51:62:7a:e8:24:1d:e0:a5:fd:27:7c:
09:4d:13:59:fa:79:1d:ed:14:a0:e3:8d:ce:9d:7e:
3c:c9:25:46:b8:96:fa:95:88:cc:7a:d0:8d:91:cb:
3d:9c:57:c0:c2:4a:18:03:c6:8d:73:d2:72:32:d6:
e5:1d:82:55:ec:10:b4:e8:29:ae:aa:4c:d8:af:46:
2e:d8:bc:09:93:6a:51:3a:d3:ad:78:c5:f8:c6:df:
14:cb:31:00:32:d4:1d:ee:39:ac:ed:cf:40:0e:66:
fc:8b:9f:ea:10:69:a1:1c:b6:e9:ba:83:76:0c:01:
3d:4e:7f:07:22:a0:8f:79:3e:12:2a:37:7b:84:f8:
a1:74:02:c7:69:43:04:ff:26:38:94:7d:4e:84:54:
99:cf:a7:e9:11:8e:12:00:92:ce:31:fb:14:81:2c:
9c:a5:64:70:a6:00:61:7f:bd:f0:c0:f1:76:a9:a4:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E0:A9:7E:2D:6A:05:DE:B8:90:6A:D8:8C:51:F7:2F:41:8E:9E:3E
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/0eCpfi1qBd64kGrYjFH3L0GOnj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:ee80:415c::/47
2a02:ee80:4170::/47
2a02:ee80:41a8::/47
Signature Algorithm: sha256WithRSAEncryption
66:6e:fe:6c:26:54:df:01:29:7f:7b:e3:0a:08:23:09:03:03:
0b:69:e3:55:1a:d4:00:1b:f5:e2:8d:ea:42:32:6d:ec:df:b9:
6e:e8:d3:83:fb:5d:06:75:11:37:c4:ee:bd:12:78:ba:53:b4:
e1:47:0a:5a:b4:28:ce:e8:f0:d4:6e:07:c6:59:66:80:b9:9e:
0d:48:39:81:ff:74:e6:5e:d3:1b:30:6c:87:3b:42:ca:8a:81:
7a:73:eb:50:f3:76:10:ad:e3:c8:4b:82:ec:18:78:fc:ec:e2:
73:09:47:f2:70:b9:49:e2:21:35:9f:87:0f:a6:c8:d5:82:27:
8c:e7:05:69:db:3d:33:d5:a3:31:59:b1:06:f6:c2:e6:a4:8d:
47:e4:8a:08:c4:64:0b:d4:a5:28:fa:81:9b:43:bc:31:1d:bb:
66:2c:54:25:53:0b:61:64:d5:71:ea:a3:58:85:00:b7:0f:66:
79:a0:b6:dd:59:6f:93:38:78:e1:0b:48:46:94:9e:5e:16:ec:
1a:aa:10:77:26:6f:49:60:d2:01:45:6c:e0:d1:b1:65:60:11:
2c:c7:33:c7:74:f4:fc:1e:d8:64:e0:18:84:48:51:2c:fe:cf:
a0:50:54:34:fc:a6:18:c5:6b:ac:57:86:a7:c3:9c:f3:94:70:
c7:b0:46:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:30:19 2025 by rpki-client