Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1F7_CdZ4CwC0-8vvNRS-zZwkP7w.roa
File: 1F7_CdZ4CwC0-8vvNRS-zZwkP7w.roa (raw, json)
Hash identifier: 3S99nB6jW+6zitLo6xz7n1AKP38sVfxdZ3hQSPO9c5Q=
Subject key identifier: D4:5E:FF:09:D6:78:0B:00:B4:FB:CB:EF:35:14:BE:CD:9C:24:3F:BC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01853157A72F8356724AB5F631B55EF673F0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1F7_CdZ4CwC0-8vvNRS-zZwkP7w.roa
Signing time: Tue 20 Dec 2022 21:01:46 +0000
ROA not before: Tue 20 Dec 2022 21:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201364
IP address blocks: 2a0f:2705::/32 maxlen: 32
2a0f:e9c0::/32 maxlen: 32
2a0f:dd42::/32 maxlen: 32
2a0f:ee05::/32 maxlen: 32
2a0f:db41::/32 maxlen: 32
2a0b:b740::/32 maxlen: 32
2a0f:dd43::/32 maxlen: 32
2a0f:ee04::/32 maxlen: 32
2a0f:2704::/32 maxlen: 32
2a0f:db42::/32 maxlen: 32
2a0f:dd41::/32 maxlen: 32
2a0b:b746::/32 maxlen: 32
2a0f:dd44::/32 maxlen: 32
2a0b:b742::/32 maxlen: 32
2a0f:db46::/32 maxlen: 32
2a0f:2707::/32 maxlen: 32
2a0f:dd40::/32 maxlen: 32
2a0f:e9c6::/32 maxlen: 32
2a0f:e9c5::/32 maxlen: 32
2a0f:ee07::/32 maxlen: 32
2a0f:db43::/32 maxlen: 32
2a0b:b743::/32 maxlen: 32
2a0f:e9c2::/32 maxlen: 32
2a0f:db40::/32 maxlen: 32
2a0f:ee01::/32 maxlen: 32
2a0b:b744::/32 maxlen: 32
2a0f:db44::/32 maxlen: 32
2a0f:dd46::/32 maxlen: 32
2a0f:2701::/32 maxlen: 32
2a0b:b745::/32 maxlen: 32
2a0f:ee02::/32 maxlen: 32
2a0f:e9c3::/32 maxlen: 32
2a0f:2702::/32 maxlen: 32
2a0f:dd47::/32 maxlen: 32
2a0f:db45::/32 maxlen: 32
2a0f:ee03::/32 maxlen: 32
2a0f:db47::/32 maxlen: 32
2a0f:dd45::/32 maxlen: 32
2a0b:b747::/32 maxlen: 32
2a0f:e9c1::/32 maxlen: 32
2a0f:2700::/32 maxlen: 32
2a0f:e9c4::/32 maxlen: 32
2a0f:2703::/32 maxlen: 32
2a0f:ee06::/32 maxlen: 32
2a0b:b741::/32 maxlen: 32
2a0f:e9c7::/32 maxlen: 32
2a0f:2706::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:31:57:a7:2f:83:56:72:4a:b5:f6:31:b5:5e:f6:73:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 20 21:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d45eff09d6780b00b4fbcbef3514becd9c243fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:35:97:c0:0e:12:87:e8:bc:7f:26:4a:bf:
6c:ab:eb:42:e7:fa:34:01:4e:18:ab:e0:39:94:e0:
7f:f7:71:8c:7b:4b:da:87:42:52:91:ea:49:7c:3a:
2e:64:0b:68:76:c0:53:4d:66:79:bc:7b:4b:9f:1d:
f6:62:d5:66:bf:00:0f:b4:d6:f7:d0:f1:7e:fc:e3:
dc:5b:b6:cb:80:02:d8:ab:a4:01:7a:87:ac:18:fa:
a0:b8:24:36:a3:1c:c8:b8:4f:91:fa:ec:bb:b9:62:
2e:65:93:cd:39:a0:fa:fe:58:44:9d:0a:9d:b5:7e:
90:ca:50:8c:b9:3b:f6:8d:4c:cc:5d:b3:a0:91:b2:
5f:b0:8a:d1:cf:04:88:99:74:ce:3e:4d:1e:37:fe:
39:80:de:ee:8d:8e:17:6b:87:a0:e1:63:ff:08:ed:
53:12:75:69:28:f6:89:62:70:33:cd:bb:13:8a:02:
71:2d:6c:3c:0a:00:68:9f:e9:15:b0:3c:26:2b:e6:
5a:08:36:f8:aa:2e:47:fd:ec:e7:30:ff:3c:9b:43:
52:78:d9:f8:03:ee:51:b6:ea:c3:9f:7e:fa:f7:cb:
39:8e:5e:f1:bf:61:dc:3b:e0:4a:d8:9d:1b:b2:29:
2b:81:d2:8b:d1:77:3e:42:6f:94:26:2e:c4:0a:cf:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5E:FF:09:D6:78:0B:00:B4:FB:CB:EF:35:14:BE:CD:9C:24:3F:BC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1F7_CdZ4CwC0-8vvNRS-zZwkP7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b740::/29
2a0f:2700::/29
2a0f:db40::/29
2a0f:dd40::/29
2a0f:e9c0::/29
2a0f:ee01::-2a0f:ee07:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
cd:bd:7b:ce:6e:51:32:14:b1:ab:13:21:5e:95:e2:9a:cd:9e:
b2:23:28:4f:d4:9d:0b:aa:83:0d:5a:ee:1b:15:d9:64:7f:35:
96:34:75:e6:8f:b3:49:a3:17:80:f5:1d:42:eb:48:13:30:1e:
4f:22:a6:29:74:c8:fa:49:8c:fa:a9:9f:5a:ba:d3:35:0e:10:
43:62:45:d6:f7:dd:5e:e6:59:34:74:37:0f:82:62:0d:34:a0:
0c:d4:7e:3c:ef:c2:bc:83:f0:de:6d:76:0e:7c:c4:12:5a:4d:
7d:c2:dc:22:ce:85:74:94:5a:a7:ec:ca:0e:6f:6b:15:a2:19:
5c:9b:f2:74:7a:57:ad:3f:5e:f2:22:67:86:15:9a:1d:c1:05:
7b:9a:23:2e:95:3a:49:41:7d:aa:58:29:52:6e:62:c8:14:07:
5c:9a:bf:76:79:39:76:d6:e0:a2:29:62:4c:12:28:cc:37:11:
6d:f7:a9:b5:66:f6:7e:ff:5b:77:d6:97:bf:ef:60:1b:b5:1a:
05:4f:a9:6d:91:12:19:6a:88:e4:d3:30:c7:6c:9b:c6:58:c2:
ec:ae:e4:07:c6:02:c1:2b:a0:cb:ee:07:dc:c6:21:08:18:3e:
69:df:96:92:7c:ad:b8:b3:9f:2a:32:95:53:38:d8:ac:0d:0c:
32:bf:10:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:34 2025 by rpki-client