Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/6FOP9zBobEC15lKjhX6tkoto-vc.roa
File: 6FOP9zBobEC15lKjhX6tkoto-vc.roa (raw, json)
Hash identifier: ho+vjwAifSzbsHGf4eO/Ya2FlmmcSKsLn46YNijCFUg=
Subject key identifier: E8:53:8F:F7:30:68:6C:40:B5:E6:52:A3:85:7E:AD:92:8B:68:FA:F7
Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial: 01856EEFF92AB039D5E743AC43618D16E2EE
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/6FOP9zBobEC15lKjhX6tkoto-vc.roa
Signing time: Sun 01 Jan 2023 20:04:58 +0000
ROA not before: Sun 01 Jan 2023 20:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20965
IP address blocks: 62.40.96.0/19 maxlen: 19
83.97.92.0/22 maxlen: 22
2001:799::/32 maxlen: 32
2001:798::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:f9:2a:b0:39:d5:e7:43:ac:43:61:8d:16:e2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Validity
Not Before: Jan 1 20:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8538ff730686c40b5e652a3857ead928b68faf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b7:f0:07:a6:67:21:a8:54:7d:f2:33:bc:44:
18:eb:9c:79:f3:bb:42:96:10:ea:74:4e:2b:f3:34:
bf:be:a2:22:52:b2:ca:5f:23:89:ac:71:a4:7e:e8:
b0:45:42:76:83:60:4f:08:06:d8:25:14:ec:f9:36:
c7:30:bc:63:56:4b:b0:2b:94:d9:2d:b2:e1:d4:89:
a3:fd:89:6f:79:c4:16:e2:fc:ee:23:69:4c:36:ac:
f4:e5:4a:90:71:ab:3d:7d:1d:a7:ed:96:d4:23:56:
b6:b6:81:ec:83:d2:2d:8d:63:8d:f5:ea:ca:6d:39:
e5:16:21:52:45:71:16:b3:ee:81:34:a5:fd:51:88:
60:5e:43:a4:2d:be:29:91:15:88:8a:40:c5:fe:c8:
0f:f2:5e:0a:76:76:4d:e2:7e:30:c9:06:8a:1e:5c:
23:a0:e6:f4:61:3d:45:b8:18:5d:48:a4:65:d2:77:
d2:aa:a9:7b:54:94:9e:1e:4b:e0:06:0c:59:7f:2d:
28:68:0f:5f:9b:5e:c9:8b:1d:d1:6e:59:3b:52:6a:
53:d8:14:04:16:0a:d3:68:d1:b5:a9:87:01:2c:19:
22:59:73:ad:c1:12:ec:02:43:d6:61:f0:39:c6:36:
f2:46:58:14:ae:76:63:ba:94:6d:9b:88:b8:cb:6d:
dc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:53:8F:F7:30:68:6C:40:B5:E6:52:A3:85:7E:AD:92:8B:68:FA:F7
X509v3 Authority Key Identifier:
keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/6FOP9zBobEC15lKjhX6tkoto-vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.40.96.0/19
83.97.92.0/22
IPv6:
2001:798::/31
Signature Algorithm: sha256WithRSAEncryption
99:5d:e2:3b:42:89:ad:45:82:c2:f2:af:4d:a7:e9:ff:d9:d8:
26:d6:60:f4:09:0a:ff:4a:a4:42:f6:8d:07:0b:e8:60:c7:d1:
82:27:eb:4b:3d:60:af:16:cd:ed:cd:56:18:c2:e0:f5:de:64:
93:0a:40:89:39:42:81:ef:b5:9c:82:37:f8:94:9b:4d:43:2f:
6f:be:86:65:4b:57:e8:f0:56:37:d2:e7:27:5d:d4:18:55:35:
4f:e1:2f:7d:43:db:41:43:cd:42:3d:c5:12:02:0e:bb:61:e5:
a8:51:48:64:ca:b1:0d:69:32:cd:f2:fe:3d:c9:bd:ca:05:26:
cd:1d:3a:1c:58:04:a7:2c:89:d4:76:39:5b:37:c4:01:65:0e:
31:21:86:b5:73:8a:32:9b:d2:78:cc:64:bf:98:2d:e7:4e:05:
8a:cf:9c:f6:3f:94:9e:f6:3b:e1:33:b4:7d:20:b6:20:22:7e:
58:52:8e:c7:44:a8:22:71:ec:12:e6:d0:e7:dc:36:21:b4:73:
cc:60:19:ac:f7:26:87:20:c7:7c:8b:28:75:0c:bf:9e:c7:1e:
ec:8a:29:96:ed:1c:b1:72:84:03:83:ec:bb:be:e9:16:68:74:
d2:12:03:bd:a8:9d:f2:27:a4:be:e8:75:1a:e9:c6:73:9f:10:
00:fa:a5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:55 2025 by rpki-client