Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9IFxijgTt8IU3OMrctZvH8cHf0U.roa
File: 9IFxijgTt8IU3OMrctZvH8cHf0U.roa (raw, json)
Hash identifier: x+huBPUdpGWDjBHBYnA53tVJeqkZrPUi/Jnb2VYJXJY=
Subject key identifier: F4:81:71:8A:38:13:B7:C2:14:DC:E3:2B:72:D6:6F:1F:C7:07:7F:45
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0189FDEA19E281B7B25F6DD923F67CA9F82F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9IFxijgTt8IU3OMrctZvH8cHf0U.roa
Signing time: Wed 16 Aug 2023 10:35:24 +0000
ROA not before: Wed 16 Aug 2023 10:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55081
IP address blocks: 2a13:d900::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:ea:19:e2:81:b7:b2:5f:6d:d9:23:f6:7c:a9:f8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 16 10:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f481718a3813b7c214dce32b72d66f1fc7077f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:31:31:2c:24:e6:3b:05:93:90:aa:b3:d7:53:
15:6a:4b:e7:3f:ed:23:bb:b8:33:71:ba:bf:12:09:
d3:f0:ca:72:d6:a6:ab:8b:bb:bb:e7:60:86:ec:e6:
fd:8a:63:45:2c:71:d4:2a:cc:88:b0:54:64:71:e3:
e1:f5:ae:6f:22:d8:22:c2:59:ef:7d:90:f7:1e:48:
f9:40:b2:5e:69:cb:cc:62:ad:a4:ff:84:a2:b0:22:
f6:37:9e:14:8f:18:6d:a7:92:cb:19:60:d4:15:20:
97:28:46:72:47:12:67:40:c4:d4:db:b8:20:1e:a6:
13:70:c5:06:8d:f9:b2:96:d2:42:86:b4:ae:83:b5:
29:13:b0:be:0e:a9:a9:a9:74:c9:01:77:66:49:e6:
d6:c3:d3:c5:62:2b:2f:fd:13:72:31:7c:d2:ab:c3:
a8:ee:99:b9:60:f0:28:71:d6:fe:fd:36:4d:e7:42:
95:d0:65:9c:e6:88:e3:a4:05:18:d2:a9:15:6e:c3:
50:90:5a:df:27:06:71:22:fd:ca:16:49:96:17:2c:
2f:10:31:35:03:24:37:82:e2:1e:54:e6:0b:ef:50:
a6:aa:6e:06:10:2a:ec:0b:9c:c6:ae:3c:72:81:7e:
24:a5:12:61:d8:b6:5c:37:58:55:4c:5a:38:1c:fd:
31:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:81:71:8A:38:13:B7:C2:14:DC:E3:2B:72:D6:6F:1F:C7:07:7F:45
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9IFxijgTt8IU3OMrctZvH8cHf0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d900::/29
Signature Algorithm: sha256WithRSAEncryption
91:15:b3:0e:bb:5c:d3:7f:c6:87:58:c4:ef:f9:3a:0f:0c:5d:
16:e4:40:4c:98:1d:fd:f5:f2:17:47:25:18:04:00:fa:1c:08:
95:a5:e6:6b:72:3a:2e:22:7a:7b:d0:69:9e:35:cd:88:2b:7b:
48:95:ad:b5:8f:44:bc:9e:6d:7b:a4:05:9a:b2:89:c6:89:54:
e1:dc:39:63:e6:1e:ad:ff:f8:75:2c:5c:bd:6d:62:1e:95:c4:
a2:75:d5:1c:b6:e0:6c:9e:4e:98:0e:d9:1e:c7:e6:07:7d:89:
e2:a8:9c:3b:2c:71:05:fc:6a:80:15:ea:41:6e:e8:98:a7:0d:
37:af:ba:7f:43:0d:88:4a:e2:6b:35:12:81:b6:db:b1:56:0d:
0b:0c:15:84:61:58:bd:55:46:b4:e1:7d:66:11:a5:a3:f9:49:
63:47:da:39:43:c8:36:27:03:e4:a7:1d:e6:be:df:03:dc:64:
ac:8c:d5:9e:b1:c9:98:e9:dd:8c:73:e8:94:da:0e:97:7c:ac:
ef:da:32:d9:e3:72:1f:c7:19:c5:0a:80:f9:99:c0:d6:e1:92:
93:8a:a9:f4:60:90:f6:f5:c9:45:65:0f:53:e5:31:d5:86:72:
13:29:ad:eb:77:c3:80:4a:62:de:42:ce:af:63:5d:fc:1f:83:
a2:fd:90:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:35:26 2025 by rpki-client