Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/Pj5oEGGCORm-vowp6J0IbZd5QZA.roa
File: Pj5oEGGCORm-vowp6J0IbZd5QZA.roa (raw, json)
Hash identifier: Xs9wor/aVuVN02XsErNRhv9urbUlkBfrX9DC5tUqzMw=
Subject key identifier: 3E:3E:68:10:61:82:39:19:BE:BE:8C:29:E8:9D:08:6D:97:79:41:90
Certificate issuer: /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Certificate serial: 018C58C054E3866E2CAE870EE92D7533CE0E
Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/Pj5oEGGCORm-vowp6J0IbZd5QZA.roa
Signing time: Mon 11 Dec 2023 12:00:48 +0000
ROA not before: Mon 11 Dec 2023 12:00:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215872
IP address blocks: 2001:678:a80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:c0:54:e3:86:6e:2c:ae:87:0e:e9:2d:75:33:ce:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Validity
Not Before: Dec 11 12:00:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e3e681061823919bebe8c29e89d086d97794190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:78:10:88:c2:2e:a4:6a:da:8c:df:1a:12:
dc:06:2d:f5:7b:49:91:c8:ba:29:8d:98:72:87:65:
90:00:33:32:54:7e:7d:20:87:f0:f8:59:ba:22:c6:
3b:85:51:3b:92:6a:71:9f:b4:f5:39:7c:5b:37:05:
51:ce:6b:f6:5d:74:bd:13:82:23:05:21:81:1b:8b:
b6:52:98:c5:b9:83:c8:74:69:54:f3:7f:01:7b:b6:
1f:c0:7c:a7:15:04:d0:9e:6f:31:50:b7:ee:51:a9:
68:1a:b9:b7:92:85:52:e7:a0:84:1a:6b:91:46:fe:
64:83:58:c3:2d:90:96:92:07:3f:2b:28:7e:2c:be:
87:64:e0:28:79:4c:5d:de:bc:4c:8d:fd:4c:35:eb:
55:c1:b9:11:49:8f:9a:c8:b9:68:46:d9:05:43:21:
6e:93:b3:f7:c7:eb:9d:62:58:d5:3e:2f:f8:35:38:
78:8a:fe:4b:99:cc:bc:9a:24:d8:a9:a0:77:30:1d:
a0:ea:15:e5:4b:1c:cc:53:84:e6:24:ce:ae:dd:65:
20:1a:26:65:ca:86:cf:d4:f7:4b:1f:ab:80:ea:d0:
05:a8:a4:8e:37:66:f4:18:62:ed:0c:92:2c:19:20:
fb:34:b4:cd:ef:f0:16:cb:2e:ef:9c:9c:6b:eb:54:
ce:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3E:68:10:61:82:39:19:BE:BE:8C:29:E8:9D:08:6D:97:79:41:90
X509v3 Authority Key Identifier:
keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/Pj5oEGGCORm-vowp6J0IbZd5QZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a80::/48
Signature Algorithm: sha256WithRSAEncryption
6c:ff:6e:d5:75:3c:ba:a6:34:47:e6:e3:fa:be:ef:be:6e:66:
10:cb:b4:a7:52:d7:74:c9:7c:91:29:0d:5d:c2:58:c3:8f:10:
6b:62:1c:73:44:f0:a5:24:b2:fa:f5:10:85:c4:b1:7c:d7:09:
3b:61:ff:c2:4a:65:34:06:2a:5f:ef:58:67:ab:4d:0b:2a:3e:
a2:31:67:a4:da:b2:7d:83:94:34:e1:83:40:26:2b:f0:94:29:
5f:a1:55:38:b1:53:8b:67:e2:3c:a3:13:99:e8:2d:5c:39:71:
d6:a3:7a:be:cb:b2:10:e8:ed:8c:1c:b9:13:b4:b9:fa:eb:57:
db:1f:e1:ff:1f:dc:51:63:8d:e5:e1:33:3e:fa:7b:da:66:98:
09:3b:21:68:c2:f0:64:b8:21:33:e5:19:07:f0:86:69:67:ef:
4e:dd:91:9e:39:9a:1f:84:49:30:60:0d:67:be:e0:bc:4b:e2:
10:c7:bf:32:8c:d4:1d:c9:e3:9c:2c:0d:2a:50:f0:c0:45:f2:
ac:f3:51:92:15:63:37:12:74:50:4b:3a:95:44:ff:05:33:be:
93:6f:b8:b2:d4:8c:5f:44:e3:d5:a6:aa:40:74:57:bd:a2:54:
23:fd:1d:b5:5a:3f:68:29:00:93:f6:84:4e:fc:50:65:1b:c7:
d5:eb:14:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:56 2025 by rpki-client