Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7p0HJ4BOg8qNPChIr1MiEb7YVPE.roa
File: 7p0HJ4BOg8qNPChIr1MiEb7YVPE.roa (raw, json)
Hash identifier: I8V1AInK9d7bgA7Q9gqgi5YNGEIHPalIsiAQuvzY2cc=
Subject key identifier: EE:9D:07:27:80:4E:83:CA:8D:3C:28:48:AF:53:22:11:BE:D8:54:F1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0184134753786D206879A926811481A2565F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7p0HJ4BOg8qNPChIr1MiEb7YVPE.roa
Signing time: Wed 26 Oct 2022 07:52:32 +0000
ROA not before: Wed 26 Oct 2022 07:52:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 2a0f:7f00::/29 maxlen: 29
2a13:4900::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:47:53:78:6d:20:68:79:a9:26:81:14:81:a2:56:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 26 07:52:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee9d0727804e83ca8d3c2848af532211bed854f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f4:6b:5f:8e:04:06:68:ac:0a:b7:67:25:88:
a3:18:ab:69:7a:d7:6f:cf:b0:a8:25:1c:f1:54:1c:
0a:d3:2c:c8:ba:74:3f:47:32:ad:21:bd:34:45:4e:
de:d5:ca:52:ab:2d:83:83:c9:33:97:87:52:c6:70:
7b:ed:14:c5:ab:f5:95:a3:43:4c:2c:d0:35:e3:ff:
c9:66:ab:75:6f:8d:6d:3e:f4:a6:45:d1:f2:79:c0:
9a:27:e8:48:a9:31:aa:3d:21:40:74:aa:36:4c:1f:
78:9b:a2:78:06:96:23:72:0a:b3:ed:6c:f7:b7:4d:
30:50:4e:91:78:ac:9c:62:d5:dd:56:22:6b:aa:ca:
aa:09:1f:2b:71:bf:50:0d:8f:01:52:8e:cd:19:0b:
b0:a5:ca:32:7a:95:d0:54:b7:d0:79:07:0d:87:f0:
d9:a2:34:57:6e:59:dc:f5:68:48:99:50:28:57:fb:
7b:ec:97:ee:a8:4e:7b:9a:b9:4b:51:43:cd:ab:d7:
01:64:3f:97:84:f7:56:54:64:83:58:78:03:d9:e9:
11:cf:63:1c:bb:a3:ee:e9:aa:82:99:10:c8:46:1b:
d9:dc:99:c2:55:49:73:fc:10:d6:b7:01:d4:c2:9f:
39:49:45:6c:b6:a6:e2:b1:6a:95:88:ec:cd:37:62:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9D:07:27:80:4E:83:CA:8D:3C:28:48:AF:53:22:11:BE:D8:54:F1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7p0HJ4BOg8qNPChIr1MiEb7YVPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7f00::/29
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
42:96:e1:4e:ec:a0:62:14:1d:b6:b7:03:e7:9c:4a:37:5e:50:
1c:f0:2d:bc:b5:c5:e6:95:26:c3:aa:27:20:27:6f:ee:d3:e4:
2d:6e:cd:bb:68:f8:47:26:41:35:a7:92:ad:41:42:5c:94:84:
f3:73:57:38:80:5d:97:1a:e3:50:cf:0c:e8:c4:c2:18:8a:0b:
a4:5b:f4:24:7e:0a:66:83:6c:99:72:6d:e9:0b:94:bf:e1:c1:
8b:89:8d:b6:9d:18:19:84:a3:a0:b5:4f:a6:bc:0e:f6:c5:2a:
1d:dc:f5:42:56:f3:5c:13:2b:67:36:f4:2d:36:06:cd:8d:64:
dc:88:c4:2c:24:bf:eb:21:be:8d:5d:f1:e9:93:ea:ec:87:64:
bc:29:c9:62:49:2f:99:1c:9d:0a:b9:7a:d7:29:a5:d5:78:f9:
cf:d5:5d:3a:ae:86:0b:0d:34:25:71:fa:a1:16:a1:44:de:ef:
9d:85:04:a9:ac:df:c2:19:9c:df:27:a8:64:61:ff:c1:da:b3:
a8:eb:10:05:58:bf:0f:9a:64:e1:d1:4e:cc:7b:55:3f:74:57:
e8:42:b8:35:d7:a2:08:bc:c1:45:7c:5b:2b:d9:3b:d6:94:ab:
b6:4e:21:72:37:0e:e1:0f:b7:1b:75:c0:d0:79:53:53:5d:6b:
96:d4:10:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:02 2025 by rpki-client