Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/AfcCOz3eYGc6gqPSdqt2q1wuLNI.roa
File: AfcCOz3eYGc6gqPSdqt2q1wuLNI.roa (raw, json)
Hash identifier: X59eCbuILEll8unBN2ZAdODtJV5PesWqiXBMp/VD1ds=
Subject key identifier: 01:F7:02:3B:3D:DE:60:67:3A:82:A3:D2:76:AB:76:AB:5C:2E:2C:D2
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018C7C82F46570A042EC496F83FAB320C92B
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/AfcCOz3eYGc6gqPSdqt2q1wuLNI.roa
Signing time: Mon 18 Dec 2023 10:40:06 +0000
ROA not before: Mon 18 Dec 2023 10:40:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216246
IP address blocks: 2a11:fc80::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:82:f4:65:70:a0:42:ec:49:6f:83:fa:b3:20:c9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Dec 18 10:40:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01f7023b3dde60673a82a3d276ab76ab5c2e2cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:79:d1:c9:20:d7:ac:7c:d3:a5:e2:6e:a9:3e:
2c:3c:c0:5b:8c:55:6f:a0:d1:91:93:36:62:3c:f5:
44:36:38:61:44:4f:40:24:a5:5a:d7:2a:fa:e1:3f:
0f:28:7e:e3:74:73:c3:be:b1:05:bf:11:dc:18:58:
1c:7f:64:c4:8c:4e:98:18:57:53:27:77:b8:51:a6:
25:83:ea:f2:3a:e4:25:7d:f5:81:fd:7c:d2:57:92:
00:df:86:8f:0c:bc:2f:c6:31:78:11:2a:18:0d:65:
88:02:44:dd:08:98:94:2f:0b:77:7a:91:16:5e:59:
d8:ea:ce:b9:03:ab:68:d7:fd:b6:10:6b:e3:c7:17:
e5:93:08:b6:3f:58:4e:c2:41:fb:20:12:4f:bb:af:
79:b7:cf:08:a3:63:1f:dc:cc:1d:4c:8e:77:a1:23:
00:9b:8f:dc:a6:5d:ce:d9:1b:88:8a:79:0d:8e:49:
b1:be:7a:33:6e:78:06:3d:6d:f0:63:f4:0f:c8:98:
d3:f8:a0:c2:f9:e2:d1:fc:08:1e:7f:0e:9d:83:77:
c5:f8:49:13:83:aa:29:ec:bc:4a:24:3f:e0:a8:42:
6a:b3:06:69:de:a9:8f:d6:0f:e0:0c:9b:1c:3c:77:
8b:08:9f:3f:58:ac:f5:7d:2e:b7:d4:8c:77:f6:f0:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F7:02:3B:3D:DE:60:67:3A:82:A3:D2:76:AB:76:AB:5C:2E:2C:D2
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/AfcCOz3eYGc6gqPSdqt2q1wuLNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:fc80::/30
Signature Algorithm: sha256WithRSAEncryption
46:c0:0f:a3:4c:ae:fd:93:56:03:a0:62:ba:ff:b1:04:77:b1:
ca:85:75:65:24:cd:59:5a:8c:0c:67:b4:ce:38:4c:fb:28:f0:
0a:7a:44:ae:f1:52:d7:f5:99:66:c6:34:f2:30:23:b4:fe:55:
9c:2f:db:cf:d3:2c:ac:58:29:58:32:89:4c:9d:40:be:3b:f2:
45:b5:92:1f:51:44:7d:f5:9f:d8:dd:28:8a:e4:db:db:d7:77:
7b:71:e2:45:ae:32:d2:ca:1c:3f:6c:b0:1b:e4:2a:e4:8f:51:
bd:18:f0:fa:6e:01:90:d5:46:51:d6:88:dd:62:7c:b7:0e:ac:
17:08:95:f3:74:6f:1c:b9:1f:38:cd:ec:d9:62:e3:84:d6:d6:
ba:5d:64:a2:de:22:c3:80:f1:48:0e:69:56:b4:81:7e:b7:d8:
07:dd:b0:ff:26:7e:60:47:cd:0d:d0:a0:03:65:b0:17:74:bf:
bc:b9:64:1f:ad:4d:f4:a1:6b:1e:a7:17:92:4e:ff:0f:e6:a1:
1a:6d:34:52:85:c1:21:d8:f2:e8:0e:6c:ec:89:38:e2:51:d1:
96:91:2a:85:d0:f4:c6:ca:b8:63:69:8e:00:26:b3:b5:af:d8:
e8:3f:c1:ba:01:6f:c3:99:80:13:9a:10:9c:c9:22:5c:c3:2f:
cb:3e:28:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:50 2025 by rpki-client