Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/fvRHfXAvFM7Iy4_A1ghSLbwrJlg.roa
File: fvRHfXAvFM7Iy4_A1ghSLbwrJlg.roa (raw, json)
Hash identifier: ASwjb/K5BU2z/c6fCK7Y//3w/GnURuE9j/v8wvTFVns=
Subject key identifier: 7E:F4:47:7D:70:2F:14:CE:C8:CB:8F:C0:D6:08:52:2D:BC:2B:26:58
Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial: 1B2EC12C
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/fvRHfXAvFM7Iy4_A1ghSLbwrJlg.roa
Signing time: Sat 01 Jan 2022 10:58:49 +0000
ROA not before: Sat 01 Jan 2022 10:58:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7171
IP address blocks: 2a00:ad40:200::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456048940 (0x1b2ec12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Validity
Not Before: Jan 1 10:58:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ef4477d702f14cec8cb8fc0d608522dbc2b2658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:a3:af:97:42:6e:0b:64:53:ca:e7:a0:f2:
b3:93:00:2f:75:b7:bf:02:d1:e4:fe:fb:5a:35:43:
7b:f0:04:04:d5:d1:87:e8:c1:98:66:4f:cb:7d:5b:
d6:19:76:d6:fd:c5:d1:dd:ba:1a:1b:f8:5b:c3:b3:
6a:1e:d9:b0:43:6a:26:51:c0:62:e5:90:b7:51:c0:
42:9e:fd:7e:8c:7f:2b:5c:93:9d:87:fe:ec:ab:5b:
b8:2b:a4:bb:f4:3b:7b:2c:10:4c:0b:2d:a1:f2:2f:
6c:ae:47:65:a3:d4:8a:24:d6:b8:51:65:1b:f4:30:
91:cf:95:a4:3d:d4:d9:13:24:c8:e4:6f:bf:97:b1:
f4:e0:d9:db:ad:d4:58:62:fb:88:30:ac:5a:47:56:
8c:5c:f3:93:e3:59:92:9e:57:70:66:1e:79:e3:d8:
ee:03:10:fc:2a:be:7e:f9:d7:18:66:2d:4e:68:51:
0b:c4:64:fb:ed:86:e1:ab:15:30:4d:4a:56:4a:62:
5e:fe:df:58:3e:aa:2b:c9:ef:d0:e1:20:90:52:a7:
4a:15:32:84:3f:45:a8:a3:b0:b8:6a:e0:e3:10:16:
ed:fc:c9:89:87:d5:ae:d8:56:db:f1:d3:f6:5f:5d:
15:3b:47:dd:11:e1:96:e7:c1:55:34:0c:4f:5c:77:
ee:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F4:47:7D:70:2F:14:CE:C8:CB:8F:C0:D6:08:52:2D:BC:2B:26:58
X509v3 Authority Key Identifier:
keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/fvRHfXAvFM7Iy4_A1ghSLbwrJlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ad40:200::/40
Signature Algorithm: sha256WithRSAEncryption
31:73:63:30:99:9d:ca:d4:53:2f:1e:06:00:0c:4e:f4:79:37:
4f:2f:b4:e1:aa:3b:94:c6:60:74:2b:13:e6:59:a5:fe:53:5d:
72:8e:60:c3:ea:30:84:5c:94:5c:08:a8:86:9d:67:25:89:1c:
03:a9:02:ee:ba:b7:7c:77:7a:0e:9c:64:74:1c:69:a7:56:83:
ba:0a:98:db:18:76:ad:7a:e3:74:03:a3:6b:1c:e5:94:9d:ed:
9d:58:64:b8:64:c1:d9:4a:7e:52:8d:ee:03:1e:5b:6e:51:64:
e4:fe:e6:3a:3f:ff:e5:c4:f0:47:00:5e:19:f5:45:5d:5e:29:
cc:10:6b:18:2e:12:3d:fb:59:68:1f:0d:4c:de:ee:e0:d4:47:
ec:7e:95:25:b0:98:68:c1:97:2d:0a:04:5d:48:dd:90:50:40:
72:3c:1f:8f:6e:5b:ec:48:86:49:29:cb:11:69:c7:95:46:7e:
4e:4e:5f:5d:33:d0:a9:6b:1b:b6:65:ac:47:8a:e4:5a:7b:69:
a5:a6:9b:79:fe:88:07:2a:e2:25:f5:7a:d1:8b:6b:aa:9b:ee:
f4:d4:19:b2:30:8e:da:87:95:ad:22:40:4a:e8:aa:c2:94:53:
7c:ae:35:be:43:73:7a:04:aa:e8:c5:14:90:72:e8:66:f5:7f:
4c:13:59:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:05:20 2025 by rpki-client