Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2SwLSTC4M5K7y7XgAQO4tTj_js0.roa
File: 2SwLSTC4M5K7y7XgAQO4tTj_js0.roa (raw, json)
Hash identifier: gf2sKjOfLfi8/n5MGknPbDey4sGZI9Sy58iq6lITmLc=
Subject key identifier: D9:2C:0B:49:30:B8:33:92:BB:CB:B5:E0:01:03:B8:B5:38:FF:8E:CD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01875AFC62F7144C85513A8BE6325C14CC40
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2SwLSTC4M5K7y7XgAQO4tTj_js0.roa
Signing time: Fri 07 Apr 2023 09:11:42 +0000
ROA not before: Fri 07 Apr 2023 09:11:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396362
IP address blocks: 2a0f:e841::/32 maxlen: 32
2a0f:e843::/32 maxlen: 32
2a0e:1a82::/32 maxlen: 32
2a0f:e842::/32 maxlen: 32
2a0f:1e80:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:fc:62:f7:14:4c:85:51:3a:8b:e6:32:5c:14:cc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 7 09:11:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d92c0b4930b83392bbcbb5e00103b8b538ff8ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:54:cd:85:52:93:c9:f8:8d:91:71:ec:f9:b0:
ba:44:0e:ff:b2:ea:8f:35:fd:1c:32:07:d1:5f:63:
12:86:5b:f7:89:10:c7:77:61:43:f7:ae:35:88:be:
a5:cd:77:7c:74:9b:f6:d7:15:fa:21:e2:81:0c:6a:
cf:9c:92:b6:65:cd:ff:33:e5:47:6c:d9:57:f4:ac:
b9:e8:71:65:72:ed:19:38:35:9e:6d:21:67:ba:ea:
9a:6d:83:fb:5a:68:4a:86:75:9d:a5:1d:a5:95:46:
6a:45:01:ce:ef:2f:51:44:8d:9f:ca:06:a6:9c:3b:
a8:60:49:1e:3d:0c:04:1a:3f:89:3e:cf:48:77:56:
28:96:66:fd:44:f8:b4:89:5d:85:71:06:68:7c:6a:
e2:25:b1:86:f2:ce:23:7f:59:1b:5e:95:f1:34:df:
b7:5d:ca:a2:c8:af:12:db:46:04:1a:95:99:f9:da:
cc:9e:93:e4:31:f8:a6:64:24:7d:38:46:bd:80:1e:
74:1c:ec:16:2d:07:74:7a:08:32:b4:da:87:7a:2f:
76:fd:43:2b:3b:3a:fd:a2:7e:bb:b4:9c:4f:c4:60:
d1:bf:da:bf:d6:6e:dc:7e:35:53:d5:f8:2e:68:36:
6d:83:bf:13:7a:ba:91:16:d5:96:71:a2:37:d3:0e:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2C:0B:49:30:B8:33:92:BB:CB:B5:E0:01:03:B8:B5:38:FF:8E:CD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2SwLSTC4M5K7y7XgAQO4tTj_js0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1a82::/32
2a0f:1e80:1::/48
2a0f:e841::-2a0f:e843:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
26:f5:84:b6:9a:66:5b:77:ce:ff:87:b4:1b:82:7f:7b:e6:47:
d5:52:8d:4a:ad:3f:52:fe:b1:1a:de:9d:e4:d6:46:e5:5c:09:
f4:b3:9a:70:09:49:b2:20:9b:32:73:6f:1e:05:99:26:5c:0d:
38:76:26:74:84:17:fe:aa:d4:81:02:19:71:b0:eb:8c:4e:6b:
0c:4d:2b:e2:68:94:4c:9b:9e:17:cc:a0:1e:c5:09:6a:b2:96:
6b:fd:54:87:20:ce:4e:85:db:04:cb:1c:d3:02:cf:5e:37:65:
1d:1b:51:eb:d8:f0:fd:e7:fe:31:c3:96:d9:51:a6:35:a6:44:
dc:17:43:b7:dc:6b:4f:d9:6f:22:29:7a:81:b2:bc:67:83:e8:
95:9f:84:2e:a3:94:d8:96:ab:8f:25:82:6b:9e:63:15:a8:4d:
37:4b:32:5a:2b:6d:ba:7c:88:40:d9:20:e7:22:21:73:db:3c:
5c:28:0a:5f:00:0a:8c:95:87:be:5f:d3:d2:e8:26:f9:d4:69:
21:d3:cb:5e:53:e9:c1:16:8a:11:00:0a:40:5b:18:e3:50:bb:
23:21:b5:71:bd:7c:bc:08:13:68:5a:da:f6:27:07:03:77:8d:
03:0a:bd:2c:b0:a2:e4:de:29:a7:a3:12:23:4a:31:d5:b0:39:
54:7a:65:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:01:43 2025 by rpki-client