Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8yJKvxSat8MqtKvp4FtoAB3R-Ck.roa
File: 8yJKvxSat8MqtKvp4FtoAB3R-Ck.roa (raw, json)
Hash identifier: hNPIzWlp93YfucUVC0B5C+NISc+KdUeJxALFceUjzPI=
Subject key identifier: F3:22:4A:BF:14:9A:B7:C3:2A:B4:AB:E9:E0:5B:68:00:1D:D1:F8:29
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01856DCAF168EB8A1A86CE8FAA4998CFC53D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8yJKvxSat8MqtKvp4FtoAB3R-Ck.roa
Signing time: Sun 01 Jan 2023 14:44:54 +0000
ROA not before: Sun 01 Jan 2023 14:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 2a0f:dfc4::/32 maxlen: 32
2a12:f440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:f1:68:eb:8a:1a:86:ce:8f:aa:49:98:cf:c5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 14:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3224abf149ab7c32ab4abe9e05b68001dd1f829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:5a:42:d0:2f:a3:ff:f8:85:1c:5e:f0:ba:
81:e5:27:7f:7e:83:75:17:35:55:94:08:d6:cc:9d:
fe:83:77:14:6f:04:ce:f9:5a:d8:84:67:20:35:57:
74:16:19:9f:0d:8b:c0:4d:ff:b6:d1:c2:bb:36:c7:
f1:e6:46:41:f3:17:d8:6e:64:70:70:11:1f:db:1a:
57:f3:db:e8:c2:a4:fb:ea:19:d5:0a:12:ea:78:3d:
e7:f5:2b:df:2e:da:cf:bd:e6:b4:8a:45:df:83:22:
f6:bc:fc:2c:91:e4:85:01:0b:a5:9f:d4:25:08:ae:
8f:9a:c2:3f:11:e9:53:31:70:d0:40:74:53:9d:38:
28:e0:5c:95:a2:89:d5:8b:f4:8f:14:36:46:6c:4c:
8e:61:c0:e6:d6:e4:31:76:70:09:c8:24:f6:8b:d6:
ca:2f:89:55:ed:54:7a:67:89:11:32:1a:54:ed:18:
bf:a4:2d:19:9c:06:fc:c9:ea:55:da:00:ba:2a:56:
76:75:d2:df:28:67:99:6a:24:ca:5b:5e:c5:7b:5f:
5f:c9:16:60:8e:cb:ad:79:40:f5:3f:dd:f0:1c:48:
83:50:47:0d:8d:11:ad:b4:22:1b:33:02:fe:e6:cb:
df:e1:bd:f0:d8:a6:45:69:04:03:80:74:ca:45:c1:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:22:4A:BF:14:9A:B7:C3:2A:B4:AB:E9:E0:5B:68:00:1D:D1:F8:29
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8yJKvxSat8MqtKvp4FtoAB3R-Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:dfc4::/32
2a12:f440::/29
Signature Algorithm: sha256WithRSAEncryption
1d:a4:41:34:0c:c5:da:8b:e7:b4:20:0e:30:5b:1b:5f:2a:1b:
80:c2:07:7d:c9:4c:ab:af:73:dc:57:a5:03:f1:d4:cb:26:9e:
0f:5c:32:b9:07:0f:7f:64:72:20:c6:0e:24:26:da:ec:ca:40:
2b:13:6a:ba:96:f8:5f:01:36:c8:a0:8b:8b:0c:6a:6c:2a:e2:
65:81:56:76:70:f6:23:d2:20:13:22:b3:f2:81:84:6a:67:f8:
d1:9c:2b:63:ec:a6:10:b0:31:77:35:c1:e6:21:02:25:2a:89:
27:c6:d2:fc:09:8b:bf:df:72:1a:cb:9e:84:76:82:e6:5f:b2:
e9:46:a8:f6:ad:ad:1d:9f:fe:23:3e:a4:5a:20:04:27:b0:c1:
df:e4:58:93:af:54:51:ac:0d:75:46:5b:98:da:d1:a8:14:f8:
bd:15:23:b9:a9:92:be:a8:f3:d5:43:4a:55:64:a1:1d:a4:3b:
8a:2b:83:35:8d:78:e1:19:48:2f:e3:b4:9f:4b:01:91:f9:d1:
9a:e8:15:a0:0a:9a:f9:64:30:44:9d:30:6f:04:7b:69:d1:6a:
00:46:d8:24:ff:2e:3b:a3:74:a4:a8:e3:75:83:15:a6:48:01:
f7:48:1f:1c:39:c1:eb:08:f9:d9:64:72:10:66:fd:55:d8:6e:
d6:32:30:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:00 2025 by rpki-client