Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3wiAwQsCsq43gNsHqjkQrUe3w9s.roa
File: 3wiAwQsCsq43gNsHqjkQrUe3w9s.roa (raw, json)
Hash identifier: Z4KcLnuP3uhC4lE27kQ0XS/Pt2q6613cOPCpyacwctM=
Subject key identifier: DF:08:80:C1:0B:02:B2:AE:37:80:DB:07:AA:39:10:AD:47:B7:C3:DB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018443E2895FF2979CA8DBE25946BBB6E407
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3wiAwQsCsq43gNsHqjkQrUe3w9s.roa
Signing time: Fri 04 Nov 2022 18:23:50 +0000
ROA not before: Fri 04 Nov 2022 18:23:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7203
IP address blocks: 2a0f:1e84::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:43:e2:89:5f:f2:97:9c:a8:db:e2:59:46:bb:b6:e4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 4 18:23:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df0880c10b02b2ae3780db07aa3910ad47b7c3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:f9:ce:43:4f:e6:e7:72:38:6f:2f:88:2a:
ec:dc:6c:99:1f:9b:88:0d:41:15:13:6d:3a:6d:e7:
61:48:22:31:23:79:d6:a1:5c:d0:53:ba:17:96:b5:
6a:d2:b7:21:b9:90:9e:d1:a6:07:76:28:8a:4e:30:
d1:d9:39:a6:c3:59:21:5e:d8:aa:cc:ea:6b:f2:eb:
d2:81:b5:59:5d:3b:db:9e:3e:04:1d:ff:e4:41:dc:
1b:3b:e9:c9:60:01:ab:87:15:8a:1f:36:3e:b9:30:
5a:58:a1:d8:06:04:b7:5e:89:fc:2a:8f:f9:bd:0c:
f0:46:af:b8:99:a8:8d:62:2b:23:3f:e7:21:a2:18:
b2:5b:c9:3a:47:ae:b5:bc:42:77:d4:c8:72:61:77:
b2:fc:01:e8:57:c2:89:da:7e:30:be:8a:b5:65:2a:
fe:a1:3b:fe:87:c9:80:85:b9:a8:66:91:02:df:48:
4b:7e:2f:44:9f:7b:2d:b6:c9:99:47:1e:70:b6:eb:
d6:bc:30:a5:94:e1:c1:1b:47:e9:0f:82:fc:8e:bf:
18:8f:9d:7b:fa:6f:b7:75:84:cd:f2:a4:22:27:64:
91:0e:3b:06:19:25:1a:2d:a5:49:1f:e7:5e:93:96:
d6:d9:a0:02:ba:d2:00:81:e2:e2:ad:0a:0d:96:63:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:08:80:C1:0B:02:B2:AE:37:80:DB:07:AA:39:10:AD:47:B7:C3:DB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3wiAwQsCsq43gNsHqjkQrUe3w9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1e84::/32
Signature Algorithm: sha256WithRSAEncryption
14:37:c9:ab:4f:8f:b3:21:6d:2f:81:69:28:2e:48:96:df:16:
af:0f:3d:a8:08:16:ad:4b:ab:a3:bb:d4:dc:a2:aa:e8:aa:6b:
c2:83:b5:4d:d8:a4:c3:6a:e3:2c:72:55:81:6e:3c:64:8d:77:
ae:f9:e1:48:53:2b:19:cb:85:6e:98:4d:52:6e:90:85:a1:c0:
3d:db:ba:f4:57:3a:25:87:dd:5c:90:72:a8:be:46:10:e7:eb:
b2:a9:bb:b9:18:d4:f5:c2:9c:15:bf:cb:a3:a7:d7:2a:7d:d0:
ad:4d:0d:5d:09:03:61:4d:cb:d6:15:3b:ce:b7:6f:62:12:28:
6c:27:62:f2:96:99:e3:59:05:8a:3c:47:81:60:d7:70:0d:e4:
52:8a:49:a9:5e:58:6f:4b:2f:70:f9:64:be:6c:79:bc:f9:c1:
39:cc:0d:db:a6:c7:80:cc:af:1f:1c:d9:a9:3d:ef:0a:1e:02:
fe:3b:7c:98:4a:2e:04:44:1c:b1:99:68:f8:3d:62:4f:d7:83:
8d:be:eb:81:34:ef:ff:3b:ec:7e:13:b2:34:e5:e0:f1:37:b4:
e2:ef:4d:20:85:a1:b6:ad:e1:7d:12:3f:b3:f6:5e:7f:21:7f:
5e:11:1e:62:1a:ba:ed:80:80:8e:67:c8:82:41:ef:97:39:bc:
8a:5a:99:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:03:25 2025 by rpki-client