Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AnbfKOjmmdwsIkBASwMe42TW_OQ.roa
File: AnbfKOjmmdwsIkBASwMe42TW_OQ.roa (raw, json)
Hash identifier: 94VaYDo0d1aFqiFzoVxIZbSyLDVLsB9npvenZQSZQv8=
Subject key identifier: 02:76:DF:28:E8:E6:99:DC:2C:22:40:40:4B:03:1E:E3:64:D6:FC:E4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0183512B2B79AA99F3F60E564A27EACAD19C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AnbfKOjmmdwsIkBASwMe42TW_OQ.roa
Signing time: Sun 18 Sep 2022 15:15:27 +0000
ROA not before: Sun 18 Sep 2022 15:15:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30633
IP address blocks: 2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a12:ac40::/29 maxlen: 29
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0f:1e81:1293::/48 maxlen: 48
2a0c:9240::/29 maxlen: 29
2a0f:e940::/29 maxlen: 29
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:a01::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:1e00:123::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a12:d540::/29 maxlen: 29
2a0f:e842::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:51:2b:2b:79:aa:99:f3:f6:0e:56:4a:27:ea:ca:d1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 18 15:15:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0276df28e8e699dc2c2240404b031ee364d6fce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:86:2a:25:ab:cb:b4:3a:73:55:88:64:f2:dd:
4b:09:3e:86:21:77:60:99:57:4c:1f:db:3a:bd:28:
29:d2:30:d9:5e:04:8b:b3:bb:aa:88:5f:90:dc:52:
7e:5e:5c:4d:18:68:03:89:ce:f9:d1:e7:01:5a:3c:
39:0d:11:7b:a3:18:8f:45:13:95:67:6a:93:5a:7d:
f1:85:e0:e8:88:f4:b5:b2:3c:34:a7:1a:58:c2:83:
83:82:21:67:96:56:e1:e6:ba:76:ce:9c:18:e2:a3:
97:71:22:ee:e0:96:6b:ab:9d:94:1d:48:cf:25:ab:
58:bd:bb:54:5d:7d:04:ce:51:03:f7:7e:a5:b0:3f:
4d:d3:0d:42:1a:85:fb:bd:b8:54:ab:08:60:87:02:
18:1a:75:bf:d7:9e:09:4a:e7:b3:b0:e2:ec:4f:e3:
f6:bc:02:8f:46:1d:fb:ec:7b:c2:c1:2c:8e:10:16:
a1:61:01:53:cb:19:7f:31:aa:3c:22:86:cc:7e:3f:
76:e8:86:2e:ad:0d:4d:4a:ff:a5:63:68:bb:90:fe:
1e:68:05:75:88:7d:2a:e7:45:37:9f:04:72:2c:54:
a1:b6:29:c1:ce:6b:f1:16:2a:ef:1a:31:bf:fa:7f:
1e:5d:2e:61:29:99:56:c8:e7:55:3f:fc:63:ed:25:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:76:DF:28:E8:E6:99:DC:2C:22:40:40:4B:03:1E:E3:64:D6:FC:E4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AnbfKOjmmdwsIkBASwMe42TW_OQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f300::/29
2a0c:9240::/29
2a0e:5a80::/29
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:e842::/32
2a0f:e940::/29
2a12:ac40::/29
2a12:d540::/29
Signature Algorithm: sha256WithRSAEncryption
aa:8a:5f:a2:09:90:fd:0e:f4:db:c2:69:60:17:e4:18:05:e6:
9c:23:b0:49:0e:b1:92:6a:2c:ca:0a:99:e5:81:1b:47:30:f0:
32:3f:ec:ce:c2:1b:38:87:ef:5b:ff:30:28:6d:36:ac:a8:f3:
15:06:1d:35:86:06:9e:09:7e:67:fb:e5:80:ef:f7:7f:40:ab:
4c:7d:8b:fe:38:6a:9d:ab:13:13:7a:16:9c:89:cd:1d:46:de:
c9:c6:04:7c:d5:ae:61:48:a6:d3:e7:36:be:1e:87:db:58:7a:
73:72:af:de:2f:18:68:84:f9:34:a5:ea:cb:cd:08:81:19:04:
7a:73:28:76:03:1a:e6:39:db:35:6e:62:41:57:3a:07:b0:e0:
ac:9b:3e:8c:ec:61:2a:8c:f4:27:db:4b:b1:73:75:e7:a4:4f:
db:40:08:83:fd:b4:03:32:b0:18:c6:5b:e5:ef:0f:15:99:7b:
e6:79:10:de:55:b3:c7:66:95:1f:47:23:f5:fc:33:ca:66:2d:
8e:14:8f:e0:dc:cf:46:25:c6:3a:13:90:24:8c:4c:e2:38:ea:
5a:d7:c7:c2:ec:9c:90:71:4c:9d:ae:1d:cc:fe:d4:9f:55:53:
18:67:d0:0d:8f:da:12:33:0f:9b:f0:76:32:0f:18:38:e9:6c:
1d:51:9a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:38 2025 by rpki-client