Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9dosMjZzCBiVQNLfozXEyehe01U.roa
File: 9dosMjZzCBiVQNLfozXEyehe01U.roa (raw, json)
Hash identifier: R/vczueYcma1ToidP08rV8T4N9VZfAC3FiPfVHMB2e0=
Subject key identifier: F5:DA:2C:32:36:73:08:18:95:40:D2:DF:A3:35:C4:C9:E8:5E:D3:55
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0189FD21A71851B01DC31A36FA8799CCF8B2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9dosMjZzCBiVQNLfozXEyehe01U.roa
Signing time: Wed 16 Aug 2023 06:56:28 +0000
ROA not before: Wed 16 Aug 2023 06:56:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198231
IP address blocks: 2a13:d700::/29 maxlen: 29
2a13:2d40::/29 maxlen: 29
2a13:2dc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:21:a7:18:51:b0:1d:c3:1a:36:fa:87:99:cc:f8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 16 06:56:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5da2c32367308189540d2dfa335c4c9e85ed355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:da:53:9a:cc:15:dc:20:7a:7d:04:4e:f3:d0:
cb:7a:21:5d:02:cd:8a:ed:fa:b3:41:98:6f:84:03:
6f:46:70:72:b6:54:29:d4:e6:a2:fb:e0:18:b6:36:
88:b7:f6:9a:70:3b:8e:75:10:80:98:9a:bc:88:a0:
89:5a:32:44:c8:e7:6c:1a:90:f1:04:15:b1:58:9f:
38:80:ef:aa:74:3e:ee:fa:89:b5:11:ed:a1:f7:7c:
4a:df:8a:cb:98:08:f5:17:ff:36:d9:3d:88:82:ee:
c4:69:94:85:86:23:37:7a:19:06:92:9c:52:92:84:
21:68:fa:a0:d1:21:3c:d8:37:17:bd:91:e9:04:55:
2b:f9:34:57:64:6b:1b:58:6d:e0:62:86:13:26:16:
0b:b1:a7:29:82:b9:df:f0:fc:68:27:5f:05:d0:cf:
5f:93:9f:52:f5:7d:d3:0e:d1:29:88:73:cb:22:80:
10:7a:1d:cb:27:49:b3:ae:bb:30:8c:96:19:04:d0:
18:c5:af:c8:b2:1f:c4:b3:ab:2e:31:f1:ef:7c:91:
61:74:08:dc:d2:ce:69:06:07:19:36:6f:f0:39:1d:
9f:65:ba:22:8d:53:73:3e:be:14:b0:8d:bb:cd:80:
81:a0:b6:f2:a1:10:44:c0:bb:aa:a9:05:de:e1:1d:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DA:2C:32:36:73:08:18:95:40:D2:DF:A3:35:C4:C9:E8:5E:D3:55
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9dosMjZzCBiVQNLfozXEyehe01U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2d40::/29
2a13:2dc0::/29
2a13:d700::/29
Signature Algorithm: sha256WithRSAEncryption
36:5d:b1:49:58:b2:a3:8f:fc:fc:9a:d8:28:fb:44:3b:e4:80:
ec:ee:35:12:99:3c:52:ff:ae:a0:4f:08:31:0d:9a:8f:a2:1f:
d8:23:31:0a:45:8b:b7:d6:d9:7e:70:de:4c:c9:9c:67:dc:ed:
b0:55:f7:c3:b3:78:1a:43:3b:a9:a1:aa:ca:ec:1f:3a:4a:dc:
8c:ae:26:c7:e7:ba:0f:e3:85:1c:0f:51:13:a3:ee:52:59:e6:
83:66:78:07:f6:a2:0b:cf:53:a0:b9:76:ee:1b:2d:b6:33:ae:
ac:46:71:72:3e:8e:0c:87:e2:94:af:13:4b:10:b2:69:d0:88:
b2:a7:1f:eb:df:fe:f8:33:0b:9b:55:af:ab:4c:14:d0:2f:ab:
5c:c8:70:cc:0d:05:9e:16:3a:53:33:57:e4:68:ee:5c:0e:c1:
f4:3b:f8:ac:0d:70:c5:94:c0:56:32:e2:ae:d3:1c:93:18:60:
59:d6:6e:e7:64:29:10:0e:97:a6:67:f5:f8:99:38:83:4a:f8:
6e:85:77:a7:47:fa:b0:f5:50:d0:bb:83:65:d8:a2:b9:97:be:
35:55:f7:9f:33:68:49:d3:8b:9b:1b:21:97:6c:b0:80:40:d2:
75:4e:ce:61:7c:ed:15:a1:88:fa:76:aa:48:65:af:61:cf:43:
5e:9b:05:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:27 2025 by rpki-client