Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/08mHG3ZI0yvYtmJNjIRIvcvHGZE.roa
File: 08mHG3ZI0yvYtmJNjIRIvcvHGZE.roa (raw, json)
Hash identifier: fUmi79BpJQVax7hIV/qwsMspSUCEiO/soM9q6N/FLX8=
Subject key identifier: D3:C9:87:1B:76:48:D3:2B:D8:B6:62:4D:8C:84:48:BD:CB:C7:19:91
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 01887CFEC845FAC1CB0965E90ACC6915355F
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/08mHG3ZI0yvYtmJNjIRIvcvHGZE.roa
Signing time: Fri 02 Jun 2023 16:44:12 +0000
ROA not before: Fri 02 Jun 2023 16:44:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 2a03:5000:21::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:fe:c8:45:fa:c1:cb:09:65:e9:0a:cc:69:15:35:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jun 2 16:44:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3c9871b7648d32bd8b6624d8c8448bdcbc71991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:46:08:c4:84:62:91:7a:6c:3e:b0:a5:4d:
6e:b7:94:88:79:64:26:31:fa:81:a2:be:c7:31:88:
93:f2:cc:5e:d4:9d:ac:a7:28:f8:64:5d:88:da:d9:
a9:2e:9e:ef:41:a8:0a:f3:8b:8f:e8:11:0b:b0:19:
bd:42:b5:b3:3f:65:86:f0:84:86:60:79:87:29:73:
e6:90:12:50:7b:43:5d:49:50:9c:f3:e3:92:7c:41:
30:73:ba:f5:09:11:d6:e4:da:61:11:bb:58:08:e8:
3f:13:38:72:6c:db:4a:e0:e8:33:f2:e1:cd:15:25:
de:1e:4a:97:ec:cc:bc:a4:76:a7:a9:36:58:0b:ea:
d7:c0:16:98:ed:20:b2:fe:e5:7f:ea:2a:01:f5:80:
6a:5e:ea:15:63:77:8f:3d:39:44:f5:12:26:11:5c:
77:2e:ed:63:2e:be:d2:b3:7a:f3:ef:89:92:b4:53:
76:e4:4b:14:e1:95:54:30:3c:41:df:00:07:1f:79:
eb:84:48:ab:9f:7b:2f:5b:d6:2f:dd:1c:1e:94:14:
64:73:82:a4:9f:68:78:07:72:81:c0:cb:8c:6d:f6:
03:18:97:57:16:f6:b2:93:61:2a:11:44:f0:c1:69:
ee:6a:7a:1e:b7:d4:e6:da:c5:f7:b1:d0:dc:6f:69:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C9:87:1B:76:48:D3:2B:D8:B6:62:4D:8C:84:48:BD:CB:C7:19:91
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/08mHG3ZI0yvYtmJNjIRIvcvHGZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5000:21::/48
Signature Algorithm: sha256WithRSAEncryption
5d:63:44:91:66:a1:1a:ee:63:14:b6:46:29:73:0b:1d:6b:35:
b0:5e:b3:66:a3:57:8d:39:26:c5:9c:c4:85:7b:d7:cf:67:48:
6a:93:fb:e4:00:bd:62:25:34:54:eb:73:17:e0:77:a2:0e:47:
87:b9:39:44:af:8e:b0:b3:ec:b2:c7:63:ab:7a:9f:17:e3:b0:
c2:77:df:4d:1d:f2:40:3d:60:7d:8d:d7:ad:38:6c:b8:05:fd:
cb:d6:ba:ed:46:09:67:ec:c0:3b:9d:46:58:b5:2e:bc:b5:33:
40:0d:a8:36:33:8d:15:1a:63:9c:5d:46:00:2b:be:c4:1e:6e:
17:20:fc:25:96:bf:05:06:a1:74:6f:f4:99:01:cf:fd:fa:3d:
c6:2d:a0:f9:84:4e:d5:ef:87:eb:a2:1c:2d:00:ee:87:e3:c4:
db:c7:5d:2d:11:7d:52:3b:26:b1:13:52:77:5a:4c:a1:8f:c0:
49:1b:b9:35:ad:6d:ef:a8:33:bc:c9:d6:87:6b:ea:d8:f2:12:
fe:39:d1:96:e2:72:a8:9e:95:19:a8:41:99:70:2c:4b:22:d1:
98:2a:82:d9:13:90:8f:6b:f7:de:b5:97:b5:cb:55:5a:c8:b6:
0d:31:53:17:9f:2e:b2:e3:3c:19:15:49:b9:26:67:f2:4f:ba:
62:21:1c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:45:56 2025 by rpki-client