Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/7_C2vZe58TpABz7zgHkMnnxn8ss.roa
File: 7_C2vZe58TpABz7zgHkMnnxn8ss.roa (raw, json)
Hash identifier: ztTAq3f2NjOpDNSinOwPqUs3+lt8q2RiB4g4lVEa7Jc=
Subject key identifier: EF:F0:B6:BD:97:B9:F1:3A:40:07:3E:F3:80:79:0C:9E:7C:67:F2:CB
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 38087F06
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/7_C2vZe58TpABz7zgHkMnnxn8ss.roa
Signing time: Sat 01 Jan 2022 04:04:06 +0000
ROA not before: Sat 01 Jan 2022 04:04:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59550
IP address blocks: 2a00:1ca8:3f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940080902 (0x38087f06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Jan 1 04:04:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eff0b6bd97b9f13a40073ef380790c9e7c67f2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:93:eb:1c:91:d0:fc:c3:79:dd:d3:71:fd:2f:
31:74:ad:31:71:0e:7e:54:bf:b9:e3:f3:47:78:9e:
94:0f:07:8f:88:40:fb:a6:8c:5a:96:90:8e:07:9f:
ea:02:bc:fd:7e:57:de:79:39:f4:1a:b4:73:af:88:
64:d1:69:20:02:fc:7e:57:c9:41:e3:46:49:62:5b:
d0:c7:d8:12:ae:d7:70:e9:b7:04:4f:ab:80:65:4e:
1d:f1:7a:e2:d6:a7:16:76:a5:e9:68:a5:94:83:70:
82:22:71:a7:cb:43:60:ad:0c:0d:4e:02:65:28:d4:
33:b2:a5:30:d6:db:92:95:a0:09:f7:db:ba:7f:ab:
34:c1:71:13:3a:b0:b4:47:fa:53:b4:dd:9b:da:ca:
23:57:d5:12:5e:d1:d0:5d:68:19:d7:4b:33:b7:dc:
02:6e:53:c6:51:5a:85:a6:6e:b0:04:5a:8e:60:0e:
0e:55:af:cc:ca:c1:ab:79:33:52:81:64:24:b4:df:
4d:de:0b:fb:4e:93:4c:c3:ae:3d:38:7d:5c:0f:0b:
12:66:01:06:bb:ca:4e:48:5c:09:13:bf:89:dc:8f:
96:27:49:e3:8e:2f:ee:c2:c5:f9:45:b6:21:36:f7:
20:84:36:a4:34:1f:41:3a:5d:3d:ce:4b:83:d8:b6:
66:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F0:B6:BD:97:B9:F1:3A:40:07:3E:F3:80:79:0C:9E:7C:67:F2:CB
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/7_C2vZe58TpABz7zgHkMnnxn8ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1ca8:3f::/48
Signature Algorithm: sha256WithRSAEncryption
38:6c:9b:06:43:db:43:23:b7:a6:83:6c:92:e8:92:7b:77:5e:
6b:d6:ca:1c:e3:a8:10:bd:e6:95:11:c4:1b:41:1e:d7:09:cf:
53:a7:9e:bd:67:c4:73:09:c8:bf:a0:1c:c9:86:20:48:8e:37:
c0:9e:9e:e5:47:c2:eb:31:9b:ed:07:c2:42:8d:9d:5a:6c:53:
9b:e8:8f:49:09:d9:46:b0:cd:16:85:20:1a:cf:93:1e:85:5f:
e8:6b:de:e5:8c:c7:51:df:a5:e8:15:fc:fa:a7:4f:ba:76:4b:
90:4b:82:f1:9e:11:d5:4b:22:e8:3b:b3:be:6a:85:a7:cc:e4:
38:0f:78:1f:9e:3e:46:ba:76:bf:db:ff:3c:e4:54:e3:af:de:
a8:71:44:bf:b5:b2:f3:20:68:73:c1:7d:7c:b4:bd:32:72:b9:
6c:84:d7:d1:47:e1:14:8f:a4:dd:0f:67:9e:de:c4:9c:2d:86:
54:de:20:8b:af:3d:63:98:ce:01:2c:14:8a:f0:47:50:3d:78:
71:db:23:27:83:1a:a8:8e:22:99:89:e5:84:a8:3e:45:96:48:
50:2e:c8:5a:c8:92:4b:d2:31:d4:76:40:0c:04:7a:70:ba:e3:
8f:4a:1f:97:ac:0b:cf:f4:44:f2:ea:76:63:0e:10:53:18:a1:
03:b3:fd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:27:04 2025 by rpki-client