Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/B_PPb4afchPCG_vmX5e7YRF5wX0.roa
File: B_PPb4afchPCG_vmX5e7YRF5wX0.roa (raw, json)
Hash identifier: /HXRCU9UnxgwBvYfs7+p1osTdx2SHHKmSe/Mion2r70=
Subject key identifier: 07:F3:CF:6F:86:9F:72:13:C2:1B:FB:E6:5F:97:BB:61:11:79:C1:7D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0183EBA21616588E77CBB491B1DB5E9DC543
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/B_PPb4afchPCG_vmX5e7YRF5wX0.roa
Signing time: Tue 18 Oct 2022 15:06:51 +0000
ROA not before: Tue 18 Oct 2022 15:06:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30633
IP address blocks: 2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0f:3d84::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:3d80:123::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a12:f540::/29 maxlen: 29
2a12:ac40::/29 maxlen: 29
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0c:9240::/29 maxlen: 29
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:e842::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:a2:16:16:58:8e:77:cb:b4:91:b1:db:5e:9d:c5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 18 15:06:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07f3cf6f869f7213c21bfbe65f97bb611179c17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:2f:4f:18:6c:8b:6d:1c:d7:91:97:54:79:
ca:db:fc:be:5f:46:79:bc:7c:dc:f2:b9:4b:63:f5:
46:ec:1a:c5:79:be:77:f7:33:53:08:c8:d4:25:38:
c2:cd:21:a2:aa:b8:dc:26:29:4f:21:cc:18:c5:d4:
b2:a8:fa:f0:74:64:03:75:06:d3:eb:43:3b:ff:c4:
eb:b5:3f:e2:f0:9f:17:11:64:a8:9d:e5:47:b6:b2:
bf:80:3a:ab:43:3e:62:52:92:99:12:5f:df:62:e2:
a0:95:5a:99:d1:2a:16:b0:11:61:7d:22:f0:a2:c1:
35:bf:05:e5:ed:ab:74:0d:34:2c:7f:9e:17:c0:31:
56:5d:e2:ba:29:0c:69:16:9e:fb:f8:17:27:6e:f3:
b9:fb:7c:16:77:00:e6:3a:ff:7d:c2:da:08:60:ba:
6d:19:bc:2b:f2:80:d1:93:65:57:ad:9e:ac:d8:a7:
09:fb:50:ce:14:98:8c:a9:87:68:bd:66:0e:dd:34:
21:a7:40:1c:69:15:9a:ba:e7:a2:4e:11:e9:49:47:
52:4c:55:36:5c:7b:e9:bc:60:6e:d9:17:60:b9:e5:
c9:11:77:86:ae:7c:79:0d:17:10:4e:df:1d:a5:2a:
05:b8:f1:dd:88:b2:4e:df:3f:7e:9f:be:2e:8c:a8:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F3:CF:6F:86:9F:72:13:C2:1B:FB:E6:5F:97:BB:61:11:79:C1:7D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/B_PPb4afchPCG_vmX5e7YRF5wX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f300::/29
2a0c:9240::/29
2a0e:1a80::/32
2a0e:5a80::/29
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:e842::/32
2a0f:e940::/29
2a12:ac40::/29
2a12:d540::/29
2a12:f540::/29
Signature Algorithm: sha256WithRSAEncryption
c2:75:94:b8:10:11:93:f1:c5:43:1b:2f:82:c9:71:7e:25:83:
cc:ff:e8:a1:1e:1f:2d:3c:6c:2c:f2:73:d4:d1:88:e3:4f:f7:
4e:84:5a:b3:f8:3b:7a:30:7e:6d:39:93:88:22:f2:69:a3:b5:
95:9a:04:e4:4d:62:14:85:46:94:60:36:d9:4e:d2:d0:c0:ca:
30:dc:97:b3:90:46:81:a2:28:dd:de:f2:5b:ba:98:a6:f1:8a:
07:56:dd:83:3d:d0:ec:25:66:7c:f2:4c:8a:59:a8:0e:fc:c3:
a5:89:b4:e8:62:98:73:cf:fe:87:85:87:7a:a7:c2:ee:f2:16:
2e:24:61:2c:cc:83:ae:dd:05:66:33:02:c3:b6:20:1c:f3:20:
59:ea:e9:46:2e:4c:70:00:3e:31:44:5f:59:ad:1b:cf:05:83:
eb:1e:82:e5:27:f7:6e:e4:22:1b:af:4a:7a:65:c0:4c:5b:19:
a2:f4:df:e8:f8:30:34:85:d2:a8:a0:bf:d5:4a:94:32:7a:4d:
2f:be:8d:50:1b:fd:7d:7a:ff:53:26:c2:6e:48:9e:c6:6c:ff:
ac:29:0a:e2:61:98:f3:07:0a:0a:67:47:e1:ef:b0:63:7b:11:
4e:a4:2e:dc:70:cb:5c:f5:5c:29:6d:d1:f7:c2:ab:ea:6d:a4:
a7:53:79:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:40:13 2025 by rpki-client