Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3-1GyaWdMWRS3-3ybT8Ved6Ex-c.roa
File: 3-1GyaWdMWRS3-3ybT8Ved6Ex-c.roa (raw, json)
Hash identifier: 2Oj68Lf7KGHcH97cDoHEuSThhJc0EKLskyNxnfWPu2s=
Subject key identifier: DF:ED:46:C9:A5:9D:31:64:52:DF:ED:F2:6D:3F:15:79:DE:84:C7:E7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018C48DB9C81324DAC8C76ABA7C98BC7FF15
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3-1GyaWdMWRS3-3ybT8Ved6Ex-c.roa
Signing time: Fri 08 Dec 2023 09:56:41 +0000
ROA not before: Fri 08 Dec 2023 09:56:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 2a0e:b107:27d0::/45 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:48:db:9c:81:32:4d:ac:8c:76:ab:a7:c9:8b:c7:ff:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 8 09:56:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfed46c9a59d316452dfedf26d3f1579de84c7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:6a:4a:b1:ee:d7:2f:61:89:f2:95:7f:0f:
a3:3b:8a:f6:ab:4e:e7:46:84:45:5f:a6:04:6e:5c:
df:12:d6:ab:a5:a5:6f:67:1c:18:72:61:9e:d7:1e:
98:1d:8c:ae:a1:88:42:79:41:09:49:51:78:82:2e:
9e:df:09:8b:1d:43:09:d4:94:87:c9:e1:b0:3a:20:
d2:6f:3c:e4:e0:57:2a:a1:1a:8c:18:ec:72:d2:22:
ba:cf:55:20:fc:4a:0b:b8:2d:9f:6e:a7:ea:47:b6:
61:7b:23:8f:d1:e6:88:68:16:ce:fe:79:10:cd:14:
f9:81:8a:cb:18:e4:e0:26:1d:60:df:46:ce:8c:84:
88:af:71:5f:c6:f2:b3:5d:b0:72:ed:1e:10:e5:75:
d1:56:d0:58:6e:5a:08:2d:0f:62:3b:e5:17:a6:c8:
a8:8c:78:8d:cd:6e:15:8e:e0:4a:14:aa:9c:03:ff:
51:23:40:32:f4:10:37:b1:55:9a:e2:e9:94:a3:7f:
5f:42:1c:9f:ab:3d:e7:32:6a:da:38:79:f2:57:f9:
cc:9d:83:20:86:29:14:18:a0:2d:c2:b9:07:6e:40:
fa:2b:5b:ce:e9:32:f6:ef:1e:31:42:6f:f3:34:06:
71:a2:c5:ea:b1:d6:fa:c1:5b:21:3a:f8:77:b9:3e:
7d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:ED:46:C9:A5:9D:31:64:52:DF:ED:F2:6D:3F:15:79:DE:84:C7:E7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3-1GyaWdMWRS3-3ybT8Ved6Ex-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27d0::/45
Signature Algorithm: sha256WithRSAEncryption
65:60:2b:db:d5:d7:31:cd:d4:43:c0:c5:4c:a9:e7:f0:3c:14:
8a:06:79:10:e4:3a:b3:90:5d:8a:6c:f3:ed:a7:10:2b:76:39:
43:21:c0:1a:66:6e:7c:ae:b9:06:a9:fc:e8:b9:79:13:dc:46:
f5:e2:13:f8:21:4f:b3:12:fb:80:e3:4d:f8:bf:62:57:cf:4b:
55:84:d8:a1:7e:a6:6b:47:c5:74:b1:88:55:43:41:bf:00:e2:
04:b8:48:6c:56:7d:7c:71:ed:90:4f:b7:1d:05:37:a7:68:96:
39:bf:e2:23:be:36:a8:46:25:55:6e:96:c0:df:2c:1f:46:33:
95:ff:1a:41:ab:33:4c:2e:7f:6e:89:44:fe:e9:44:87:3b:be:
6d:8e:d0:85:1d:77:4a:82:b3:35:11:7c:4e:fa:cf:d4:e3:c0:
0f:60:93:40:c3:4b:cd:f1:eb:9f:ac:22:0c:60:a8:b9:d6:25:
b0:e5:4b:28:83:4b:61:ce:73:35:7f:15:52:1c:4b:0a:5f:11:
a7:0f:11:34:9c:5b:7d:05:6b:83:89:00:3c:a5:42:ac:ca:f9:
2f:2d:ec:6d:b8:b8:c1:90:a7:19:7a:04:69:2c:76:ed:d4:70:
c7:91:be:69:bb:6b:bf:1a:60:61:25:1c:11:de:67:3c:0c:1d:
cc:fc:c2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:39:12 2025 by rpki-client