Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/SCyCw-10QWLUQ_Ruhuh9bp3CC_w.roa
File: SCyCw-10QWLUQ_Ruhuh9bp3CC_w.roa (raw, json)
Hash identifier: sjACkYjpAsNy6UtsJOK3kvkEYvFRUeHQ+kOffwedDeI=
Subject key identifier: 48:2C:82:C3:ED:74:41:62:D4:43:F4:6E:86:E8:7D:6E:9D:C2:0B:FC
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01856F796CD5DE95494D918CAB48FEC4CA15
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/SCyCw-10QWLUQ_Ruhuh9bp3CC_w.roa
Signing time: Sun 01 Jan 2023 22:35:06 +0000
ROA not before: Sun 01 Jan 2023 22:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 2a10:eec0:80::/41 maxlen: 41
2a10:eec0:40::/42 maxlen: 42
2a10:eec0:400::/38 maxlen: 38
2a10:eec0:2000::/35 maxlen: 35
2a10:eec0:1000::/36 maxlen: 36
2a10:eec0:8000::/33 maxlen: 33
2a10:eec0:4000::/34 maxlen: 34
2a10:eec0:200::/39 maxlen: 39
2a10:eec0:100::/40 maxlen: 40
2a10:eec0:800::/37 maxlen: 37
2a10:eec0:e::/47 maxlen: 47
2a10:eec0:20::/43 maxlen: 43
2a10:eec0:d::/48 maxlen: 48
2a10:eec0:10::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:6c:d5:de:95:49:4d:91:8c:ab:48:fe:c4:ca:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 22:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=482c82c3ed744162d443f46e86e87d6e9dc20bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:a4:68:63:11:e0:3c:16:db:6a:9d:f3:d7:
cd:e7:f9:86:99:d6:48:98:b2:4f:99:d0:6b:88:f2:
66:40:3f:82:0a:b9:d9:3f:7b:3c:62:71:70:ea:91:
98:17:5d:22:56:e8:54:91:44:f7:d5:d7:64:58:27:
06:13:cb:3e:0f:52:48:6f:b1:bf:47:98:6e:86:ed:
57:b1:4b:2b:40:ef:74:1b:1c:35:f1:88:d8:2f:32:
85:60:9c:27:3d:3d:b9:5f:64:d8:64:a5:18:a4:d0:
a2:87:b8:a3:82:79:75:30:77:3f:17:9e:3a:63:d1:
b3:f3:f6:62:e0:2b:1e:30:fb:bc:8c:f5:5c:b8:b2:
c5:c5:02:e1:c9:a3:09:d1:08:a1:ff:d3:d5:f2:b2:
34:3f:47:a9:87:a8:e6:f6:7a:8c:42:58:63:2c:d7:
29:f4:fa:70:29:32:67:06:80:7e:ac:f1:be:f0:ef:
0c:a5:20:18:ff:9b:26:53:c8:93:8e:2b:07:fa:52:
d7:e8:57:39:c0:08:89:5f:a1:5d:35:bc:b3:cf:fd:
97:f5:c7:ad:c1:4c:6d:16:f6:de:2e:9d:39:2c:e8:
90:59:80:96:b3:ce:98:b7:68:4b:0f:6b:08:7b:02:
78:b5:62:50:2c:2b:0b:93:07:25:89:f8:3f:72:fb:
33:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2C:82:C3:ED:74:41:62:D4:43:F4:6E:86:E8:7D:6E:9D:C2:0B:FC
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/SCyCw-10QWLUQ_Ruhuh9bp3CC_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:eec0:d::-2a10:eec0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ae:73:37:7a:9b:64:cf:77:3d:15:d4:2c:b6:8b:66:04:54:df:
d3:ff:28:2a:37:74:0f:9f:18:43:cb:74:d8:35:f0:a5:7e:56:
06:af:1e:a2:2e:0b:92:6b:06:fe:f5:be:81:d4:62:5c:d5:02:
98:ba:8e:15:71:e6:e6:ba:a6:bb:ff:7e:7f:ee:13:be:34:94:
ea:e2:5a:bb:66:6f:69:3d:68:b8:ce:d4:9b:0a:4c:2b:b4:f4:
46:58:a2:6a:eb:23:ca:dc:ab:e1:5a:9c:fc:8d:3d:db:6a:66:
35:08:dd:9b:84:4a:3d:28:a3:a7:0f:6d:c8:bd:d5:7e:0e:e1:
47:30:a1:e0:9b:8d:01:e2:d0:c0:5b:0d:63:70:25:79:bb:d4:
56:cf:46:db:ca:b5:b5:6d:59:00:ce:0b:d7:54:f7:f2:51:e9:
ea:1f:49:14:1b:3e:71:00:44:92:3b:43:65:73:17:b9:bb:c4:
16:cd:aa:2c:63:53:ef:b5:46:64:44:0a:88:00:eb:83:2b:8c:
1a:e2:b2:da:2f:df:ea:08:f1:9d:07:6d:2f:94:10:dd:b2:0e:
0e:68:73:0f:a8:af:45:a2:df:76:d1:99:51:c0:e7:aa:12:b5:
20:79:70:4d:49:83:8d:c2:31:27:e8:2a:51:63:d1:67:c6:d5:
4c:f5:0e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:43 2025 by rpki-client