Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/u0RbtMy9h33sMqhPqMGepJCIaRU.roa
File: u0RbtMy9h33sMqhPqMGepJCIaRU.roa (raw, json)
Hash identifier: sGbxFdd30fFmlO0BoBrlaqSH5QHSa04iI5c/aCTwL7Y=
Subject key identifier: BB:44:5B:B4:CC:BD:87:7D:EC:32:A8:4F:A8:C1:9E:A4:90:88:69:15
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 0186D0DD5BCD7EFC0759BF418711D718E7DC
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/u0RbtMy9h33sMqhPqMGepJCIaRU.roa
Signing time: Sat 11 Mar 2023 13:30:13 +0000
ROA not before: Sat 11 Mar 2023 13:30:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 2a13:3f83::/32 maxlen: 40
2a13:3f80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d0:dd:5b:cd:7e:fc:07:59:bf:41:87:11:d7:18:e7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Mar 11 13:30:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb445bb4ccbd877dec32a84fa8c19ea490886915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:7a:67:76:d4:77:a4:b3:e4:6f:88:c4:23:
74:23:f3:3d:25:f9:1d:2b:82:b6:36:58:a3:7c:64:
53:75:6b:78:8e:bf:89:8c:e2:eb:8c:4a:12:62:43:
3f:f7:06:d5:48:88:67:fe:45:a4:1b:0c:59:aa:18:
25:8e:54:92:16:a2:2d:58:0b:9a:e1:79:42:02:18:
46:ee:24:fd:08:cd:a0:c7:76:ee:81:00:a0:29:d9:
94:26:51:b9:33:9c:e2:14:54:92:e2:ce:21:02:e5:
c9:28:e1:29:03:d0:04:e8:38:ec:25:3f:20:3d:77:
67:81:c5:d0:40:12:66:77:53:f9:53:86:7b:2d:ad:
e3:aa:ee:7d:d8:a8:f8:29:f6:d9:8d:ff:77:c3:f3:
ee:0d:90:92:52:34:df:16:e1:28:25:b9:be:e5:cd:
b0:05:ab:a1:c0:03:5c:71:49:ee:72:0f:e0:ee:0a:
c5:1d:16:7b:9e:18:67:63:67:8e:39:f1:87:b2:90:
74:83:2c:eb:20:32:23:72:6f:a1:5b:77:9a:be:7c:
80:26:fa:6f:1a:b9:28:48:2e:08:74:c5:b2:54:59:
fd:9a:68:f5:dd:fe:c7:2f:dd:a4:76:c2:0c:65:31:
86:97:4c:d0:50:de:f2:3f:b7:33:ef:df:bf:dd:01:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:44:5B:B4:CC:BD:87:7D:EC:32:A8:4F:A8:C1:9E:A4:90:88:69:15
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/u0RbtMy9h33sMqhPqMGepJCIaRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3f80::/32
2a13:3f83::/32
Signature Algorithm: sha256WithRSAEncryption
2d:76:60:6e:40:aa:c1:f2:ae:85:dd:87:91:55:73:37:17:6f:
4e:ca:2d:dc:be:f3:6c:36:7c:fe:97:69:2e:24:57:76:51:78:
02:f7:70:19:d3:5f:59:88:10:5a:67:85:84:97:11:fe:4d:ff:
8a:20:db:0e:df:34:63:92:c9:8e:6f:31:0c:0e:a6:bf:0c:ad:
1b:17:2f:db:61:58:93:9d:0e:60:e3:cd:38:02:56:47:58:42:
bc:85:73:f7:3a:94:03:a1:29:42:8a:e7:54:0e:72:09:80:75:
d6:c0:68:04:df:4e:79:19:92:66:ae:14:df:56:6e:b5:72:29:
6d:fa:00:cd:7c:37:03:4e:70:d6:af:04:50:88:96:ae:a2:2f:
86:7e:08:c8:fd:cd:fa:9b:df:61:1a:9d:23:3d:72:57:27:b0:
0e:3f:48:80:4e:76:fe:e3:cd:36:94:15:7e:1f:62:80:43:67:
26:77:6f:9f:41:55:ad:b6:d0:ea:06:58:b5:ca:07:ad:b1:3b:
e6:63:83:4a:b3:9f:e4:05:62:b6:9e:6c:c8:65:ef:11:91:a9:
eb:79:93:e0:aa:8d:fc:93:2e:bb:94:0d:b8:1d:e7:d5:3a:85:
91:e8:a7:09:5d:b0:d3:15:5b:3a:98:79:da:f8:8f:9b:df:7e:
59:fc:a6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:56:34 2025 by rpki-client