Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/9UEjzVV3BGinGOz24ir8hXHdZ1o.roa
File: 9UEjzVV3BGinGOz24ir8hXHdZ1o.roa (raw, json)
Hash identifier: f22oF1uiqsQGK03/7UeKkD+eYyLMQnaDVLhKiYKhzhU=
Subject key identifier: F5:41:23:CD:55:77:04:68:A7:18:EC:F6:E2:2A:FC:85:71:DD:67:5A
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018AB0AEF3F890F7D4E1762694092E47DE7D
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/9UEjzVV3BGinGOz24ir8hXHdZ1o.roa
Signing time: Wed 20 Sep 2023 03:42:50 +0000
ROA not before: Wed 20 Sep 2023 03:42:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25198
IP address blocks: 2a13:3884::/30 maxlen: 30
2a11:5780::/30 maxlen: 30
2a11:5784::/30 maxlen: 30
2a13:3880::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b0:ae:f3:f8:90:f7:d4:e1:76:26:94:09:2e:47:de:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Sep 20 03:42:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f54123cd55770468a718ecf6e22afc8571dd675a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:f9:57:07:63:37:71:15:df:04:ff:34:08:
af:e8:48:4e:0d:a5:08:27:97:d8:28:92:7d:15:0c:
e7:4b:c6:53:71:17:d1:1c:98:fd:e9:32:05:02:e6:
e8:be:23:2d:5e:30:ab:9b:f1:f9:50:4c:0a:81:bb:
4e:0c:9d:46:4d:4f:8c:c8:f1:22:9f:df:fa:aa:da:
75:9f:f9:89:57:5b:b0:bf:29:e1:04:27:c3:62:05:
aa:39:01:d4:d0:84:5d:f5:97:c0:93:04:4d:9f:bb:
16:df:05:d8:2d:9f:35:ac:26:93:be:66:fb:c9:3a:
7a:36:15:fa:f4:60:76:8a:b2:57:4e:1b:f5:a8:0d:
d0:6e:bd:72:2c:83:d2:a7:4b:fd:d2:d8:e8:b4:48:
a1:d5:e4:24:80:4a:2b:63:8f:0a:4a:b0:6c:36:32:
1b:b2:70:e2:df:87:03:5a:74:89:36:03:2e:9a:32:
f5:a1:20:a1:24:88:62:27:3f:91:fd:2d:c2:de:c1:
66:c3:09:38:68:f2:5e:1c:1c:5a:76:e2:6a:9b:3a:
fc:e0:49:63:28:94:c2:5c:54:15:e0:c2:67:8b:47:
a4:91:aa:24:2b:8d:77:dd:e2:05:6c:55:cb:9a:56:
7c:ba:f4:c2:fd:fd:7f:13:c1:76:8a:f7:bb:3b:8d:
06:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:41:23:CD:55:77:04:68:A7:18:EC:F6:E2:2A:FC:85:71:DD:67:5A
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/9UEjzVV3BGinGOz24ir8hXHdZ1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5780::/29
2a13:3880::/29
Signature Algorithm: sha256WithRSAEncryption
74:af:55:bc:66:ab:57:7d:3f:40:35:3a:70:32:8d:40:ed:58:
89:37:24:5d:86:8a:e2:bb:41:65:c4:ce:8a:9c:82:ca:a1:6b:
35:69:77:fc:20:6c:ee:3c:06:02:d4:42:4a:b4:a9:b0:20:55:
0c:bc:6e:24:5f:41:76:ee:99:32:34:ae:af:05:38:bb:7b:15:
13:80:3e:e1:14:61:14:d2:15:18:8f:11:7c:15:dd:dc:99:9e:
80:fb:ec:51:3c:dd:c0:f2:c5:80:ce:9c:7d:93:25:74:a6:ca:
22:77:44:8a:94:10:9a:9a:ff:ad:ef:67:06:45:88:56:5c:b4:
c5:bf:22:9a:94:ba:64:ea:5b:ca:41:cb:4e:18:a0:a7:ef:53:
5e:20:6b:f1:7b:70:a6:25:8e:d7:f1:6e:75:42:1a:8f:ef:ba:
4b:43:6e:28:be:46:25:35:d0:61:d4:4c:88:d9:fb:5e:cf:00:
02:f6:73:3f:2c:a6:cd:ed:e3:5a:e6:e1:4a:7d:85:c8:88:0d:
bc:43:11:fc:26:34:6e:b9:93:ca:74:d3:f1:4c:f5:ab:d5:9f:
79:cf:1d:3d:94:b7:a7:6e:8a:b8:0b:a2:ce:f2:1a:4c:90:3d:
74:ea:94:e2:ba:2b:2a:ec:0f:eb:28:f4:45:74:e6:a2:a4:30:
2e:23:38:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:31 2025 by rpki-client