Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H81JiEkv7nBxRJjPTm8RG1q0x-w.roa
File: H81JiEkv7nBxRJjPTm8RG1q0x-w.roa (raw, json)
Hash identifier: BAXbHmVbh2pc1eZeT4Sm66vy/SO0OksAbl5ya5fp1Ec=
Subject key identifier: 1F:CD:49:88:49:2F:EE:70:71:44:98:CF:4E:6F:11:1B:5A:B4:C7:EC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0183B13D6391B10D503C21E38647996BFD65
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H81JiEkv7nBxRJjPTm8RG1q0x-w.roa
Signing time: Fri 07 Oct 2022 06:58:53 +0000
ROA not before: Fri 07 Oct 2022 06:58:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 2a0f:a203::/32 maxlen: 32
2a0f:3d86::/32 maxlen: 32
2a0e:2240:5::/48 maxlen: 48
2a0f:a207::/32 maxlen: 32
2a0e:2240:3::/48 maxlen: 48
2a0f:a200::/32 maxlen: 32
2a0f:3d81::/32 maxlen: 32
2a0e:2240:4::/48 maxlen: 48
2a0f:a206::/32 maxlen: 32
2a0f:a205::/32 maxlen: 32
2a0f:a201::/32 maxlen: 32
2a0f:a204::/32 maxlen: 32
2a0f:3d85::/32 maxlen: 32
2a0f:a202::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:3d:63:91:b1:0d:50:3c:21:e3:86:47:99:6b:fd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 7 06:58:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fcd4988492fee70714498cf4e6f111b5ab4c7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:18:10:b4:9b:c6:0b:82:ef:53:9d:98:98:
56:80:6d:de:d9:f0:55:ea:5a:1a:ea:bc:66:8f:e0:
5f:e3:a5:ce:e0:d2:d9:be:b6:8a:d2:81:66:16:cb:
c8:fd:b9:60:96:ba:08:33:25:7b:76:22:9a:e3:06:
0a:a4:c1:49:8d:56:8d:c8:19:6b:03:b8:77:4f:48:
85:ae:a5:24:44:69:b2:e6:86:85:a5:b5:7b:df:88:
87:26:f7:14:9f:ad:cf:57:c6:f2:2b:bd:1d:de:3d:
4c:fd:46:8b:5d:4b:63:91:74:2b:46:dc:30:21:80:
4e:58:d7:37:7a:e7:7e:c2:54:73:76:cd:d2:da:af:
48:cc:71:aa:b2:e9:9a:26:7f:64:d4:d2:07:4c:7f:
05:7b:64:70:98:03:c9:f8:28:9e:93:92:a0:e0:aa:
76:6c:0a:28:6b:ce:ff:8f:45:95:77:f6:f0:dc:52:
37:97:b4:b8:87:35:bb:be:7f:98:47:05:dd:bd:f3:
6d:fc:2d:23:58:18:5d:b6:28:e8:ec:99:8a:3f:23:
65:c6:78:a2:c5:57:9b:1b:19:93:8f:4c:db:9d:13:
9e:7a:0b:cf:5f:cd:5b:96:46:9c:a3:ae:d5:af:51:
4d:3c:95:41:6c:0f:39:db:6a:bd:0c:ff:6e:d5:33:
3f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CD:49:88:49:2F:EE:70:71:44:98:CF:4E:6F:11:1B:5A:B4:C7:EC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H81JiEkv7nBxRJjPTm8RG1q0x-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:2240:3::-2a0e:2240:5:ffff:ffff:ffff:ffff:ffff
2a0f:3d81::/32
2a0f:3d85::-2a0f:3d86:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:a200::/29
Signature Algorithm: sha256WithRSAEncryption
5c:94:af:87:6e:ae:a7:05:7c:bc:93:3e:90:71:8d:51:4b:a3:
f2:55:34:1f:cc:3e:30:9c:5c:14:a2:01:a6:43:37:0c:11:ed:
1f:77:b0:ec:f8:7f:ea:84:32:13:d5:9f:d4:2c:ea:ca:99:6f:
ff:d4:e7:81:0b:9a:da:c1:92:b0:11:cc:00:69:c4:53:29:47:
54:52:13:7c:6b:41:94:0b:ca:61:8d:9b:85:f9:0e:6c:bd:22:
e1:30:37:6c:bd:03:9d:71:0d:6a:2b:d5:3d:9b:a3:b2:62:83:
48:bd:8b:51:25:05:3c:c4:97:0d:c9:7a:c6:ba:62:52:18:1f:
0c:80:0e:2c:ab:3d:d1:0e:8a:e2:c5:a9:19:cb:f5:34:eb:06:
f0:4c:13:c6:5a:11:36:80:d0:ba:98:1f:59:aa:de:a3:16:0e:
84:e7:39:0a:5f:d5:6e:48:e3:20:44:3f:47:47:9f:2a:47:09:
c7:bd:08:bf:05:2e:5e:cb:79:d4:e4:49:e2:89:15:78:38:ef:
67:98:64:1c:7c:8b:1b:d9:80:86:3d:d3:36:8d:e9:9e:ac:91:
7d:cb:ae:ee:37:88:84:73:f9:92:bd:d5:3a:e9:78:ce:61:5f:
97:a0:ee:79:32:1a:a1:b9:e4:74:14:55:e3:f4:e0:44:1b:b9:
7c:1b:63:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:56:34 2025 by rpki-client