Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EgKCdAEzZp_F6smOus_DaPOaivk.roa
File: EgKCdAEzZp_F6smOus_DaPOaivk.roa (raw, json)
Hash identifier: 1PI0rras04c1tSUhwch+GCpEms7bTCuYzJGJ60ZKB7c=
Subject key identifier: 12:02:82:74:01:33:66:9F:C5:EA:C9:8E:BA:CF:C3:68:F3:9A:8A:F9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 031BF98D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EgKCdAEzZp_F6smOus_DaPOaivk.roa
Signing time: Tue 10 May 2022 19:44:01 +0000
ROA not before: Tue 10 May 2022 19:44:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 2a0e:c780::/29 maxlen: 29
2a0f:39c7::/32 maxlen: 32
2a12:d6c0::/29 maxlen: 29
2a0f:39c1::/32 maxlen: 32
2a0f:39c2::/32 maxlen: 32
2a0f:39c5::/32 maxlen: 32
2a0f:e840::/32 maxlen: 32
2a0f:39c6::/32 maxlen: 32
2a0f:39c4::/32 maxlen: 32
2a0f:39c3::/32 maxlen: 32
2a0f:39c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52165005 (0x31bf98d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 10 19:44:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=120282740133669fc5eac98ebacfc368f39a8af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:1e:7d:71:cc:46:f4:24:49:85:03:24:29:
b6:af:b1:4f:e4:1d:34:b3:00:58:fe:41:31:0d:7f:
e6:e2:3d:86:06:18:ff:0f:1f:fa:d7:3d:fc:8a:b7:
24:41:23:7e:36:97:0a:b4:9b:3a:70:f5:b5:d9:dc:
4d:71:77:06:e8:70:35:2b:19:31:05:44:85:a0:81:
89:c8:3d:bd:14:56:d0:b8:9a:2d:ae:88:60:46:c7:
a4:98:71:21:89:06:8e:62:a6:e7:49:7b:a2:ca:ac:
63:55:d3:56:d2:1a:85:35:31:aa:15:3d:f8:a0:70:
9b:67:51:d4:51:e1:2f:4b:83:a9:2d:9b:b3:b4:21:
37:64:08:f7:3e:3b:ee:b6:17:f8:0d:dd:cc:72:2b:
f2:30:62:7f:b5:98:43:29:1f:24:23:8b:bb:1f:ee:
88:23:25:7b:94:91:8b:5a:8d:a8:83:45:9e:08:f1:
07:38:ef:9b:65:33:c1:37:a7:6e:d2:28:56:f2:45:
23:3b:fe:8e:d7:46:df:af:e9:ee:60:54:8e:09:79:
06:18:d3:e9:3d:a8:58:53:50:51:7a:d5:6a:22:8d:
48:fd:2c:53:8f:f6:5a:01:6b:6e:f5:b0:46:81:3b:
df:d7:48:24:35:45:07:1f:61:84:ea:63:93:95:ee:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:02:82:74:01:33:66:9F:C5:EA:C9:8E:BA:CF:C3:68:F3:9A:8A:F9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EgKCdAEzZp_F6smOus_DaPOaivk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:c780::/29
2a0f:39c0::/29
2a0f:e840::/32
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
ca:13:62:e8:c4:31:d0:b3:80:8f:30:03:66:ff:61:17:ea:77:
4d:a5:09:49:39:e3:4a:e7:c3:4d:c6:b2:32:57:35:cf:d0:4b:
04:a6:99:6d:eb:24:f5:51:cf:a1:07:37:eb:45:4d:92:de:25:
e2:db:9e:dc:32:e2:9e:3b:45:d4:5c:eb:6d:ab:b7:54:6a:a8:
3c:c8:b1:b0:d7:74:ad:43:9a:68:0d:61:50:a8:23:88:cb:b5:
0f:13:d5:23:2c:f7:38:ac:1e:75:6f:2a:28:26:13:5c:82:58:
6a:60:18:cb:16:19:6e:ed:5a:f1:49:4d:8b:ab:88:12:6b:7c:
47:85:08:75:5a:3a:2a:5c:4b:67:5c:c0:60:f3:93:92:7b:9a:
b4:be:28:dd:06:d9:2f:42:db:09:94:11:c4:e1:da:0f:e3:89:
87:fb:16:dd:be:09:04:c7:72:35:42:69:c3:20:4f:61:a9:d2:
e3:44:cf:fd:8e:9b:be:8f:77:81:66:96:ab:63:18:53:cc:90:
7c:5d:e5:c8:de:43:af:f8:6a:76:9a:5b:9e:9d:24:0e:31:ab:
90:6b:13:a0:79:ea:38:b6:f1:54:13:7d:56:f5:58:2b:fc:aa:
59:82:88:ca:44:02:06:2f:58:4e:00:19:7e:fc:0c:47:8b:42:
4a:71:ef:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:50 2025 by rpki-client