Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/89ZAihbnLwTkarm5dKHiOFy4Oho.roa
File: 89ZAihbnLwTkarm5dKHiOFy4Oho.roa (raw, json)
Hash identifier: uGAViH2vdDChKVcl5IGfqB6a3zdGNhQBgTxCW4zi4rk=
Subject key identifier: F3:D6:40:8A:16:E7:2F:04:E4:6A:B9:B9:74:A1:E2:38:5C:B8:3A:1A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018B761038CECB996E9149F38F7DE2E3A08F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/89ZAihbnLwTkarm5dKHiOFy4Oho.roa
Signing time: Sat 28 Oct 2023 11:34:16 +0000
ROA not before: Sat 28 Oct 2023 11:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 2a0f:2705::/32 maxlen: 32
2a0f:e9c0::/32 maxlen: 32
2a0f:dd42::/32 maxlen: 32
2a0f:db41::/32 maxlen: 32
2a0f:dd43::/32 maxlen: 32
2a0f:2704::/32 maxlen: 32
2a0f:db42::/32 maxlen: 32
2a0f:dd41::/32 maxlen: 32
2a0f:dd44::/32 maxlen: 32
2a0f:db46::/32 maxlen: 32
2a0f:2707::/32 maxlen: 32
2a0f:e9c5::/32 maxlen: 32
2a0f:dd40::/32 maxlen: 32
2a0f:e9c6::/32 maxlen: 32
2a0f:db43::/32 maxlen: 32
2a0f:e9c2::/32 maxlen: 32
2a0f:db40::/32 maxlen: 32
2a0f:db44::/32 maxlen: 32
2a0f:dd46::/32 maxlen: 32
2a0f:2701::/32 maxlen: 32
2a0f:e9c3::/32 maxlen: 32
2a0f:2702::/32 maxlen: 32
2a0f:dd47::/32 maxlen: 32
2a0f:db45::/32 maxlen: 32
2a0f:db47::/32 maxlen: 32
2a0f:dd45::/32 maxlen: 32
2a0f:e9c1::/32 maxlen: 32
2a0f:2700::/32 maxlen: 32
2a0f:e9c4::/32 maxlen: 32
2a0f:2703::/32 maxlen: 32
2a0f:2706::/32 maxlen: 32
2a0f:e9c7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:76:10:38:ce:cb:99:6e:91:49:f3:8f:7d:e2:e3:a0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 28 11:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3d6408a16e72f04e46ab9b974a1e2385cb83a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:20:4f:89:26:bd:bb:e7:a9:09:0f:63:e8:
13:16:fc:4c:1c:d6:65:fc:2e:97:85:75:d9:21:28:
ab:42:c8:7e:6c:b9:93:c4:af:75:d2:9c:8b:99:63:
9a:b6:96:fc:cd:77:1a:5d:22:67:86:09:c7:a4:0d:
d5:70:77:0b:7f:63:ed:ab:8b:c8:ed:4f:bd:3a:6d:
ea:7c:45:f4:6e:1c:7d:a9:91:7a:3d:db:5f:88:33:
44:97:95:38:c4:9c:6a:43:44:40:e5:f6:66:80:ca:
06:fa:67:e8:71:95:84:cf:bd:11:74:0a:18:58:1e:
ec:95:ff:8a:6e:77:d5:ab:88:2b:7b:f6:47:38:7d:
76:f7:8e:bd:a5:b2:d5:81:b5:0b:26:3e:89:fd:82:
c6:8c:04:34:51:64:b0:1e:95:6f:5f:cf:cf:fb:bc:
f9:a1:72:cb:58:e0:5c:98:b9:4b:c2:50:22:e2:22:
12:02:05:0d:30:67:1e:7c:8c:f4:c4:39:74:dc:68:
3b:85:ef:b1:96:85:ad:57:66:05:12:2d:7a:b7:7b:
06:bb:17:e2:fb:fd:d2:12:89:56:7a:20:80:2d:a3:
7b:0d:40:6a:0b:2b:29:38:5b:cb:74:28:b9:f1:e8:
c5:d1:13:2a:11:1e:b6:ce:bf:90:60:cd:81:74:91:
99:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D6:40:8A:16:E7:2F:04:E4:6A:B9:B9:74:A1:E2:38:5C:B8:3A:1A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/89ZAihbnLwTkarm5dKHiOFy4Oho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2700::/29
2a0f:db40::/29
2a0f:dd40::/29
2a0f:e9c0::/29
Signature Algorithm: sha256WithRSAEncryption
62:9f:8f:3d:ce:95:94:10:03:ed:dd:15:2b:33:f6:3a:21:3e:
6b:67:6e:e6:41:09:b0:42:5e:9f:40:9b:05:92:5d:fa:bc:ec:
51:e8:2b:f2:eb:c4:4f:fa:ce:59:a5:a8:47:11:62:9f:cd:06:
ba:c0:fb:85:97:e2:26:b5:26:04:bb:c2:2d:34:2e:03:3c:db:
5f:7e:52:1c:c7:9e:42:a9:e7:f4:9c:e2:df:6d:8f:19:ec:03:
c8:05:2d:2d:a3:6d:f9:c2:b0:e7:51:32:ab:26:3c:d3:43:db:
5f:fd:37:11:8a:60:eb:d6:18:fb:20:9e:12:94:e5:03:bb:ae:
f7:83:34:80:7c:30:f1:50:98:0d:83:12:3f:96:ef:0f:92:fc:
af:7b:98:24:86:9b:d5:3c:45:58:7c:96:01:3e:48:b1:cb:aa:
a1:46:db:7d:ee:b8:07:7e:3e:3e:4a:a6:58:3c:ab:0d:e9:39:
ee:1d:4b:9a:c1:5a:b2:21:b6:1f:11:0a:3b:82:bf:06:d3:5b:
57:08:22:08:35:b4:4a:75:30:35:7e:88:77:e2:1a:4c:b5:c5:
1a:a8:90:88:55:79:c6:34:8a:f3:13:2e:67:31:74:a2:87:69:
cf:09:1e:00:62:31:d6:1f:30:af:e6:76:50:8e:74:a2:78:9a:
c4:c1:c7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:03:40 2025 by rpki-client