Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/G5nrBVtNWP0Bxvw9KPs-UvBrr1k.roa
File: G5nrBVtNWP0Bxvw9KPs-UvBrr1k.roa (raw, json)
Hash identifier: NUUR0Dw2B6EtVEC0Uy/aw5XEoH8gJSsbE+iTgYdxDBY=
Subject key identifier: 1B:99:EB:05:5B:4D:58:FD:01:C6:FC:3D:28:FB:3E:52:F0:6B:AF:59
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 016EB683
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/G5nrBVtNWP0Bxvw9KPs-UvBrr1k.roa
Signing time: Mon 10 Jan 2022 07:17:56 +0000
ROA not before: Mon 10 Jan 2022 07:17:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 2a0f:e6c2::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24032899 (0x16eb683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 10 07:17:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b99eb055b4d58fd01c6fc3d28fb3e52f06baf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:00:ac:73:6c:60:2e:13:c5:69:de:2d:3b:
41:27:e8:be:1c:35:40:1b:31:85:30:58:e8:d3:17:
28:5b:23:ab:0f:33:2e:f8:8c:3b:8a:90:7d:73:47:
6d:b3:97:7f:01:af:0d:71:9a:d3:7e:b5:b8:cd:61:
85:e3:b6:d7:6c:96:02:57:04:32:44:e5:98:f4:32:
5b:1f:80:bd:76:49:2b:de:0d:d0:ed:94:b3:75:98:
77:e2:9c:30:88:dc:8c:b5:2f:6e:69:7a:ca:c3:c7:
89:73:a8:7c:78:90:3e:36:7d:73:7c:ac:1f:59:db:
81:2d:e7:fa:97:8d:8d:d6:3c:54:f2:8c:10:f0:6a:
5f:6f:f9:16:86:b7:07:54:e6:68:8c:61:09:c9:26:
c4:78:f4:99:f5:6e:db:95:2c:b4:11:7f:43:33:d3:
d9:b7:7d:a7:06:35:b2:3c:6d:a1:1e:57:0c:61:ee:
e6:09:4d:4c:2a:b2:4d:4e:3c:a8:45:c7:d8:3b:98:
45:15:90:3c:50:b0:b1:25:d4:3e:e4:e1:3f:35:ea:
0d:81:f2:17:2b:32:24:b3:54:7e:7a:9f:84:5a:1b:
f5:08:68:6f:63:0a:ef:28:5d:25:9c:23:66:ba:ea:
78:4e:d5:cd:e4:13:48:75:ff:22:52:91:bb:0d:4f:
61:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:99:EB:05:5B:4D:58:FD:01:C6:FC:3D:28:FB:3E:52:F0:6B:AF:59
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/G5nrBVtNWP0Bxvw9KPs-UvBrr1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e6c2::/32
Signature Algorithm: sha256WithRSAEncryption
05:38:5e:90:97:fd:77:da:da:cb:eb:fe:5c:83:1c:5f:00:cf:
a5:51:b1:ed:50:42:48:a2:af:9e:de:25:89:95:c9:e0:48:4e:
66:8d:a5:94:bd:98:93:c5:95:62:91:c1:3d:5b:05:ca:65:82:
df:dd:bb:1c:e0:21:3d:65:ff:51:0e:e6:57:19:d3:35:00:68:
f8:2d:68:e6:1d:5e:c3:74:bf:91:5a:a0:99:bf:c9:c1:78:02:
1b:7e:eb:96:ce:cf:5b:83:64:49:25:0b:de:e2:e0:25:cd:85:
2c:1d:ea:8a:24:98:33:28:64:7f:96:6d:ed:1a:59:3b:9c:51:
02:7a:2e:b8:9c:9d:40:7b:dd:ff:21:2b:e4:09:b3:d7:e2:f6:
98:a1:82:9a:05:1e:cf:9e:a9:b7:cf:56:80:44:3f:9d:f7:90:
71:7b:a2:08:f4:00:fc:ae:91:5d:58:bc:aa:23:ae:73:eb:f3:
d7:4e:05:f4:42:50:b8:f7:b2:f0:7d:c5:51:8a:dc:79:17:e1:
37:1b:8f:85:ba:95:c7:c3:a2:97:38:0f:61:ea:e2:bf:cc:65:
83:c8:84:41:f2:6c:c7:c2:9f:bc:a1:aa:ae:e1:7e:4c:30:d3:
f4:1a:6c:93:d2:8d:b3:c4:0c:3b:7c:5c:ce:d2:3e:2c:c1:33:
9e:ca:d2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:41:09 2025 by rpki-client