Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5DsoleMuTwimkSCvqZ8YIjCB3wg.roa
File: 5DsoleMuTwimkSCvqZ8YIjCB3wg.roa (raw, json)
Hash identifier: ai6qUqKUVhB8VOZQLExAKcPa9ed6FJnxyTy0kCBaLmk=
Subject key identifier: E4:3B:28:95:E3:2E:4F:08:A6:91:20:AF:A9:9F:18:22:30:81:DF:08
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01856DCAFB18E9F1762712957B506B55D799
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5DsoleMuTwimkSCvqZ8YIjCB3wg.roa
Signing time: Sun 01 Jan 2023 14:44:57 +0000
ROA not before: Sun 01 Jan 2023 14:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398559
IP address blocks: 2a0f:dac0::/29 maxlen: 29
2a0e:e980::/29 maxlen: 29
2a0f:e5c0::/29 maxlen: 29
2a0f:ac00::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:bc00::/29 maxlen: 29
2a0f:7280::/29 maxlen: 29
2a0f:e600::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:9e00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:fb:18:e9:f1:76:27:12:95:7b:50:6b:55:d7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 14:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e43b2895e32e4f08a69120afa99f18223081df08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:61:6b:20:fb:01:4d:b2:83:7d:e2:66:28:9d:
09:3f:3b:49:e7:4b:a1:d0:93:8c:b5:88:47:d9:82:
68:63:98:09:57:1b:76:8b:4c:20:ff:d3:5a:28:57:
a3:af:87:6b:fc:bd:65:38:f7:72:dd:58:83:f0:67:
26:81:b9:ee:5f:d0:ee:ca:60:b6:7d:f6:23:2e:eb:
e4:38:9c:81:53:30:39:29:f4:50:17:bb:a0:49:04:
ae:cc:cc:41:27:9f:18:13:29:28:f9:d8:2a:50:3a:
76:d3:5a:01:4e:df:0f:7a:c0:88:36:f3:aa:52:cd:
3a:99:82:05:43:65:9b:be:80:47:ed:fe:af:e9:de:
8e:80:9a:17:f6:81:b6:95:c6:66:87:a9:dc:e1:cf:
a6:79:a3:75:c4:da:37:a0:ce:82:82:71:26:5e:5e:
b6:10:44:7f:9b:c2:e0:5f:3d:74:8a:69:12:57:1c:
cd:6c:ce:64:45:32:68:a7:c3:85:5c:49:5b:60:f6:
6f:41:47:85:fb:22:20:9f:81:ac:ba:86:76:4f:62:
c9:f9:d1:ea:0c:5a:77:62:d9:0e:85:fd:57:a5:9f:
6e:af:d7:72:86:ce:52:15:d5:3c:ae:e7:8e:56:ca:
68:8f:f2:31:bc:2d:fd:7d:18:a0:b5:08:ee:61:17:
bb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3B:28:95:E3:2E:4F:08:A6:91:20:AF:A9:9F:18:22:30:81:DF:08
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5DsoleMuTwimkSCvqZ8YIjCB3wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e980::/29
2a0f:7280::/29
2a0f:9e00::/29
2a0f:a200::/29
2a0f:ac00::/29
2a0f:bc00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:e5c0::/29
2a0f:e600::/29
Signature Algorithm: sha256WithRSAEncryption
15:2e:32:47:27:fe:d1:87:e5:95:f4:4d:d3:cc:b9:37:c2:83:
d0:12:d7:c0:76:14:5a:92:1d:05:d7:42:52:26:2d:05:f2:02:
94:9c:c3:91:de:5c:55:16:a5:e5:ec:f0:82:8f:95:45:59:7f:
95:be:f5:5d:a4:a8:88:a1:b2:1b:23:8f:8e:b5:2d:11:2d:84:
ce:38:77:a6:80:a9:84:e0:7b:6f:57:57:b1:c8:e6:f4:57:b0:
15:3f:51:82:36:8b:df:89:7b:6b:20:a0:9f:a2:21:17:6d:a9:
cf:e7:86:4a:ee:87:b9:94:e8:45:c5:67:29:7a:94:23:68:9d:
8f:37:d4:f4:26:ab:dd:04:fb:ad:45:89:2d:71:71:83:1b:84:
13:f2:7e:b9:1c:69:f0:3c:5c:9c:a5:9c:9c:0d:30:64:e3:28:
37:a1:04:6f:0f:f2:c1:94:1b:b6:61:1a:81:8f:b4:5c:75:c4:
62:10:44:d1:2d:06:e0:62:2f:7b:f0:92:cf:f9:f1:61:e8:5f:
bc:3d:d9:b8:b2:1e:ec:e3:27:cf:76:18:14:ae:97:91:c3:94:
08:ff:e2:58:20:6f:98:23:40:93:37:3a:17:1a:0d:47:c4:7d:
3b:4b:a7:4d:d7:42:a9:fb:29:d1:24:a4:86:bc:ee:73:2f:be:
8a:cd:50:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:23:23 2025 by rpki-client