Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/L-NricQsvFUySUyr5YZaKF_VHoI.roa
File: L-NricQsvFUySUyr5YZaKF_VHoI.roa (raw, json)
Hash identifier: mFck59qAN8NW4z5geIhJauAj63QE0Wjd26Csd4awkJ4=
Subject key identifier: 2F:E3:6B:89:C4:2C:BC:55:32:49:4C:AB:E5:86:5A:28:5F:D5:1E:82
Certificate issuer: /CN=bce75c43a41501d35417ae813be29f4227fb2dcf
Certificate serial: 01856EEFCB839C217E1C631A4F69E886604F
Authority key identifier: BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/L-NricQsvFUySUyr5YZaKF_VHoI.roa
Signing time: Sun 01 Jan 2023 20:04:46 +0000
ROA not before: Sun 01 Jan 2023 20:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203785
IP address blocks: 2a13:4b80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:cb:83:9c:21:7e:1c:63:1a:4f:69:e8:86:60:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce75c43a41501d35417ae813be29f4227fb2dcf
Validity
Not Before: Jan 1 20:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fe36b89c42cbc5532494cabe5865a285fd51e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:2d:9e:2e:98:5e:dd:39:b8:18:5d:5f:83:
f4:e6:18:5a:5c:45:2e:fa:bd:7f:ea:ac:f5:02:fd:
20:ba:64:3f:25:f9:79:ed:d7:c2:2c:e7:56:a3:b7:
30:f3:94:8b:18:7c:21:5d:fd:94:85:18:f1:7a:d8:
26:a5:55:63:68:d8:ca:ec:65:b9:52:ed:10:c1:7f:
03:7f:f8:db:df:e3:35:7b:39:cd:f4:d9:ba:6c:31:
15:93:ea:50:e5:2d:6a:99:67:4b:f3:b7:e2:30:ee:
f2:06:81:43:e2:d4:87:b3:aa:33:c0:6a:bf:f6:42:
2d:39:25:c6:f5:1a:91:38:95:67:2e:d6:e1:9f:41:
12:9e:dd:b4:a4:d3:71:d8:71:3c:8c:00:58:67:ae:
71:a3:40:f9:28:bd:78:be:61:5d:af:b6:bd:7c:34:
d0:79:cd:fa:3a:a0:be:35:77:cf:19:4f:58:8c:b9:
57:55:a4:9d:00:f4:0e:6e:75:18:20:86:56:cd:65:
87:b9:2d:3f:2f:05:83:ed:b0:e1:6f:5b:fe:19:b8:
46:f2:d8:d1:eb:63:af:3d:a0:ec:69:15:a1:0d:60:
7f:02:cb:6c:6a:67:d4:86:a1:0d:29:95:36:2f:65:
a3:df:8f:d1:c2:91:b4:c6:7c:5e:04:f6:c0:79:17:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E3:6B:89:C4:2C:BC:55:32:49:4C:AB:E5:86:5A:28:5F:D5:1E:82
X509v3 Authority Key Identifier:
keyid:BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/L-NricQsvFUySUyr5YZaKF_VHoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
ab:6b:3d:e0:88:e8:90:62:19:9d:91:77:fe:f5:58:ec:5f:63:
e9:1a:f6:8d:4c:5d:d7:78:82:99:be:48:57:9b:2c:61:bd:17:
ea:ca:4c:d4:64:2b:44:e5:05:b1:9e:25:ab:2e:28:be:4d:26:
d3:23:6a:0b:52:f3:ba:c7:69:34:b8:46:a4:ce:e9:14:85:22:
a2:5d:83:02:e3:fb:a0:60:79:5c:ed:aa:1b:6f:69:b6:c6:ab:
73:22:76:b6:7e:14:70:fa:57:ff:fb:97:1c:e9:94:3f:af:fb:
9f:fa:a0:36:de:b9:1d:39:83:5d:f1:34:2c:88:1d:97:92:9f:
c8:39:7d:46:f8:3e:46:63:1b:9d:4d:bd:ef:b7:38:6e:e5:be:
2d:17:a2:56:16:99:3c:dc:2c:66:5c:8c:9e:41:af:a0:8e:23:
8e:bf:93:f3:da:41:83:48:e0:f4:d6:f0:0b:1d:92:47:5a:d5:
66:3b:95:f5:40:e7:cc:05:c1:bf:9c:7f:c6:8d:c9:e9:d6:13:
b5:84:66:02:69:42:92:0b:53:c6:36:a4:0d:3e:4b:3b:fc:24:
62:52:66:12:d3:63:b7:b0:f0:ac:8c:70:b2:7f:f3:92:98:85:
21:3c:c2:7c:a3:f0:27:5a:bb:f8:5e:de:47:8c:9c:6a:4a:a4:
a1:76:5f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:03 2025 by rpki-client