Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-ffo6lRSo6XT-LJNENBIzSrbOC4.roa
File: 1-ffo6lRSo6XT-LJNENBIzSrbOC4.roa (raw, json)
Hash identifier: jWooIC4zR4EDHsHyYuk3idVbAgejg4elLgUav/hqNAM=
Subject key identifier: F9:F7:E8:EA:54:52:A3:A5:D3:F8:B2:4D:10:D0:48:CD:2A:DB:38:2E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018A7443263A0D65CD6BF91BBC8A980D4017
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-ffo6lRSo6XT-LJNENBIzSrbOC4.roa
Signing time: Fri 08 Sep 2023 10:07:52 +0000
ROA not before: Fri 08 Sep 2023 10:07:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205544
IP address blocks: 2a0f:e6c6:1::/48 maxlen: 48
2a0f:e1c0:1::/48 maxlen: 48
2a0f:e6c7:1::/48 maxlen: 48
2a0f:e6c5:1::/48 maxlen: 48
2a13:e100:1::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:74:43:26:3a:0d:65:cd:6b:f9:1b:bc:8a:98:0d:40:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 8 10:07:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9f7e8ea5452a3a5d3f8b24d10d048cd2adb382e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:08:c1:1d:12:82:bc:19:dc:92:65:8e:39:0a:
63:34:be:12:5f:4b:2e:5a:8e:cc:c4:97:61:89:ac:
47:65:89:1b:b4:77:fb:f3:aa:ee:4d:fc:72:91:02:
d6:fe:7d:b6:b4:71:84:a4:55:c1:e4:28:1a:5b:6e:
1f:0b:11:33:2b:3c:9e:32:b7:cb:3b:d6:75:be:e5:
7a:0e:ac:ee:f0:a2:4a:1e:79:42:ec:53:88:dc:30:
ad:cf:af:05:9d:78:07:f3:5d:95:5c:52:a2:d7:b7:
de:ea:04:60:12:e7:f2:58:f9:f0:2c:d1:ca:d1:be:
d7:24:52:0f:9a:b7:76:e7:19:00:00:77:d1:fe:8b:
49:c4:8c:7e:3a:2b:2c:a3:79:9e:91:e6:f6:af:9a:
c1:a2:f4:83:18:3d:49:81:36:71:6a:46:29:23:84:
2e:1f:5b:67:e5:1a:2e:be:fa:99:e7:23:97:3f:ce:
9e:ba:d8:53:73:dd:f9:40:ad:a9:20:33:d5:c7:1d:
4e:e4:52:39:3e:eb:a7:be:e6:36:83:88:c9:ee:ec:
53:96:04:74:b9:28:34:aa:e2:8e:7c:ad:d1:04:f5:
d9:8d:7f:a4:94:0f:3e:e9:69:9d:5d:d0:7a:ec:9a:
3b:d1:50:06:fc:bf:8f:90:11:3c:c7:41:32:13:ca:
b3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F7:E8:EA:54:52:A3:A5:D3:F8:B2:4D:10:D0:48:CD:2A:DB:38:2E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-ffo6lRSo6XT-LJNENBIzSrbOC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e1c0:1::/48
2a0f:e440::/29
2a0f:e6c5:1::/48
2a0f:e6c6:1::/48
2a0f:e6c7:1::/48
2a13:e100:1::/48
Signature Algorithm: sha256WithRSAEncryption
6b:31:6a:f1:ca:b7:3b:17:aa:70:c8:c1:69:f5:4c:07:3a:43:
c3:3d:25:78:82:89:8f:0c:14:7f:21:bf:be:67:95:13:8b:29:
d3:d1:35:c2:bf:be:19:7a:9b:11:f3:1e:49:eb:02:71:d8:4f:
64:38:24:39:74:be:41:6d:18:f1:3e:bc:5e:0b:f2:d2:f7:10:
b1:ff:5a:19:dd:af:4f:37:eb:35:0f:08:ce:4d:d9:68:93:dd:
2a:86:50:60:cb:23:69:35:92:70:39:c6:0a:90:9f:45:5d:6f:
fb:b3:39:6e:1d:a1:ec:e9:30:07:4b:82:8f:17:7b:c3:91:6a:
ff:e4:23:90:b5:74:0b:9d:18:af:04:8d:fa:8e:72:08:3e:41:
2a:f0:81:ee:26:1a:d5:05:83:ff:37:3b:24:78:0e:57:bb:0a:
ab:40:7c:52:f2:c4:da:81:d1:0f:bb:94:b7:4c:4e:81:60:77:
a6:fc:e1:04:a1:2c:aa:6c:a1:cb:38:db:5f:5e:ad:3d:1f:1d:
5f:78:9b:23:df:b8:b0:88:52:49:1e:13:31:b6:ee:3d:71:4b:
c9:dd:bd:00:a0:89:88:9e:b4:dc:c8:b5:a2:07:fb:b4:46:3a:
80:29:ff:32:49:8b:af:b9:ba:a2:67:b1:13:c4:d6:d4:fe:49:
45:21:b4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:17 2025 by rpki-client