Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/E1ykrRm0CcOSSEe9kqdrIp8tY_4.roa
File: E1ykrRm0CcOSSEe9kqdrIp8tY_4.roa (raw, json)
Hash identifier: zkFOIpTV+Qn6dX674/iPuZ9VSIx5bYqIb8EZGLXbccU=
Subject key identifier: 13:5C:A4:AD:19:B4:09:C3:92:48:47:BD:92:A7:6B:22:9F:2D:63:FE
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 0189208F51B09CCEFC712C7C523BD289E932
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/E1ykrRm0CcOSSEe9kqdrIp8tY_4.roa
Signing time: Tue 04 Jul 2023 11:00:10 +0000
ROA not before: Tue 04 Jul 2023 11:00:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9186
IP address blocks: 2a09:58c0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:8f:51:b0:9c:ce:fc:71:2c:7c:52:3b:d2:89:e9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Jul 4 11:00:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=135ca4ad19b409c3924847bd92a76b229f2d63fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8c:4f:e1:37:b9:0f:ea:44:e7:d3:69:75:45:
3a:3f:48:65:d3:86:81:f1:ec:de:25:e3:8d:3b:a1:
96:a0:4a:95:63:54:a3:70:24:ef:b0:b3:ad:5a:70:
86:a7:86:21:90:e4:48:3e:ee:e2:79:40:d1:d9:87:
09:89:85:55:8e:8c:f1:8e:43:8c:98:b2:b9:74:3e:
ff:60:7e:82:9d:86:0b:af:a7:ed:40:3a:5b:8c:20:
6d:68:0d:95:aa:a0:51:eb:a2:ce:c7:2f:74:0b:a2:
fd:32:5a:81:c7:d5:4f:5b:10:62:42:f5:93:a9:0e:
40:1c:0e:95:a8:cd:ec:4f:d5:9a:59:69:52:67:cd:
d1:78:5b:15:2f:48:af:31:c8:1b:17:83:a4:aa:25:
6b:4d:da:ba:09:63:05:ca:95:b8:0c:aa:a9:be:70:
97:27:1d:82:82:33:02:00:f9:5b:72:08:78:13:8e:
db:dd:e8:26:23:a7:d7:bf:7d:a9:1c:5e:43:26:63:
45:2c:6c:6d:3f:69:9a:b7:ca:4a:88:e7:42:5f:c6:
76:3c:49:e7:b2:50:84:3e:7f:e6:1b:8d:5e:20:5b:
1f:a5:b9:7b:39:23:2e:00:1f:27:77:da:1e:22:fb:
70:a1:b8:29:66:8d:01:64:72:bb:78:77:d8:bd:9f:
2b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5C:A4:AD:19:B4:09:C3:92:48:47:BD:92:A7:6B:22:9F:2D:63:FE
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/E1ykrRm0CcOSSEe9kqdrIp8tY_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:58c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
67:15:25:f3:e8:9d:26:1c:f1:67:d4:50:30:d5:11:f9:28:2b:
81:41:bc:fe:df:ad:ce:d6:dc:fc:60:c2:0e:6a:16:5f:59:0f:
5a:a1:89:26:0a:cb:dd:83:52:24:93:e2:3f:c7:7f:29:81:85:
2c:3a:c6:b1:a9:1c:51:63:e9:d1:ae:ff:a8:cb:d6:cb:b9:25:
c1:b8:53:b5:e4:8e:e8:bf:9e:0a:50:44:f7:16:6c:36:ef:15:
47:56:1d:a1:a7:cb:59:fa:49:ce:5e:ec:f5:b0:59:fa:e3:ec:
9c:03:e3:00:9d:dd:34:25:c2:b2:8a:ed:b0:3d:41:c9:eb:fa:
14:57:e5:bb:3d:db:e0:d3:13:b3:0a:77:fc:07:0f:b9:76:f1:
59:e5:23:63:79:2c:be:a3:73:62:df:b2:13:cd:42:c8:af:76:
b1:c8:b1:ca:06:c2:52:22:25:b7:9b:42:ed:fe:75:83:b8:66:
97:7d:5e:87:6f:d3:ac:25:27:df:bb:b7:83:ef:c5:e6:61:bd:
98:1a:03:23:3e:0a:3d:7a:ea:43:05:0c:09:b0:2d:e3:a9:d8:
e3:10:e0:3c:88:40:d1:07:4c:57:37:00:fb:7a:de:85:dc:4a:
a7:79:75:7d:e6:41:42:2d:e5:7b:ea:81:29:a8:6f:73:84:5d:
e6:45:98:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:03:02 2025 by rpki-client