Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/444Z5h4DYbB7m6qEEond92fcWb0.roa
File: 444Z5h4DYbB7m6qEEond92fcWb0.roa (raw, json)
Hash identifier: fQ/Jmo4erqCyZJD5SbAaduPj/s3lXOED9WUVgWK4/Hg=
Subject key identifier: E3:8E:19:E6:1E:03:61:B0:7B:9B:AA:84:12:89:DD:F7:67:DC:59:BD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01845B2B735F88167B769406A1453982CDDF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/444Z5h4DYbB7m6qEEond92fcWb0.roa
Signing time: Wed 09 Nov 2022 06:54:45 +0000
ROA not before: Wed 09 Nov 2022 06:54:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 2a0e:15c0:1::/48 maxlen: 48
2a0e:15c1::/32 maxlen: 32
2a12:d6c1::/32 maxlen: 32
2a12:d6c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:2b:73:5f:88:16:7b:76:94:06:a1:45:39:82:cd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 9 06:54:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e38e19e61e0361b07b9baa841289ddf767dc59bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:c3:94:7d:e0:e6:0c:2b:cb:77:3e:ef:2a:
c5:a9:6b:af:58:48:79:56:ea:1f:30:1b:d4:de:2a:
e3:bb:c4:4d:57:73:99:94:5f:b3:8d:30:dd:70:d1:
33:63:dc:d2:3c:7c:38:e9:6b:f0:f4:ff:03:0a:05:
16:74:5f:fa:2e:2c:0c:9e:73:b6:34:01:63:2f:28:
cb:5d:05:c0:bd:ac:9d:00:2d:fb:8a:c7:3e:11:84:
af:d1:52:bc:db:af:7f:11:f4:45:f0:66:67:ca:09:
be:a2:c1:d6:34:42:41:20:93:90:4f:2c:04:66:7f:
92:7a:a4:e2:4e:cb:84:51:92:25:37:ac:b4:9e:99:
98:27:18:a6:0d:db:86:e5:69:98:17:d6:d3:da:db:
5c:e0:85:73:f2:72:a3:17:92:9e:fc:ba:57:73:9c:
c1:b3:7e:4e:45:bb:0b:45:eb:78:e1:ee:6d:65:ac:
45:68:ef:46:af:82:bb:6e:a6:9b:02:1f:d5:b9:be:
10:83:18:48:8a:d1:f0:3d:f5:97:df:f2:fd:3b:31:
f7:b1:e2:bb:47:e1:b9:25:9f:87:10:1d:19:cb:3e:
93:c4:fc:23:a1:9b:fb:44:e3:71:4e:36:2a:4a:fd:
c1:0c:02:3f:7e:07:77:6c:85:57:15:be:5c:c0:26:
ad:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8E:19:E6:1E:03:61:B0:7B:9B:AA:84:12:89:DD:F7:67:DC:59:BD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/444Z5h4DYbB7m6qEEond92fcWb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:15c0:1::/48
2a0e:15c1::/32
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
9e:6d:2c:0e:43:fc:28:d7:42:fa:81:17:4d:01:b7:6a:0c:07:
a6:3b:d6:c8:4b:e0:4e:5c:c9:b1:1a:98:36:bf:f4:04:79:3f:
6f:01:fa:71:88:e7:c1:ee:ee:1a:67:aa:60:57:c1:cf:ab:fe:
1c:34:53:cd:48:bf:c8:29:6d:6e:09:64:68:e1:10:15:1e:82:
d2:1e:3d:9b:cb:c3:8e:7b:b4:86:21:3c:74:1d:37:c2:36:17:
36:0b:0f:58:f3:0b:1b:83:0c:59:83:c6:c8:00:fc:91:66:3d:
e3:59:6e:0b:a4:11:48:0d:af:e6:46:6b:90:af:51:f3:9e:f6:
e1:7e:42:07:16:5f:89:2a:1e:80:a5:dc:e7:a2:89:d7:33:3e:
28:4a:bc:f1:95:ef:03:c0:6c:78:c5:10:e2:8e:8a:21:3b:be:
3c:13:1d:32:8e:94:c4:bb:67:3b:a6:42:9d:f4:6e:07:38:f3:
a9:e7:04:f0:92:89:26:14:fe:ab:5f:86:b1:14:75:70:dd:3a:
56:5d:e9:3f:61:d2:bf:e2:fd:4c:49:e8:39:1a:d7:e0:bd:d7:
c1:0b:fe:77:8e:3a:5c:b6:fc:73:57:4b:a6:73:14:f4:49:1e:
01:17:92:41:97:50:62:75:4e:67:35:eb:05:37:d3:c6:0d:83:
f7:2f:da:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:38 2025 by rpki-client