Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-eNY0UWiH2Guxz36PgRlec89mcI.roa
File: 1-eNY0UWiH2Guxz36PgRlec89mcI.roa (raw, json)
Hash identifier: IgKeZ/6pvIvzRBSNZCx+XskGtfhLHA9tgmiM1FFylnQ=
Subject key identifier: F9:E3:58:D1:45:A2:1F:61:AE:C7:3D:FA:3E:04:65:79:CF:3D:99:C2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0186715E19C4A9BA1627D3DAFA7C3C700F1D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-eNY0UWiH2Guxz36PgRlec89mcI.roa
Signing time: Tue 21 Feb 2023 00:27:17 +0000
ROA not before: Tue 21 Feb 2023 00:27:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 2a0e:5800::/29 maxlen: 29
2a13:1940::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:71:5e:19:c4:a9:ba:16:27:d3:da:fa:7c:3c:70:0f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 21 00:27:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9e358d145a21f61aec73dfa3e046579cf3d99c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:e3:c5:64:eb:3b:77:1c:9e:63:79:c6:e1:
ec:72:6a:62:6a:07:2b:af:56:7e:16:0c:fe:69:4c:
5f:0c:4a:39:55:6f:cd:8c:31:47:45:14:44:17:f3:
a3:28:1f:50:66:e7:80:e1:a6:69:bc:f9:5f:f2:c1:
f1:95:2c:66:90:6c:81:8b:bc:39:4f:ca:7d:6f:c4:
f3:91:30:1e:8d:40:7a:94:10:a7:b4:a8:40:7a:3d:
24:a6:4a:75:80:1d:cd:57:57:d1:ea:71:df:18:0f:
f5:a0:9a:00:6e:ba:04:4c:53:e9:ac:00:26:fd:52:
6f:11:f6:03:19:0c:76:80:dd:6d:4a:05:22:06:c1:
b6:c2:a9:a5:23:44:1b:11:2d:e4:e8:dc:b1:df:0a:
f1:0a:85:67:05:d2:a1:dd:0c:c4:27:97:09:e6:96:
60:c1:78:82:88:02:e8:98:2d:07:78:49:9c:92:cb:
f6:e6:2d:36:29:f7:cc:75:4e:06:25:f4:10:51:64:
01:98:08:e4:90:cd:2a:af:14:7d:95:af:e0:dd:a9:
74:10:86:24:5b:2c:9d:3e:74:1f:d1:67:04:c9:2d:
a6:3a:ac:2e:41:e6:48:16:23:cc:ac:a8:37:1f:ff:
7e:10:36:04:2e:ca:f1:77:3f:86:4e:a3:85:d7:2e:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E3:58:D1:45:A2:1F:61:AE:C7:3D:FA:3E:04:65:79:CF:3D:99:C2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-eNY0UWiH2Guxz36PgRlec89mcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5800::/29
2a13:1940::/29
Signature Algorithm: sha256WithRSAEncryption
2b:ea:c2:1f:a9:9c:5e:b7:4c:32:00:ab:f2:12:68:50:c3:e2:
82:03:98:46:97:57:06:77:92:65:55:25:5f:7f:47:e8:c8:08:
cb:d0:89:08:e4:94:6e:3b:ec:83:9d:32:76:7e:63:cf:8e:15:
65:42:0f:dc:9a:76:05:2c:eb:15:a4:dc:c3:c3:75:e7:de:bb:
60:84:02:3c:90:ff:0f:f4:77:13:0b:e6:13:0e:96:45:a3:96:
bb:e2:df:19:aa:9a:b9:25:e2:e5:a4:e4:74:68:c6:37:5e:f0:
12:fe:5d:6b:51:ab:70:c6:7b:80:10:b8:39:65:0d:11:14:4e:
d0:26:48:42:04:7d:2e:1e:f0:67:0e:49:ce:31:46:ab:dc:ad:
77:ea:23:42:2f:bf:9e:9b:21:2b:64:c2:ce:c3:8e:50:0f:9d:
c7:64:a9:d8:7b:25:75:17:89:32:87:aa:c7:ae:f0:88:ea:20:
c3:a7:6e:3a:a8:fd:58:dd:c5:80:36:52:fb:4e:69:32:ad:aa:
69:8d:6b:72:1b:7d:75:21:51:13:7f:22:df:27:86:40:e0:f5:
8c:2f:b2:13:e8:a9:91:54:3f:98:1f:88:18:7e:16:98:f3:d4:
36:e1:70:20:43:32:ea:83:a5:44:b5:39:3e:5a:dc:34:f4:da:
c7:7e:32:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:58:39 2025 by rpki-client