Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8b-m5qTqGJIr8I15bl6WLJ9vCn8.roa
File: 8b-m5qTqGJIr8I15bl6WLJ9vCn8.roa (raw, json)
Hash identifier: R5X4tCDeJYy4qbdJqydN7U3IuXE6u6Dvz/SAZzJJr9M=
Subject key identifier: F1:BF:A6:E6:A4:EA:18:92:2B:F0:8D:79:6E:5E:96:2C:9F:6F:0A:7F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01879848D4DC88A0B2BAF57375638BB9A0EC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8b-m5qTqGJIr8I15bl6WLJ9vCn8.roa
Signing time: Wed 19 Apr 2023 06:52:02 +0000
ROA not before: Wed 19 Apr 2023 06:52:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 2a0f:7d00:5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:48:d4:dc:88:a0:b2:ba:f5:73:75:63:8b:b9:a0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 19 06:52:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1bfa6e6a4ea18922bf08d796e5e962c9f6f0a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:88:df:89:3b:3c:e2:88:70:2b:49:18:1e:
5a:86:fa:5e:7e:e0:c2:e9:a1:20:71:33:0b:68:f4:
f8:fa:19:62:f8:63:29:d9:55:d3:27:79:34:12:c4:
85:74:84:4b:a3:3d:e7:9b:0f:38:6d:0a:88:7b:b7:
c0:ba:07:97:2a:c6:82:83:8b:8b:bc:7b:f1:e4:23:
e1:0b:e7:5e:fc:dc:c8:92:dc:1e:79:f2:9b:72:d7:
d1:6d:72:94:00:15:35:16:39:8b:d0:a6:ac:2e:8f:
ec:be:1f:9f:5d:44:0e:63:7e:39:0a:b9:b6:3b:5c:
2a:a9:44:cc:24:02:9f:85:4d:ca:a0:e5:61:f2:47:
a4:e8:57:17:a9:6d:9d:90:03:a7:bf:8b:43:b6:08:
b2:29:e4:92:ab:ad:c1:c5:3b:47:fe:0e:18:0e:54:
6b:ae:b5:35:a5:35:7f:92:a1:c7:4a:f7:0f:8c:91:
b9:a6:25:ec:8c:2c:d0:6e:8e:33:9c:f2:48:bf:53:
e7:d5:b0:68:38:3d:02:3c:d5:13:5d:54:26:8f:39:
84:b3:0d:04:17:21:b7:b2:78:92:0a:e1:f4:18:b3:
20:57:c5:eb:bc:96:93:f8:a4:9e:88:fd:fa:12:a1:
d9:a3:5e:61:14:b3:69:ba:a0:05:f0:19:19:39:0e:
94:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BF:A6:E6:A4:EA:18:92:2B:F0:8D:79:6E:5E:96:2C:9F:6F:0A:7F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8b-m5qTqGJIr8I15bl6WLJ9vCn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7d00:5::/48
Signature Algorithm: sha256WithRSAEncryption
80:a0:3a:d4:8a:e0:82:9e:07:18:94:e4:de:58:7e:11:ef:1e:
8e:c0:eb:3b:74:3c:5e:b6:8c:4b:df:81:f5:bc:e2:83:33:0d:
b9:26:ef:4c:98:9d:45:ac:b1:d7:6f:b8:13:3b:0c:62:99:54:
70:2f:6a:77:0f:08:51:67:93:13:e9:43:60:ac:4b:bf:88:81:
62:12:94:f9:cc:40:a6:74:f4:46:8b:7b:3c:2f:90:80:1e:89:
58:5e:59:59:4a:8e:5f:f8:a2:6e:58:10:35:b3:68:82:6f:a9:
7b:53:b3:45:30:2a:e7:5c:87:0c:12:48:7a:06:bc:fa:e7:63:
d1:59:41:ae:9c:99:09:aa:ba:a1:82:32:bb:60:f4:43:7c:f9:
3f:1f:b0:59:82:e0:fb:c3:52:b6:4e:fe:ed:93:2d:df:13:29:
4d:24:a0:c5:ab:6f:89:7c:ca:86:ad:f0:0b:2f:83:10:37:14:
f0:11:7b:01:11:31:63:9c:42:f5:6e:5f:dc:52:e4:41:fb:f4:
e7:ed:49:c4:78:cb:ba:ee:42:da:c1:15:43:81:85:d4:55:eb:
0c:58:47:82:64:cc:c6:71:ab:0c:70:88:4a:87:c5:0d:11:f4:
85:00:a2:e3:6c:f6:27:76:9a:5c:38:bf:ea:e8:56:65:51:48:
72:f4:39:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:30:05 2025 by rpki-client