Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/upCUDlRH6QL2j_F__aTeLD6e-ms.roa
File: upCUDlRH6QL2j_F__aTeLD6e-ms.roa (raw, json)
Hash identifier: rqHP3NSzH3Wrrf9/2wXhovX6iLAp3u1YBIxXu0SUdkc=
Subject key identifier: BA:90:94:0E:54:47:E9:02:F6:8F:F1:7F:FD:A4:DE:2C:3E:9E:FA:6B
Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial: 01856C812C3E02478BF46A82D1ED434EEC07
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/upCUDlRH6QL2j_F__aTeLD6e-ms.roa
Signing time: Sun 01 Jan 2023 08:44:42 +0000
ROA not before: Sun 01 Jan 2023 08:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207880
IP address blocks: 2001:678:b6c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:2c:3e:02:47:8b:f4:6a:82:d1:ed:43:4e:ec:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Validity
Not Before: Jan 1 08:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba90940e5447e902f68ff17ffda4de2c3e9efa6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6d:35:5f:f5:03:7a:c9:67:e7:23:42:db:70:
17:3d:e6:9b:f3:5f:9a:90:0f:e1:08:70:a8:ea:37:
ef:0c:e6:88:16:12:2b:40:57:3f:03:b2:76:85:63:
fc:30:e6:e5:15:d7:e5:5a:eb:e9:77:6d:6b:f8:6f:
92:31:fb:b2:bb:f0:e1:e6:34:c7:f8:1b:68:a0:b3:
53:91:de:62:21:ce:01:d1:a9:47:15:a0:6c:a3:30:
e3:0d:f1:71:94:60:63:c7:9a:11:6a:52:8c:29:9b:
b9:ed:8d:4f:85:b9:80:b8:ab:06:29:c2:1f:b6:86:
c0:58:ff:fd:4b:82:df:20:52:f1:69:29:f8:9e:0f:
bf:56:63:da:e1:d2:b3:92:70:af:51:00:8a:60:09:
b2:56:7c:50:b2:25:c6:28:d1:58:a9:15:09:76:08:
02:6b:78:45:01:74:a7:39:e2:d4:18:6a:4a:a6:16:
d4:58:46:9d:72:78:3a:21:5e:67:64:02:56:d0:dc:
e5:bb:e8:79:40:c8:b4:fc:19:b1:c2:db:dc:34:1a:
82:ba:00:12:e9:36:b4:7a:24:45:e4:b1:71:c7:81:
29:c0:fa:39:b7:d7:fb:0e:7c:c7:29:b4:af:71:ab:
42:3f:49:d3:42:bc:33:57:54:a0:b4:76:24:d9:7f:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:90:94:0E:54:47:E9:02:F6:8F:F1:7F:FD:A4:DE:2C:3E:9E:FA:6B
X509v3 Authority Key Identifier:
keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/upCUDlRH6QL2j_F__aTeLD6e-ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b6c::/48
Signature Algorithm: sha256WithRSAEncryption
36:60:64:1a:d7:ed:be:52:fa:97:61:aa:91:c6:88:39:08:f4:
dd:0b:82:7a:67:35:a4:4a:39:5f:b8:69:3c:91:75:94:19:8b:
5d:89:33:ed:68:39:1d:42:17:f1:0f:07:d0:65:bc:0b:fc:e1:
6d:71:c0:24:2c:7f:66:e1:b2:2d:48:72:c9:5a:28:37:75:ad:
d8:6d:11:f1:4b:b2:64:5c:3f:3a:b5:e5:b1:3c:5f:5a:ee:c5:
82:d7:de:08:d6:0f:c5:66:58:40:28:d7:24:4f:96:4b:fa:09:
5d:79:ea:ac:c3:98:cf:c8:14:db:a1:df:eb:c4:f5:96:22:6f:
7e:81:ab:6c:20:d5:4a:14:7b:4c:72:3c:a4:33:8b:f5:bc:26:
5b:0a:65:a1:8d:cd:8f:38:23:65:18:07:bd:d7:3f:7c:f7:6e:
83:96:84:a4:08:bc:d1:85:2c:7c:ed:8b:42:8a:f4:14:5c:ea:
c0:29:37:fc:16:dd:4d:a7:cd:50:7e:2d:3a:21:32:cb:de:8d:
bf:16:59:09:bf:9e:a6:f3:64:f6:e3:b6:9f:5a:4c:b9:e6:c2:
ab:c1:81:29:e8:44:cf:10:d2:a4:04:c4:8b:f5:a2:cb:b3:d0:
0c:b8:00:fd:70:f8:3a:5a:b2:0f:ca:a8:44:9d:30:5b:d1:dc:
a0:9b:0a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:03:21 2025 by rpki-client