Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E4_2LBIFS8Z2YfUSHTXYE62cWyk.roa
File: E4_2LBIFS8Z2YfUSHTXYE62cWyk.roa (raw, json)
Hash identifier: s5WIenHPDESzMfFLGFGfwGuzxswbyqs9UnagWIikrjo=
Subject key identifier: 13:8F:F6:2C:12:05:4B:C6:76:61:F5:12:1D:35:D8:13:AD:9C:5B:29
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018A3A6F7D36E78B14AC74B786C113B4F5C9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E4_2LBIFS8Z2YfUSHTXYE62cWyk.roa
Signing time: Mon 28 Aug 2023 04:38:19 +0000
ROA not before: Mon 28 Aug 2023 04:38:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198231
IP address blocks: 2a13:d700::/29 maxlen: 29
2a13:2d40::/29 maxlen: 29
2a13:2dc0::/29 maxlen: 29
2a13:c700::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3a:6f:7d:36:e7:8b:14:ac:74:b7:86:c1:13:b4:f5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 28 04:38:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=138ff62c12054bc67661f5121d35d813ad9c5b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a2:03:cc:61:db:cd:5a:77:90:32:02:ed:a6:
2c:4e:69:de:51:4c:81:6d:b0:f1:cf:e1:e7:c9:b2:
f3:a3:e7:2b:df:58:4e:17:a5:cf:f8:2f:40:17:33:
7d:33:f2:6a:eb:14:4a:eb:cd:d2:b2:de:9f:51:09:
f6:c7:5e:e1:2b:7f:f3:cc:80:a1:bb:c5:4e:e0:f8:
50:10:cd:0b:b9:d0:bf:21:3d:21:69:2a:01:78:7f:
8f:d2:98:96:ad:26:c3:95:d1:39:ec:1a:4b:45:e5:
fd:7e:42:7a:e4:b2:b1:00:6a:b3:d1:99:b5:ce:2a:
c9:b3:f0:64:a0:1c:c6:4d:7b:ca:c5:9e:b0:86:ee:
f1:13:d9:91:56:24:cf:7f:e8:3c:88:81:5d:1a:f6:
47:44:40:8c:c9:07:f5:fd:22:52:d6:08:21:9b:c3:
fc:df:df:fd:4c:cd:81:0f:1f:e0:29:bb:65:c8:c7:
cc:b2:13:be:e6:49:e1:db:de:33:9a:6a:1b:af:ca:
69:b3:40:c4:cc:86:73:0a:74:9d:ff:ad:5b:2d:b2:
e1:09:e6:67:18:38:23:3f:01:ce:cb:04:2e:1b:b1:
d7:db:32:b2:95:df:c6:32:a1:b6:42:c7:d9:14:4a:
3e:18:e6:5a:d6:d1:d4:92:28:3b:bb:e4:a7:b5:25:
a0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8F:F6:2C:12:05:4B:C6:76:61:F5:12:1D:35:D8:13:AD:9C:5B:29
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E4_2LBIFS8Z2YfUSHTXYE62cWyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2d40::/29
2a13:2dc0::/29
2a13:c700::/29
2a13:d700::/29
Signature Algorithm: sha256WithRSAEncryption
14:73:5a:4c:99:50:dd:f9:16:ae:96:71:00:ff:dc:4d:7b:eb:
32:b3:4d:29:5d:7c:c8:e6:d6:be:ef:12:9c:c7:c5:6b:d7:c4:
3a:65:e9:b6:e1:c6:2e:bf:50:66:d2:c1:43:de:d6:fb:c7:08:
d7:12:f3:23:eb:eb:6b:ba:97:4d:42:9e:79:ec:f4:84:f2:1a:
b7:6a:18:bc:9b:b3:01:36:e3:13:ce:01:96:74:04:a9:82:c7:
f3:8c:66:a6:1a:dc:5e:9f:91:f5:47:93:a3:39:70:ff:52:92:
2d:f1:74:88:0d:90:ee:f7:23:51:09:2a:ad:ef:25:3f:ee:d0:
5e:9b:02:b1:70:5c:1e:27:ab:14:92:e1:74:c2:c8:d3:33:5f:
28:d7:3b:8d:a3:50:09:8a:8f:0a:15:d1:d9:2a:7e:f5:65:d1:
b3:ae:91:85:27:da:76:cd:6c:d8:78:c8:77:e8:77:7f:5c:a0:
2c:c4:16:97:4e:5d:1b:78:84:a4:0a:98:b2:c0:f7:79:50:23:
fb:67:7f:3e:e4:fe:5f:d4:3f:24:e2:49:0b:50:20:5c:c1:9a:
51:6f:bd:5f:c1:cd:e1:51:a7:6a:e7:26:24:02:f6:58:71:98:
cd:f3:87:cf:e5:49:d9:60:6c:4d:0d:ab:f7:cb:17:3d:12:7c:
d6:fe:f3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:31 2025 by rpki-client