Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FAsU9MX6NwvC7K1RK50y1jB30bU.roa
File: FAsU9MX6NwvC7K1RK50y1jB30bU.roa (raw, json)
Hash identifier: rSLyMpwkNogCFJflWU+PQilIieaqHxvZCaeVu7ycFFk=
Subject key identifier: 14:0B:14:F4:C5:FA:37:0B:C2:EC:AD:51:2B:9D:32:D6:30:77:D1:B5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018C9C0F9ED83CFBA6D5E96C3B8E4ED3E841
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FAsU9MX6NwvC7K1RK50y1jB30bU.roa
Signing time: Sun 24 Dec 2023 13:41:58 +0000
ROA not before: Sun 24 Dec 2023 13:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216157
IP address blocks: 2a07:a300::/32 maxlen: 32
2a0c:d384::/30 maxlen: 30
2a07:a306::/32 maxlen: 32
2a07:a305::/32 maxlen: 32
2a07:a302::/32 maxlen: 32
2a07:a301::/32 maxlen: 32
2a07:a303::/32 maxlen: 32
2a07:a304::/32 maxlen: 32
2a07:a307::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9c:0f:9e:d8:3c:fb:a6:d5:e9:6c:3b:8e:4e:d3:e8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 24 13:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=140b14f4c5fa370bc2ecad512b9d32d63077d1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:99:06:f9:54:0a:22:33:bb:cb:0d:29:56:
25:23:48:12:b4:ed:09:f4:88:49:53:2a:7c:93:63:
94:1e:bd:7d:a4:43:0d:04:5f:fd:26:e1:f2:39:9b:
66:77:2b:a5:08:af:c9:4a:66:a4:96:49:59:67:46:
0b:d2:13:d9:c0:be:5b:ea:75:5e:37:55:e8:9e:4d:
6c:93:00:6c:80:ba:f8:71:1f:2e:8e:de:df:4f:94:
33:37:e8:09:f2:c3:11:23:8e:8d:b3:65:a9:04:cc:
1f:3e:5f:85:d6:1f:42:4a:4e:20:df:1c:42:11:a9:
de:4f:b2:6d:1a:26:8c:72:6f:42:e9:ba:f1:3d:b8:
53:9f:4d:61:1a:ea:be:86:cb:f3:7b:4b:4e:29:85:
5b:8a:9d:35:f9:d5:ce:09:d6:d4:fa:30:f1:b9:cf:
b2:88:5e:06:e6:bd:a1:3d:b7:90:e1:94:7c:73:de:
0c:34:06:f7:81:49:18:53:4c:6c:e6:23:c8:35:db:
7b:39:07:97:4e:42:c6:6b:45:ed:d0:56:da:71:03:
1a:1b:50:08:b6:3a:d1:fc:c9:32:42:a7:93:b3:78:
48:3a:e6:6f:9d:d2:ca:d4:ed:52:8c:b2:b2:e2:3c:
fc:ef:dc:56:c4:d7:d1:2c:7d:0a:42:89:b5:9e:03:
a9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0B:14:F4:C5:FA:37:0B:C2:EC:AD:51:2B:9D:32:D6:30:77:D1:B5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FAsU9MX6NwvC7K1RK50y1jB30bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:a300::/29
2a0c:d384::/30
Signature Algorithm: sha256WithRSAEncryption
3e:64:91:d8:7b:4b:7c:21:57:96:84:f8:95:d7:fb:12:fd:22:
50:5d:bd:36:34:88:82:98:7f:09:e1:4b:4c:a9:c2:a9:1e:0d:
d5:a6:bf:c0:4c:a8:b8:f6:8d:ad:79:2a:ef:6c:af:f8:2e:12:
2c:fd:68:d6:13:61:fb:75:15:f0:16:27:93:46:98:4f:cb:16:
ce:ef:50:5a:2f:e7:d8:a6:fa:43:42:8e:a8:e3:58:be:97:37:
76:a3:e3:e0:8c:2f:75:18:da:f0:35:47:1b:0d:16:c1:44:90:
c8:77:df:48:73:aa:5d:63:90:c6:63:ca:ef:b0:c7:90:d5:d0:
ee:b8:8e:55:93:25:ed:7e:96:a1:c1:60:e8:45:2c:4d:5b:ac:
41:33:c3:fd:8e:43:bc:26:9e:24:07:63:a7:84:32:fc:d8:51:
8b:8b:de:b8:99:8d:12:9c:5e:6b:ff:e1:76:a9:da:e5:ef:45:
c4:02:10:6e:cb:fa:0d:38:c6:62:6e:43:a1:d0:f6:96:04:12:
1e:6f:a4:af:da:4a:d0:e9:3d:95:6f:e6:29:e9:16:d3:1c:19:
96:e9:12:de:97:a6:bf:6d:05:50:f6:b7:f1:9d:fa:10:b5:cb:
3e:a6:1f:92:26:cc:0e:c6:2a:c8:95:29:d4:c1:83:5a:0a:f2:
7f:2e:ff:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:34 2025 by rpki-client