Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/RF4I_XxBEVVlirGTpGWtCjQoED0.roa
File: RF4I_XxBEVVlirGTpGWtCjQoED0.roa (raw, json)
Hash identifier: PRH42UyGUg3K2uNqzqqd/Y7A307QhyUIUsh5V8ykXd8=
Subject key identifier: 44:5E:08:FD:7C:41:11:55:65:8A:B1:93:A4:65:AD:0A:34:28:10:3D
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01867CB53A8CF721BDEC516C21250904A377
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/RF4I_XxBEVVlirGTpGWtCjQoED0.roa
Signing time: Thu 23 Feb 2023 05:18:17 +0000
ROA not before: Thu 23 Feb 2023 05:18:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49492
IP address blocks: 2a12:a347:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7c:b5:3a:8c:f7:21:bd:ec:51:6c:21:25:09:04:a3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Feb 23 05:18:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=445e08fd7c411155658ab193a465ad0a3428103d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9c:4c:fe:35:fa:dd:e0:d8:89:b6:16:fb:34:
e8:de:06:0c:8c:bb:fc:bf:2b:e1:88:7f:54:f5:3b:
65:ab:76:6f:2b:d6:87:db:4c:3b:ce:de:d6:78:a3:
d7:fa:88:8a:ef:da:d4:f7:75:04:ae:72:49:95:13:
4e:79:cc:4d:3e:9a:d7:95:3d:ce:8c:80:46:56:a1:
e3:14:b8:8d:13:71:01:1d:1a:5b:ff:fe:e0:d4:97:
52:0c:ce:49:87:76:fd:96:09:92:cd:70:a4:56:ab:
45:90:cb:32:8a:c0:cc:59:3a:a1:bc:12:3c:ae:8c:
f9:bf:4b:d5:86:84:44:7b:4b:e6:3a:cb:f8:8b:62:
b3:b2:c8:e1:47:3c:49:6b:3d:db:a0:15:77:66:9d:
50:e8:3b:ff:26:ca:d3:73:27:13:80:dd:ad:d3:4e:
ae:93:2e:da:d1:90:3a:8e:d3:0a:15:79:0d:33:1b:
4b:e6:df:bb:a6:82:e9:e2:25:5c:a7:0c:fb:53:9b:
88:00:aa:87:e6:24:6a:b4:84:4b:6f:27:82:bf:ea:
01:8b:66:79:99:bf:68:94:27:bb:47:5f:ed:06:ff:
7a:54:ea:ea:70:02:41:2a:6c:e9:47:ec:55:92:37:
22:61:a2:ec:50:18:8f:fd:52:70:62:d9:c2:3b:3a:
40:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5E:08:FD:7C:41:11:55:65:8A:B1:93:A4:65:AD:0A:34:28:10:3D
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/RF4I_XxBEVVlirGTpGWtCjQoED0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a347:1::/48
Signature Algorithm: sha256WithRSAEncryption
20:3b:70:8e:8b:66:05:a0:8e:37:c2:bf:6f:47:77:5b:53:c8:
ef:12:87:80:46:f7:13:f3:af:5d:2a:6d:f7:cf:23:61:ae:63:
16:9f:93:aa:e2:15:78:f0:91:8e:d6:5d:0b:07:7a:18:26:58:
50:06:e0:0a:3a:14:e9:60:0f:10:5b:0b:c3:09:39:bc:03:66:
31:c2:f7:a5:94:7a:8b:de:ed:55:81:c6:3e:eb:53:ab:ce:34:
9a:49:99:3c:00:45:88:35:07:b9:5b:96:26:bf:51:86:24:98:
95:94:35:ee:17:3c:90:87:98:88:0e:e3:a1:6d:cb:6c:ec:62:
97:9f:92:f9:a2:a2:1f:e9:ff:79:78:c8:80:af:79:23:14:d4:
92:7b:83:1e:7a:5c:dd:6b:0b:5d:84:fc:2c:34:9b:f7:03:be:
e0:bc:70:5d:54:2d:ff:0e:d2:fa:3b:21:a6:61:c5:53:4e:cc:
f6:d3:34:2d:7a:a8:8d:f9:45:a7:0a:d0:5c:b8:c7:48:e3:cb:
58:1b:7f:30:7b:f4:07:f8:09:d5:a1:d4:35:18:c0:6b:ed:a2:
34:cb:66:76:e4:f8:e0:f5:a2:37:dc:dd:30:c5:b4:de:ea:d3:
cd:40:8d:f9:00:4b:06:de:41:f3:3d:57:8c:ab:de:46:54:b4:
f5:79:07:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:29 2025 by rpki-client