Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8p1VammFrGrSM7gp7X4Bisxj2SE.roa
File: 8p1VammFrGrSM7gp7X4Bisxj2SE.roa (raw, json)
Hash identifier: E5WfFFXZQ4s9GZbQ7u7ypVTooQyL1lgjh8WF2nb4TlU=
Subject key identifier: F2:9D:55:6A:69:85:AC:6A:D2:33:B8:29:ED:7E:01:8A:CC:63:D9:21
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0187B757C73691A15C2D80437B1F1AB96B46
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8p1VammFrGrSM7gp7X4Bisxj2SE.roa
Signing time: Tue 25 Apr 2023 07:36:35 +0000
ROA not before: Tue 25 Apr 2023 07:36:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 2a0f:3d86::/32 maxlen: 32
2a0e:2240:5::/48 maxlen: 48
2a0e:2240:3::/48 maxlen: 48
2a0f:3d85::/32 maxlen: 32
2a0f:a200::/32 maxlen: 32
2a0f:3d81::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:57:c7:36:91:a1:5c:2d:80:43:7b:1f:1a:b9:6b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 25 07:36:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f29d556a6985ac6ad233b829ed7e018acc63d921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9b:af:26:8d:3b:c7:98:cd:ab:90:4d:b6:bb:
f3:15:c8:78:30:8b:36:9e:0b:ff:c5:de:c3:9d:9c:
1a:e4:ad:2a:ff:fa:f2:6e:cd:51:c5:ed:8a:09:e1:
c5:e7:4c:1f:0c:ed:36:fb:27:df:67:8d:45:09:28:
9a:ec:ae:38:5f:f7:4d:1a:df:8c:50:4f:f6:c3:c7:
26:3c:ee:c7:59:2e:68:e5:32:6f:03:9f:70:a7:b8:
53:6c:38:fa:f7:65:f9:7e:36:db:ff:cc:01:dd:31:
7c:8e:96:4b:3c:59:34:40:b3:d6:4d:eb:d4:2f:9a:
bf:d7:c1:bb:45:fa:97:85:2d:24:01:7d:a3:b5:ed:
65:9e:4d:b2:52:d6:50:21:ee:3c:5b:f4:f8:89:78:
6e:42:7f:cc:8a:80:59:46:0b:db:70:4e:98:11:4d:
ad:ec:ea:98:ad:1a:d1:c1:ab:20:6a:bf:44:61:38:
f9:6f:45:c0:61:90:74:96:06:c1:33:8b:4a:d4:4a:
ff:41:0d:4b:45:17:2f:50:ad:1c:d6:91:1c:cb:0f:
4f:05:df:36:3b:e7:b7:08:56:99:7d:fd:23:0a:93:
ba:38:cf:ad:91:04:93:61:38:be:dd:1c:f1:b0:74:
7b:87:98:9d:26:8d:30:bd:61:8c:0c:44:c5:dc:2b:
c8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9D:55:6A:69:85:AC:6A:D2:33:B8:29:ED:7E:01:8A:CC:63:D9:21
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8p1VammFrGrSM7gp7X4Bisxj2SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:2240:3::/48
2a0e:2240:5::/48
2a0f:3d81::/32
2a0f:3d85::-2a0f:3d86:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:a200::/32
Signature Algorithm: sha256WithRSAEncryption
9d:da:d9:b5:80:21:52:06:b0:73:82:70:17:a6:59:6d:05:b6:
a5:40:bd:1e:52:db:0b:05:03:f8:8d:d8:26:58:80:ec:98:62:
1c:74:ee:a0:31:5b:7a:b2:ac:2e:c8:81:11:af:a8:cf:f8:83:
17:f6:47:a0:e7:d5:d3:2c:71:a7:42:04:2e:5e:f2:a0:21:21:
ee:d8:60:08:1e:2a:b1:df:e2:df:80:ed:c8:df:60:90:51:76:
b3:9b:6f:dc:79:68:aa:cc:62:6d:77:9d:cb:d7:c4:68:38:ca:
9c:3f:fc:76:a2:28:ae:44:dd:2c:99:31:e2:62:d8:5f:3d:a7:
85:81:1e:76:82:00:ee:37:4a:c7:60:7c:3c:0b:4e:49:6f:82:
11:81:dd:96:69:84:d9:92:9f:cd:4d:b9:ee:b1:30:0a:a1:8a:
d5:52:ee:6f:47:03:10:7a:64:be:7f:92:9c:77:1f:c6:d4:7c:
aa:1a:f4:63:12:27:ea:9f:18:bf:4a:de:82:82:6e:b6:a3:57:
67:cc:b0:43:6f:58:f4:8f:23:d4:28:61:a2:cb:f4:77:af:01:
d4:6d:4e:e7:d8:2b:18:a6:e2:d8:05:8c:47:47:2e:30:60:c9:
fd:e7:67:64:f7:70:74:a0:3c:e4:e4:74:2d:4f:7b:13:73:d0:
59:dd:77:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:54 2025 by rpki-client