Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-EOOQAh3kFvhsipjYN4hv50AicQ.roa
File: 1-EOOQAh3kFvhsipjYN4hv50AicQ.roa (raw, json)
Hash identifier: apiFzeymsJQDaGM9+Dx5nFda7jBK4gl1z4xJbIqslYo=
Subject key identifier: F8:43:8E:40:08:77:90:5B:E1:B2:2A:63:60:DE:21:BF:9D:00:89:C4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0189E915ACC0190C8731A55893345B13A25F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-EOOQAh3kFvhsipjYN4hv50AicQ.roa
Signing time: Sat 12 Aug 2023 09:30:58 +0000
ROA not before: Sat 12 Aug 2023 09:30:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a0f:7d00:1::/48 maxlen: 48
2a0a:2d00:1::/48 maxlen: 48
2a0c:7884::/32 maxlen: 32
2a0f:ea00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e9:15:ac:c0:19:0c:87:31:a5:58:93:34:5b:13:a2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 12 09:30:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8438e400877905be1b22a6360de21bf9d0089c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:10:de:39:8e:42:66:a6:02:2c:d0:20:10:
58:84:87:52:f0:83:c2:70:60:f5:e2:3e:ae:04:c8:
1a:ae:69:86:62:a9:ea:bb:3d:7d:b3:7d:5d:3a:bc:
df:0e:ea:d3:62:ee:9e:53:57:0c:00:0e:27:3f:d1:
29:66:07:81:d6:28:83:43:79:a7:1f:b4:4f:a8:02:
20:6a:79:29:2d:97:57:c1:dc:4c:d1:1d:f6:b9:6b:
57:00:de:79:e2:8a:07:b6:19:43:12:16:9b:53:44:
3a:cb:3f:6d:9c:d7:66:5c:3a:ae:cd:99:24:48:88:
1d:32:63:c0:4e:26:d5:9f:a0:2d:e9:4f:96:21:1b:
41:d9:00:36:c7:4d:1a:67:d2:bc:5b:47:df:1c:13:
d9:3c:2a:e8:22:c3:9a:09:1e:86:0c:bd:59:9c:30:
9c:8c:f1:6a:e5:c1:96:3c:bc:80:76:76:4d:3a:3a:
32:d5:0f:17:16:85:e2:93:c9:4e:de:c2:98:d4:28:
cb:47:6d:f1:a0:d7:7a:32:0c:5e:cb:ab:4e:67:3f:
35:74:95:4f:5a:35:40:1a:4e:15:0d:9f:b3:af:a3:
64:c9:e3:5e:8a:cb:a6:d7:2c:17:13:34:c6:7c:ae:
50:ef:7c:d4:c1:e5:da:26:98:4a:e2:84:ff:7f:46:
f6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:43:8E:40:08:77:90:5B:E1:B2:2A:63:60:DE:21:BF:9D:00:89:C4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-EOOQAh3kFvhsipjYN4hv50AicQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d00:1::/48
2a0c:7884::/32
2a0f:7d00:1::/48
2a0f:ea00::/29
Signature Algorithm: sha256WithRSAEncryption
95:a1:92:88:99:d4:90:47:22:e8:a1:30:a7:ab:ff:fa:e2:7b:
21:db:83:91:e1:4e:04:3f:21:63:b7:51:15:74:6a:08:c4:d3:
14:22:a6:03:9b:23:04:f8:b9:be:ad:d3:59:8c:67:a2:15:d2:
95:f3:ea:bf:e3:bf:bc:c4:26:0b:f5:6b:f7:b4:e2:31:65:97:
10:c5:16:d7:6c:83:0b:14:ca:a2:e6:a6:63:34:48:65:15:34:
15:ee:e3:2f:af:1b:40:5b:52:bb:e2:4b:4e:11:a9:78:51:7a:
b1:88:fd:36:28:a9:15:4a:62:2a:7f:06:5a:9c:ea:3f:1e:e5:
a9:79:71:0d:02:bd:2b:03:1a:82:f8:c9:8c:26:d3:e3:b1:7a:
44:63:d3:71:30:e5:76:3d:e7:ed:4f:bd:9e:18:a1:ca:65:90:
60:ac:5b:6f:2b:50:f9:e2:7d:f1:50:28:6a:77:56:95:69:f4:
16:55:9a:92:4e:3a:06:f0:8d:64:33:70:12:9c:23:ca:fc:d2:
8f:07:d6:49:83:f8:54:da:07:ce:ac:3b:c0:d7:15:18:7c:3e:
a6:26:4a:48:03:02:91:4c:8e:4a:98:9f:81:76:ac:f8:23:35:
f0:0d:07:59:96:e2:e1:03:59:f5:aa:1c:0a:27:86:f9:f4:40:
20:e5:5c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:43 2025 by rpki-client