Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9Vj-t3Qexdkxf6PyiHCjBifF5tY.roa
File: 9Vj-t3Qexdkxf6PyiHCjBifF5tY.roa (raw, json)
Hash identifier: 3wbCkfW2Us296NwrgRFbtb2bzncS+CpH6tsy6QwWLpw=
Subject key identifier: F5:58:FE:B7:74:1E:C5:D9:31:7F:A3:F2:88:70:A3:06:27:C5:E6:D6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018C24C025FC930EF2527E425653F1ACE868
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9Vj-t3Qexdkxf6PyiHCjBifF5tY.roa
Signing time: Fri 01 Dec 2023 09:40:21 +0000
ROA not before: Fri 01 Dec 2023 09:40:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29465
IP address blocks: 2a13:e107:7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:c0:25:fc:93:0e:f2:52:7e:42:56:53:f1:ac:e8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 1 09:40:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f558feb7741ec5d9317fa3f28870a30627c5e6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:85:e8:5c:3e:0a:ec:27:76:9c:32:55:51:94:
9d:74:df:97:9a:f6:9d:47:36:3e:05:b3:ee:b9:aa:
ec:f3:92:fe:60:d6:56:1e:95:a7:b8:6d:79:85:ac:
65:a9:fc:2a:9a:c6:de:7b:e0:ac:a0:c8:3e:1d:5c:
ca:8d:2d:a7:a9:ee:0e:59:70:75:de:8e:a4:7b:01:
9e:5f:af:14:2f:8c:c4:65:16:7d:57:fa:57:15:ad:
2d:2c:e1:cd:1f:c1:d5:01:fd:3f:37:44:84:f2:e0:
70:ff:86:b5:f4:2f:ef:f8:52:70:90:43:35:98:85:
86:12:bd:8e:32:e9:2b:58:03:b4:92:d6:76:44:d3:
54:9b:e3:15:e5:ca:da:c6:bc:13:7a:4f:20:57:ae:
6b:3a:cc:2a:bf:fd:7b:11:6f:62:dc:4e:6b:87:a7:
1a:aa:14:3e:d5:d1:ed:7e:db:dc:3c:ba:b6:9d:13:
9c:48:fc:8f:75:5c:c8:9e:80:c6:7c:94:fe:45:34:
68:40:03:fd:b5:da:17:86:52:a5:09:96:79:be:ae:
a4:14:f8:42:bd:92:df:0c:a2:c2:ea:f0:60:de:d4:
84:6b:24:d1:88:4d:3f:34:6c:6f:54:bf:8a:e7:5b:
38:c8:2f:fb:8a:d0:60:06:59:e4:31:58:af:ad:cd:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:58:FE:B7:74:1E:C5:D9:31:7F:A3:F2:88:70:A3:06:27:C5:E6:D6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9Vj-t3Qexdkxf6PyiHCjBifF5tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e107:7::/48
Signature Algorithm: sha256WithRSAEncryption
c4:c4:91:ad:c8:32:35:76:64:1b:a7:10:35:3a:4c:4b:2d:d2:
30:3e:c2:23:9b:4f:5f:29:f1:4b:3f:cd:b4:42:f4:e2:0a:6a:
fe:e0:d2:94:0b:31:6b:95:2b:60:dd:50:01:6d:32:ee:0d:d1:
19:82:f2:a2:76:64:b4:0c:bc:33:a8:45:07:c9:c3:26:f6:de:
de:0e:ba:7a:a7:f1:b6:46:15:38:d8:b1:d4:b6:af:54:84:8a:
ca:a7:b4:7f:06:7e:5a:95:da:df:c4:48:04:12:a3:76:4b:17:
6b:12:2a:ca:97:a8:c9:5d:97:bd:12:4d:9f:df:02:41:d5:3f:
d5:6e:3b:a1:65:d0:d1:ed:8a:45:6a:57:30:5d:92:dc:4b:b9:
08:ff:2f:f1:4d:1d:ab:26:d7:5e:16:ee:d5:d7:44:4b:af:6b:
e2:15:37:57:ca:c5:5e:11:bd:c2:f4:bf:b6:8a:db:dc:92:f0:
4f:70:99:47:47:43:5a:77:87:8e:5f:76:2c:4f:fb:d0:92:d7:
7c:d2:c6:5f:f7:d5:4c:7d:9b:4d:1d:53:4f:b0:94:05:d5:1b:
3d:b3:31:42:6b:51:aa:e8:e6:3f:66:25:63:4c:38:0a:cf:64:
65:9a:96:f5:7a:82:64:37:de:c6:73:4c:ae:53:d9:de:82:c7:
a1:51:ac:ab
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYwkwCX8kw7yUn5CVlPxrOhoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMxMjAxMDk0MDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTU4ZmViNzc0MWVjNWQ5MzE3ZmEzZjI4ODcwYTMwNjI3YzVlNmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYXoXD4K7Cd2nDJVUZSddN+Xmvad
RzY+BbPuuars85L+YNZWHpWnuG15haxlqfwqmsbee+CsoMg+HVzKjS2nqe4OWXB1
3o6kewGeX68UL4zEZRZ9V/pXFa0tLOHNH8HVAf0/N0SE8uBw/4a19C/v+FJwkEM1
mIWGEr2OMukrWAO0ktZ2RNNUm+MV5craxrwTek8gV65rOswqv/17EW9i3E5rh6ca
qhQ+1dHtftvcPLq2nROcSPyPdVzInoDGfJT+RTRoQAP9tdoXhlKlCZZ5vq6kFPhC
vZLfDKLC6vBg3tSEayTRiE0/NGxvVL+K51s4yC/7itBgBlnkMVivrc1hkwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPVY/rd0HsXZMX+j8ohwowYnxebWMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvOVZqLXQzUWV4ZGt4ZjZQeWlIQ2pCaWZGNXRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhPhBwAH
MA0GCSqGSIb3DQEBCwUAA4IBAQDExJGtyDI1dmQbpxA1OkxLLdIwPsIjm09fKfFL
P820QvTiCmr+4NKUCzFrlStg3VABbTLuDdEZgvKidmS0DLwzqEUHycMm9t7eDrp6
p/G2RhU42LHUtq9UhIrKp7R/Bn5aldrfxEgEEqN2SxdrEirKl6jJXZe9Ek2f3wJB
1T/VbjuhZdDR7YpFalcwXZLcS7kI/y/xTR2rJtdeFu7V10RLr2viFTdXysVeEb3C
9L+2itvckvBPcJlHR0Nad4eOX3YsT/vQktd80sZf99VMfZtNHVNPsJQF1Rs9szFC
a1Gq6OY/ZiVjTDgKz2Rlmpb1eoJkN97Gc0yuU9negsehUayr
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:47 2025 by rpki-client