Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8j1p-IIJ8LJ4N8dwWUVugC04i7Q.roa
File: 8j1p-IIJ8LJ4N8dwWUVugC04i7Q.roa (raw, json)
Hash identifier: eVWSSoLuvGwMHZ/BxgMplB9GL6DXuZXs5PnNC6WZKaQ=
Subject key identifier: F2:3D:69:F8:82:09:F0:B2:78:37:C7:70:59:45:6E:80:2D:38:8B:B4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 02BBADB5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8j1p-IIJ8LJ4N8dwWUVugC04i7Q.roa
Signing time: Tue 12 Apr 2022 14:29:31 +0000
ROA not before: Tue 12 Apr 2022 14:29:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 2a0e:2240:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45854133 (0x2bbadb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 12 14:29:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f23d69f88209f0b27837c77059456e802d388bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:33:0e:48:eb:38:04:20:11:ad:aa:1d:d2:
8b:44:4b:0f:37:80:b6:93:99:20:47:00:a3:c2:4c:
ac:5f:94:4a:71:e3:c9:d6:11:50:44:9e:86:91:11:
3c:e8:14:3d:07:7f:60:49:9f:ee:d6:b5:a4:5e:26:
df:26:fb:a6:92:22:a4:05:3b:81:c0:5b:9f:b9:31:
38:87:13:22:d4:40:05:7a:b6:f0:a1:04:17:be:8a:
a5:4b:be:7c:63:0a:c4:0d:68:3a:06:2a:1f:dc:74:
aa:b6:92:22:4d:ab:71:e6:4a:e8:2a:93:f5:98:e8:
6d:e6:2c:1e:69:f4:42:fa:2b:e6:4c:1c:e2:5b:40:
0e:af:b9:00:fa:27:b5:35:bb:cb:c0:48:49:bc:c2:
20:2e:4b:a7:44:93:49:fb:c8:c7:7f:cf:e3:39:ec:
8d:cb:16:3f:4c:16:bb:42:0a:5b:15:58:92:8a:91:
bc:0a:13:c0:f3:2c:18:f0:86:6f:b4:04:82:7a:00:
0d:af:20:b3:36:9b:1f:87:dc:7b:34:bc:87:30:27:
93:1d:bf:80:02:e4:44:ed:2e:fc:12:26:19:75:5a:
44:d9:57:a7:1d:b4:20:3a:56:5d:3b:17:95:88:5a:
71:b1:61:f8:26:25:1b:56:17:1a:54:10:c6:d4:36:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3D:69:F8:82:09:F0:B2:78:37:C7:70:59:45:6E:80:2D:38:8B:B4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8j1p-IIJ8LJ4N8dwWUVugC04i7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:2240:1::/48
Signature Algorithm: sha256WithRSAEncryption
aa:ae:c3:7a:ee:31:d7:3a:6a:4d:74:67:09:fc:87:41:09:92:
57:25:2b:9f:01:ff:f9:c7:90:a3:af:4e:ce:39:69:85:b4:06:
ca:6d:5b:a0:aa:0a:d5:e5:e7:01:c7:cb:ee:1d:af:51:7a:d9:
e8:f1:cf:e9:3f:4a:87:58:18:98:95:c2:80:b3:5c:fe:41:3d:
52:02:23:da:48:92:97:dc:0c:61:ac:0d:3c:1b:bd:0e:b3:3e:
b9:0e:a7:60:62:32:d6:9e:6e:f8:b4:36:b0:23:cb:88:03:07:
61:82:5e:fd:89:eb:13:b4:b1:fd:7b:d8:38:7b:4c:41:04:c6:
38:5a:da:29:1a:62:96:19:6b:8c:d5:7a:1e:c5:b6:e7:6b:68:
dc:78:ec:80:29:2c:63:ad:71:bf:41:5e:09:83:d5:73:fb:0b:
a5:88:28:d4:bc:f9:72:44:a4:08:9a:c2:29:9b:ba:8b:bc:20:
42:ee:91:b5:0d:0b:fe:0b:01:30:ee:26:7e:f9:19:31:cc:5d:
55:75:51:d0:74:2e:df:6c:53:15:f3:9e:1c:ba:66:58:d0:81:
04:a7:ec:22:ce:fd:17:1f:04:c9:66:d2:ee:23:44:0c:c8:33:
6f:5b:a0:3f:61:fa:3e:bb:f9:2d:a5:f1:f8:35:a4:70:c3:b8:
2c:59:0f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:11:08 2025 by rpki-client