Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9msYnc3VwSuyAAalni4FEoN3o0g.roa
File: 9msYnc3VwSuyAAalni4FEoN3o0g.roa (raw, json)
Hash identifier: 8eeptVmHBEBWWyCuThwWmTJq8DosYjD+JrgGRM2CCY8=
Subject key identifier: F6:6B:18:9D:CD:D5:C1:2B:B2:00:06:A5:9E:2E:05:12:83:77:A3:48
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0182B5C83F631C69269886ACA9058EC68065
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9msYnc3VwSuyAAalni4FEoN3o0g.roa
Signing time: Fri 19 Aug 2022 11:06:15 +0000
ROA not before: Fri 19 Aug 2022 11:06:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203629
IP address blocks: 2a0e:9b00::/29 maxlen: 29
2a0f:1380::/29 maxlen: 29
2a0f:cc00::/29 maxlen: 29
2a0f:1480::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a0f:e4c0::/29 maxlen: 29
2a0f:1580::/29 maxlen: 29
2a0f:3f80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b5:c8:3f:63:1c:69:26:98:86:ac:a9:05:8e:c6:80:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 19 11:06:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f66b189dcdd5c12bb20006a59e2e05128377a348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:86:61:c9:b3:4a:b2:0b:73:3a:b6:18:72:cd:
a3:37:67:62:11:1f:07:93:2a:f9:44:e1:23:98:42:
0a:33:4f:c9:cc:98:94:02:89:dc:c1:96:45:2d:55:
db:cf:7f:8d:22:ea:27:0d:76:a1:cb:73:1d:74:1c:
29:79:fe:21:64:b4:f8:48:06:9c:8c:5a:fe:50:5b:
83:f4:30:bf:67:91:f3:24:c8:96:b2:d3:d3:22:75:
e8:e1:9d:4a:5a:06:94:cc:07:b9:75:23:9d:91:c4:
4c:dd:ad:d1:76:16:8b:08:c1:4c:73:12:25:74:0e:
38:93:8e:51:50:f1:d7:29:52:18:94:a7:16:ff:3e:
d1:3c:23:bd:5c:36:5b:c3:c1:ea:b1:1e:f6:b2:4f:
13:fb:de:34:9c:8c:41:40:51:cc:87:38:10:8f:3f:
08:d9:49:2e:51:b8:5c:6b:c8:b4:a9:f1:20:a9:e3:
d8:5b:10:5f:92:d4:66:9c:d7:ee:b1:8e:7e:c3:11:
7b:1e:75:f9:89:9d:64:88:e8:6e:63:d7:58:07:d9:
39:52:13:63:e9:38:de:d0:09:6b:16:12:72:06:51:
de:1b:a1:d7:c5:a1:37:42:30:fa:e8:72:b7:a3:20:
6e:6b:0c:97:6a:30:5f:5d:45:29:d9:d6:5e:c4:d6:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6B:18:9D:CD:D5:C1:2B:B2:00:06:A5:9E:2E:05:12:83:77:A3:48
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9msYnc3VwSuyAAalni4FEoN3o0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:9b00::/29
2a0f:1380::/29
2a0f:1480::/29
2a0f:1580::/29
2a0f:2500::/29
2a0f:3f80::/29
2a0f:cc00::/29
2a0f:e4c0::/29
Signature Algorithm: sha256WithRSAEncryption
4f:f3:30:d0:54:06:8d:30:b3:19:60:a1:f3:54:ee:0c:f4:25:
3b:c5:24:a3:23:dc:6a:d4:9a:08:e0:4b:ae:71:b3:72:82:df:
27:1a:6a:31:67:49:02:d4:4a:9a:84:e8:01:27:db:b1:0e:3e:
f2:5b:13:19:da:7f:17:c7:44:50:f2:49:2a:80:ca:e4:b0:fc:
26:77:e8:36:2c:5e:cf:26:3f:d7:17:1c:19:d9:63:4c:2f:54:
72:b1:c5:d1:ea:23:4b:12:bc:40:88:b6:54:d1:94:24:58:7a:
03:6c:33:8a:6c:bf:88:45:d0:31:86:8b:91:cf:1e:ec:03:74:
13:82:56:99:ce:0f:14:e6:5a:ce:1e:d9:a1:e9:a9:38:c8:f3:
72:4b:ce:cf:34:c9:45:98:d6:c0:fa:5d:c0:39:36:71:a3:d3:
8a:0b:3c:6c:d7:ad:6a:ff:cf:21:6d:b8:f5:4f:2c:91:b3:d9:
d8:d5:54:be:0d:6d:33:57:62:21:1e:ed:cd:5f:de:d3:a0:18:
fe:01:03:92:40:e0:01:36:e6:22:be:1c:4f:94:44:1a:a3:44:
14:f0:83:d5:ae:22:bd:2e:91:4e:ad:7f:a2:31:89:d4:b2:c7:
c6:dd:52:93:ec:74:d8:0b:6d:e4:ab:39:5e:3d:cf:65:f5:5d:
0a:9c:e2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:34 2025 by rpki-client