Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CM1-Lxj4TMjttKrNoRk39eX07Z8.roa
File: CM1-Lxj4TMjttKrNoRk39eX07Z8.roa (raw, json)
Hash identifier: OcKyOpp1Fwy2XRxvWIPi2xSmHLSoTOmMS+KLvtxFVkE=
Subject key identifier: 08:CD:7E:2F:18:F8:4C:C8:ED:B4:AA:CD:A1:19:37:F5:E5:F4:ED:9F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CA18A350626C9444E1F301A4473701C61
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CM1-Lxj4TMjttKrNoRk39eX07Z8.roa
Signing time: Mon 25 Dec 2023 15:13:58 +0000
ROA not before: Mon 25 Dec 2023 15:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216157
IP address blocks: 2a0a:2344::/32 maxlen: 32
2a0a:2342::/32 maxlen: 32
2a0a:2340::/32 maxlen: 32
2a0c:d384::/30 maxlen: 30
2a0a:2346::/32 maxlen: 32
2a0a:2343::/32 maxlen: 32
2a0a:2347::/32 maxlen: 32
2a0a:2345::/32 maxlen: 32
2a07:a300::/29 maxlen: 48
2a0a:2341::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a1:8a:35:06:26:c9:44:4e:1f:30:1a:44:73:70:1c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 25 15:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08cd7e2f18f84cc8edb4aacda11937f5e5f4ed9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cb:2e:54:27:a1:d2:1a:f9:47:8c:be:b8:d2:
f7:24:89:bf:dc:84:d5:43:df:97:89:c9:35:d9:f9:
e8:fd:10:39:a3:06:93:63:82:df:f2:b4:c2:cd:e8:
ef:39:af:6e:57:73:c3:06:1a:60:fb:c3:91:07:55:
c3:52:95:ff:39:e1:bf:55:de:56:32:e9:b9:2d:5f:
e7:a9:64:8f:f1:ba:5c:a3:f1:ed:5a:84:d4:ae:6d:
70:ea:df:ae:b5:01:c7:d5:7c:17:6f:17:95:01:c3:
3c:dc:c5:62:94:4d:89:eb:85:ca:75:26:17:8d:e7:
c4:47:d9:ea:26:6a:4c:12:cf:26:26:75:cb:1f:34:
7e:dc:5a:e6:3e:d1:11:5c:36:ae:4e:6c:2b:b0:c2:
b1:7b:55:4b:79:41:8d:45:df:78:f1:dd:8c:d5:64:
09:98:3b:5d:a5:f7:fd:82:32:73:aa:73:f0:1d:7f:
48:3a:f3:74:9b:08:e2:7e:d2:b6:cc:6c:ff:63:bb:
b9:45:f1:5a:28:83:4b:24:c5:7a:1e:f5:c5:37:b0:
5d:96:87:60:67:89:2a:12:06:31:b7:1b:bd:e2:2b:
81:26:d2:5f:38:03:63:f7:d6:8c:ec:c5:a9:8b:59:
4b:ba:58:b8:c9:c7:5d:e4:ac:24:f0:1d:5e:c8:3f:
41:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CD:7E:2F:18:F8:4C:C8:ED:B4:AA:CD:A1:19:37:F5:E5:F4:ED:9F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CM1-Lxj4TMjttKrNoRk39eX07Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:a300::/29
2a0a:2340::/29
2a0c:d384::/30
Signature Algorithm: sha256WithRSAEncryption
26:e8:8f:31:d2:86:a1:ed:7a:4f:6e:3c:ed:99:82:bc:62:b9:
cc:ab:18:d0:0b:bc:73:97:bd:34:73:ae:ff:cb:79:5e:11:fe:
78:3a:43:0d:3d:11:8f:1c:5a:3f:ab:8a:aa:db:8b:2e:e6:f0:
fb:75:7a:b3:bf:df:18:24:f7:80:28:36:24:47:69:12:ab:e3:
52:4b:93:e6:b3:ff:a6:90:b4:3d:1a:f1:92:21:e8:6a:86:d0:
43:d0:06:89:d4:51:24:12:e3:d7:a9:27:a6:1b:c7:2e:82:42:
bc:9a:14:7e:ed:2a:8e:0f:79:c1:67:e1:e1:dc:74:6d:df:94:
65:a5:d2:5a:ff:7c:ec:8f:a1:01:f5:da:88:9d:74:48:d4:d3:
1d:59:e7:d0:34:a4:a6:17:33:c2:85:38:bd:3c:3e:dd:14:bc:
87:62:d3:cf:09:f6:a9:75:83:ac:f3:02:fa:a2:45:cc:85:5a:
a0:25:45:4e:f4:ad:6d:50:a8:93:b4:9f:0f:a0:78:a5:bc:ab:
83:ae:01:9b:79:5c:11:e8:a8:c1:bf:c0:72:b1:0a:92:74:59:
82:d6:ea:4a:b0:9e:8e:f0:4f:cf:24:47:a8:99:db:a7:38:09:
a1:63:bf:6f:c3:61:c9:0a:8e:67:60:aa:93:6b:76:05:db:c2:
a6:2f:6f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:03:43 2025 by rpki-client