Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/Fl6BMyqegClKLGCWxidFRxFVAR0.roa
File: Fl6BMyqegClKLGCWxidFRxFVAR0.roa (raw, json)
Hash identifier: RGm89zYtCAx0PSHNwz8sqj4k8ZajiKm3zp6SeTCz3Xo=
Subject key identifier: 16:5E:81:33:2A:9E:80:29:4A:2C:60:96:C6:27:45:47:11:55:01:1D
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 018ABCB86AD4902340C63DE90593EB694A10
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/Fl6BMyqegClKLGCWxidFRxFVAR0.roa
Signing time: Fri 22 Sep 2023 11:48:37 +0000
ROA not before: Fri 22 Sep 2023 11:48:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28917
IP address blocks: 2a13:6d40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:b8:6a:d4:90:23:40:c6:3d:e9:05:93:eb:69:4a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Sep 22 11:48:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=165e81332a9e80294a2c6096c62745471155011d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bc:2e:81:11:50:dd:1f:8a:5f:e4:ce:5c:2a:
29:39:f1:ff:21:3f:78:ce:e7:ae:43:f7:27:4c:fc:
ee:0f:b1:62:14:0e:33:52:95:04:d7:1d:3b:3b:00:
a0:b7:22:33:82:7b:09:e7:06:62:8d:c3:b3:c0:bb:
93:ad:c5:3b:46:cf:12:d2:b5:c2:80:45:cc:36:99:
ea:97:46:72:89:98:98:13:91:da:4d:b2:28:a4:f1:
04:d8:ce:0b:64:e9:c2:40:43:6b:21:5d:0b:a5:55:
ab:72:a7:c5:ef:2b:f4:52:58:fd:61:b1:50:e7:6d:
fe:0a:33:f4:27:4f:2c:32:63:c7:50:13:d7:10:e8:
d4:2c:b4:35:a6:07:0d:92:68:47:7d:6f:a8:1c:82:
10:78:8b:f5:05:c7:44:4b:e7:b4:6d:d2:32:bf:1f:
8d:bf:de:18:2b:65:b5:2b:eb:dd:cf:fd:ca:52:38:
77:09:d3:1b:19:48:80:08:14:0f:1e:84:8d:e4:a8:
b9:af:60:78:65:aa:ca:7d:72:26:35:be:d2:42:cd:
3e:9d:c9:34:af:63:48:e2:3c:86:dd:72:74:db:3e:
50:a4:2a:4d:d5:d2:ca:24:8c:7d:99:55:c6:76:0b:
3e:97:52:14:12:5c:c9:64:69:62:e9:a2:3a:96:c1:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5E:81:33:2A:9E:80:29:4A:2C:60:96:C6:27:45:47:11:55:01:1D
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/Fl6BMyqegClKLGCWxidFRxFVAR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
1b:a6:82:f7:62:9b:9c:d4:68:f4:71:69:ff:de:1c:fd:9c:2b:
91:bd:82:fe:7d:e7:fa:43:fd:e6:c4:7e:bb:3a:1c:4e:2c:b1:
48:1e:ce:10:22:b5:b7:19:a9:2d:13:af:75:1b:24:75:bd:fa:
f1:65:1d:55:ef:0b:be:20:18:e9:28:e3:c8:58:80:93:f7:bc:
8f:df:5f:e6:d8:44:97:ea:16:34:b0:47:d1:24:7e:a6:6b:09:
af:b6:2b:92:50:76:16:07:02:5c:98:19:29:a8:dc:cd:ce:44:
07:96:41:77:46:f8:ff:23:a5:99:22:75:fa:c6:c7:40:cc:08:
61:10:96:11:02:24:dd:24:fc:13:a9:5f:85:e4:6c:48:07:89:
2a:d3:a2:b4:44:91:eb:db:47:7c:e2:ba:50:65:2f:d0:ef:34:
62:fa:3f:45:3f:31:9f:49:3e:6f:4e:95:d5:ea:93:32:c0:d3:
63:28:03:16:08:e7:84:97:0c:9b:ba:38:9f:f8:f6:d0:b3:cf:
6d:44:8a:4d:59:0a:9a:56:f6:3d:b8:d3:d5:fd:9a:f4:b8:8b:
66:26:76:2d:d0:fa:5d:7a:28:3b:b4:ef:a0:7a:53:cd:18:57:
ff:c5:f5:f1:b4:3f:15:b6:8e:ca:86:af:ed:62:94:1b:62:af:
bc:d7:52:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:35 2025 by rpki-client