Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/8-cj7k-UJX-zjG0FQEPw-3yUxyM.roa
File: 8-cj7k-UJX-zjG0FQEPw-3yUxyM.roa (raw, json)
Hash identifier: 1C7anx6HF4rIfPC95l7dBS09blInCG7x5k78yoZJDCs=
Subject key identifier: F3:E7:23:EE:4F:94:25:7F:B3:8C:6D:05:40:43:F0:FB:7C:94:C7:23
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0182876CA9D93DE400928C6CCB8CE1522A2B
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/8-cj7k-UJX-zjG0FQEPw-3yUxyM.roa
Signing time: Wed 10 Aug 2022 11:03:41 +0000
ROA not before: Wed 10 Aug 2022 11:03:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50340
IP address blocks: 2a12:a340::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:87:6c:a9:d9:3d:e4:00:92:8c:6c:cb:8c:e1:52:2a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Aug 10 11:03:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3e723ee4f94257fb38c6d054043f0fb7c94c723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:8a:7e:48:ef:c4:e5:dd:86:dd:fa:47:96:
16:cb:a9:95:fb:9f:44:6d:ed:10:f2:b6:67:fc:85:
91:8a:be:7d:c6:0f:57:9b:8a:e5:9d:06:e7:80:71:
ec:89:73:74:1d:6d:34:f9:60:bc:2f:9c:71:3d:f6:
e0:0c:76:2a:13:76:91:4c:66:06:d9:05:60:ef:9e:
29:0d:6c:67:b9:74:93:3b:c0:d4:a4:32:0b:d9:4f:
9b:8a:70:05:60:64:44:9b:24:d5:e4:83:8e:1f:d4:
f3:8b:8c:63:e4:5b:9f:77:1b:08:2b:8e:86:2d:c7:
a2:09:7b:9b:85:34:ed:84:23:01:99:7a:ac:5b:8d:
41:12:bd:a2:25:d0:dd:d4:39:63:73:02:65:e4:5c:
d4:1b:d0:1d:8a:61:3b:ee:09:7a:ff:0e:f7:2b:e5:
3e:13:df:e6:ef:4e:22:29:8c:f0:62:4b:a1:bb:c9:
52:b1:fc:5e:2b:fe:b2:71:dd:d6:eb:46:45:63:26:
8d:19:6a:d0:b2:2d:b9:4f:33:36:d4:56:87:90:61:
0c:9b:22:6e:5d:03:37:3e:c8:34:7c:21:49:da:fe:
12:3d:79:02:ad:50:a0:de:8a:2d:5e:b8:4d:81:1c:
7b:a7:ba:97:51:6c:79:f3:ef:9f:2d:f1:e7:ac:e7:
75:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E7:23:EE:4F:94:25:7F:B3:8C:6D:05:40:43:F0:FB:7C:94:C7:23
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/8-cj7k-UJX-zjG0FQEPw-3yUxyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a340::/32
Signature Algorithm: sha256WithRSAEncryption
05:e3:f1:d4:37:02:e8:f8:e1:ce:b4:8b:09:25:0b:f2:56:a3:
4c:5a:75:45:45:89:cf:10:a6:b6:d5:b2:0a:cb:99:88:db:dd:
80:dd:46:f6:5c:a8:f4:61:23:05:e8:91:a8:48:8e:c5:82:f1:
68:21:4f:ef:4d:b3:65:7f:39:85:e7:d6:01:be:43:0d:84:94:
de:3e:13:09:ac:31:fd:c4:98:19:9a:2e:b3:46:c1:9b:82:96:
b9:e9:0f:4e:55:c6:84:9a:5e:03:3f:ed:9d:a5:44:2e:05:4f:
19:6b:39:1e:cb:32:2b:d5:61:90:9e:60:78:db:e7:ea:02:19:
2a:41:f0:68:8b:6a:b8:3a:ea:f6:44:e1:cc:cd:eb:5d:48:c1:
2e:28:08:72:52:ae:52:bd:63:6f:b2:2e:0b:4f:5a:01:1e:bd:
23:74:8b:3f:d7:f1:4c:cc:a5:6b:2a:0f:50:f1:0c:47:ac:2d:
0e:ac:54:00:20:32:58:36:63:52:71:6a:a3:6c:34:ee:38:42:
42:18:9e:03:f3:0a:be:a6:e3:28:81:86:f3:19:ee:76:34:63:
32:51:5b:50:ff:3e:b6:a5:b5:cb:ed:48:9d:eb:52:d4:54:13:
80:38:cc:fe:66:48:c2:16:93:10:73:7c:3a:06:8d:72:0a:4a:
f9:d2:1b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:47:37 2025 by rpki-client