Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/f0xm_2MEl4eERnkxnMNZnav5hew.roa
File: f0xm_2MEl4eERnkxnMNZnav5hew.roa (raw, json)
Hash identifier: IcHbNRzP/R4i50A1KaGHbvRiF9OwtrmO0BNUM/apUcE=
Subject key identifier: 7F:4C:66:FF:63:04:97:87:84:46:79:31:9C:C3:59:9D:AB:F9:85:EC
Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial: 01856C65D8D5BCA75AF61364334F54DF083E
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/f0xm_2MEl4eERnkxnMNZnav5hew.roa
Signing time: Sun 01 Jan 2023 08:14:51 +0000
ROA not before: Sun 01 Jan 2023 08:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212135
IP address blocks: 2001:678:efc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:d8:d5:bc:a7:5a:f6:13:64:33:4f:54:df:08:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Validity
Not Before: Jan 1 08:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f4c66ff63049787844679319cc3599dabf985ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:01:e8:20:28:cd:aa:1f:de:a7:32:6a:3d:
54:31:be:1f:34:07:5f:a2:99:c9:55:6f:7c:4e:dd:
7c:15:93:db:bc:e6:aa:56:3c:01:34:49:b2:42:eb:
53:bc:50:9e:b7:8e:ab:77:52:c2:fb:37:5f:47:da:
12:96:ce:e8:33:97:7f:ef:b4:6e:36:71:f8:8f:2c:
3c:04:c5:7b:e4:68:cc:bf:1b:9f:a9:a5:8e:34:9b:
2d:6b:81:f0:12:8a:1c:30:7c:10:2d:7d:1f:69:71:
cd:5a:5e:6d:78:0c:4a:ac:f3:33:8a:be:e0:e1:23:
8d:cc:24:36:a4:a1:16:f0:60:07:d0:b9:17:50:e1:
6e:2b:8d:ca:63:ba:af:63:4e:df:7a:c6:e4:dc:89:
2d:1c:29:e4:fc:07:5a:cd:30:2f:53:e5:4b:c7:6e:
9c:f5:32:ca:26:3c:17:b4:a1:70:7d:33:28:00:ed:
d2:6c:3b:17:35:02:23:1b:06:04:31:3b:d7:4f:39:
25:79:ee:95:05:dc:14:b1:5b:f0:a3:07:50:a5:66:
00:b6:ce:13:a2:7b:dd:52:80:c5:1a:04:b6:56:4e:
dc:7a:48:dd:7b:a3:8b:63:ce:e4:ba:ae:4e:53:89:
0c:99:54:b6:97:28:9f:66:c7:d3:f6:0f:e3:50:cf:
2c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4C:66:FF:63:04:97:87:84:46:79:31:9C:C3:59:9D:AB:F9:85:EC
X509v3 Authority Key Identifier:
keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/f0xm_2MEl4eERnkxnMNZnav5hew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:efc::/48
Signature Algorithm: sha256WithRSAEncryption
92:eb:86:5e:e4:d7:30:aa:53:7a:e4:8d:62:23:2a:28:fb:0f:
50:c9:4c:7f:a5:ff:3c:e0:39:b7:48:4f:2b:c6:f4:d1:ea:64:
bd:49:11:c6:12:13:59:67:b0:f9:e9:ee:88:fd:db:fc:f6:60:
9b:ff:70:3a:33:d6:10:95:a2:49:1e:4c:d0:4f:6e:14:83:d3:
ba:96:50:a8:c8:17:6b:25:71:cd:ab:ba:6e:35:c0:94:08:12:
9e:f5:76:23:67:ba:64:0b:42:9d:e4:15:05:36:65:61:fd:d9:
79:ed:ca:92:25:33:ff:84:07:01:f3:dd:24:37:55:cd:1a:a6:
a0:bd:c5:08:10:6d:e2:e7:b3:e5:4f:f3:ee:d2:2c:47:89:19:
8d:5b:d6:79:c5:42:9c:a2:62:78:1b:63:65:e0:d0:18:96:9c:
b2:a1:17:f9:87:2b:09:e8:2a:97:dc:74:b7:8e:fc:b0:94:33:
81:64:f0:0f:5f:c5:30:8e:c5:b1:36:9f:d7:24:87:48:5e:78:
4b:6d:6a:2f:f5:4b:f9:fe:37:8b:aa:49:cf:05:9a:d6:81:04:
09:20:6a:da:d3:a6:c2:22:34:10:f1:64:7c:a0:16:1a:e8:fb:
30:31:ed:fd:cb:1d:09:ca:31:af:54:e0:bb:51:39:37:f4:e0:
c7:37:2a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:35:32 2025 by rpki-client