Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7ZnQSPlw5brc_e_1WShCa9BPzOk.roa
File: 7ZnQSPlw5brc_e_1WShCa9BPzOk.roa (raw, json)
Hash identifier: FkEquKR33sIaxc5j3mgBoQvo31B8oxfqX50JU51IKAA=
Subject key identifier: ED:99:D0:48:F9:70:E5:BA:DC:FD:EF:F5:59:28:42:6B:D0:4F:CC:E9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0182B5C75BA75CC7C88AFA4D845C4E1BEBA4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7ZnQSPlw5brc_e_1WShCa9BPzOk.roa
Signing time: Fri 19 Aug 2022 11:05:17 +0000
ROA not before: Fri 19 Aug 2022 11:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12608
IP address blocks: 2a0f:ac00::/29 maxlen: 29
2a0f:bc00::/29 maxlen: 29
2a0f:fc00::/29 maxlen: 29
2a0f:9600::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b5:c7:5b:a7:5c:c7:c8:8a:fa:4d:84:5c:4e:1b:eb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 19 11:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed99d048f970e5badcfdeff55928426bd04fcce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:9e:44:78:22:b3:84:1f:79:1f:88:77:d5:
fb:92:28:0d:82:53:5e:32:c0:5b:b1:da:5b:bd:f2:
0c:7d:3e:0f:ef:93:88:49:6c:71:e5:07:0e:f5:57:
e2:b0:6c:13:d1:a9:79:25:86:71:01:a4:52:30:d3:
4d:88:cb:79:58:e2:e6:01:f7:18:a7:ca:3b:b2:bb:
f0:1d:7a:d0:89:14:4d:e0:3e:51:16:4e:90:20:75:
5a:a8:65:1d:aa:ce:40:94:da:26:00:df:8b:a5:42:
7d:05:0a:6f:51:31:d6:1a:2b:7f:9b:5f:91:83:ef:
14:36:6e:09:47:bc:be:2a:81:a4:2d:8e:37:d4:71:
7c:60:09:13:88:c4:63:ff:f8:bd:61:a0:e3:80:bf:
7e:44:b1:1b:5d:0d:e7:6a:ae:96:37:54:9f:6c:c3:
34:bb:dc:34:ed:2d:2f:9c:1e:98:19:17:8b:e6:bc:
3b:9c:fd:ee:39:be:d2:84:d2:47:d0:b0:68:c9:88:
70:6d:2d:14:46:fc:be:5f:c1:72:bb:49:20:43:d9:
ed:dd:91:1a:f1:d5:0a:df:15:d8:6e:34:46:10:09:
fa:fe:cb:b6:a9:34:4d:ac:b9:fc:08:f8:04:48:c8:
b7:86:01:44:02:72:39:a7:ea:07:aa:f4:4c:33:63:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:99:D0:48:F9:70:E5:BA:DC:FD:EF:F5:59:28:42:6B:D0:4F:CC:E9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7ZnQSPlw5brc_e_1WShCa9BPzOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9600::/29
2a0f:ac00::/29
2a0f:bc00::/29
2a0f:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
26:a5:7d:00:58:24:74:d3:7b:bf:ed:ae:86:d5:bc:e9:26:28:
0c:5b:e3:1e:ed:a1:a4:5b:e8:9f:bf:f7:d0:01:37:30:21:f6:
8c:59:32:13:8b:53:82:3a:35:13:b1:70:68:c0:e3:b4:fc:fd:
c7:d3:08:09:e1:28:8e:8c:a0:90:9e:c1:7c:86:55:4b:23:81:
64:98:07:7e:0d:07:a9:de:f5:8d:38:4a:d6:87:c7:34:ad:9c:
2f:f5:29:a7:3f:7e:de:d7:9f:30:2a:5b:68:7a:dd:38:cc:02:
c4:e8:05:d9:6c:d9:33:02:52:19:6a:3b:20:d0:7c:06:e3:23:
13:64:b9:55:d6:ea:2a:ba:d8:17:57:57:3d:ba:d8:a0:68:30:
a0:0a:71:59:9d:56:48:e2:23:cd:f3:fd:8e:9a:cc:84:34:79:
b6:5a:0b:75:9e:c5:13:04:51:40:e9:fb:21:a5:94:49:5e:89:
40:cd:ca:bd:18:80:3b:77:15:64:6a:6c:5c:71:40:28:7d:06:
31:4c:e4:02:62:eb:3a:4b:89:5c:24:5c:0a:99:ef:fb:db:d8:
2c:4f:2c:0c:bb:6e:7e:28:3d:ad:19:fc:d1:41:bf:ca:90:b9:
a9:78:1f:5e:a8:ec:fd:d8:d7:6f:7c:2c:3a:a4:d5:78:f5:55:
f1:aa:ad:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:48 2025 by rpki-client