Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0MrpDDujqrxT6QedJB2xHSgZ8Tk.roa
File: 0MrpDDujqrxT6QedJB2xHSgZ8Tk.roa (raw, json)
Hash identifier: z8jfo1QyKDR70pwyvhf30kMwLWj6V5TA6rvZTWq322Y=
Subject key identifier: D0:CA:E9:0C:3B:A3:AA:BC:53:E9:07:9D:24:1D:B1:1D:28:19:F1:39
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 021D2E12
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0MrpDDujqrxT6QedJB2xHSgZ8Tk.roa
Signing time: Sun 27 Feb 2022 13:14:35 +0000
ROA not before: Sun 27 Feb 2022 13:14:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50113
IP address blocks: 2a0f:df40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35466770 (0x21d2e12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 27 13:14:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0cae90c3ba3aabc53e9079d241db11d2819f139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a8:c9:39:86:2e:cf:ba:6c:84:50:dc:7e:41:
6c:2f:ca:cf:99:ac:06:1e:46:94:db:03:0c:a4:10:
42:a7:d0:bc:0a:3b:e9:fc:32:d6:7d:e6:fd:de:74:
a2:66:97:23:b7:e1:71:bc:ba:07:6c:35:e7:e5:50:
c0:8f:22:fd:a0:2e:b9:ca:81:3a:60:06:6c:7e:1a:
2d:4e:41:34:ad:4b:6d:ad:17:18:92:99:20:8c:2f:
54:e2:8c:6d:cd:3c:a9:bf:78:64:08:aa:61:ab:fa:
81:25:da:4d:f7:bb:a7:6c:75:19:1f:2d:83:73:dd:
31:6f:bf:6b:85:e8:1e:85:a6:2b:dc:b8:d5:19:57:
95:27:95:b1:5e:43:c1:dc:fb:61:e3:ff:73:ea:99:
38:29:85:b0:8d:43:7f:8a:a7:d8:ee:ee:ad:b8:37:
5f:9a:7f:f4:89:28:18:79:6d:e6:e3:7d:d9:8b:18:
33:b6:d2:f5:53:48:e5:5c:bf:01:71:f7:5f:70:a9:
f3:85:8d:31:f7:74:2b:26:0f:20:7f:08:cb:d8:aa:
c3:9a:57:5a:d1:58:bc:94:61:73:a2:12:05:1a:c7:
ae:7e:53:a3:86:9e:54:ab:ea:95:79:6b:a2:4b:31:
59:3f:2a:d1:3d:54:f6:8e:4f:c8:9f:3e:7b:71:04:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CA:E9:0C:3B:A3:AA:BC:53:E9:07:9D:24:1D:B1:1D:28:19:F1:39
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0MrpDDujqrxT6QedJB2xHSgZ8Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:df40::/29
Signature Algorithm: sha256WithRSAEncryption
21:8c:39:64:77:f5:c1:3f:93:b2:6c:2d:94:0e:e3:02:35:b9:
2e:9a:41:67:a6:f4:48:78:11:2e:df:8b:d8:8a:45:92:8c:33:
60:0c:82:ab:6f:d3:34:f6:0b:a5:eb:76:93:db:b3:40:f8:b8:
8b:e9:2f:6f:bb:ee:e0:88:94:58:5c:a1:5f:31:11:86:7c:e2:
af:ca:10:fd:0c:18:20:98:95:f0:c3:4e:28:ec:93:10:58:11:
01:cf:d3:be:b6:10:c8:82:91:0e:29:ae:d7:d1:21:c7:fd:8b:
d3:11:2d:52:f9:a6:dc:00:ae:eb:1c:52:da:50:1d:b5:a6:7a:
dc:14:37:07:4e:c5:05:b3:83:10:89:28:26:d3:29:b3:8b:4e:
28:5b:d9:a2:8b:6b:8d:04:28:49:05:49:df:8e:7c:2c:20:7a:
d1:2b:89:43:4c:4f:bd:76:19:2f:5a:3f:db:c6:2a:f6:41:ff:
2c:d8:e5:8d:97:20:f7:4f:4f:9d:b8:57:65:9d:66:65:58:0e:
0a:71:85:7c:00:b8:72:25:a6:fc:bc:82:22:a2:fe:a4:de:1f:
45:87:bd:bd:d1:d8:a5:ba:8e:e3:4b:f4:9f:7a:19:c9:09:dd:
e1:3e:d8:a4:cc:ea:f6:c1:38:b4:d7:6a:de:4f:d9:c8:32:c1:
88:3e:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:38 2025 by rpki-client