Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HNdzUdoIsPrBjJC1LnbQ1NbUOzg.roa
File: HNdzUdoIsPrBjJC1LnbQ1NbUOzg.roa (raw, json)
Hash identifier: rbZbpupJmuIizL2nV6eGX9msTB/lq8bzgmtjQHVLItE=
Subject key identifier: 1C:D7:73:51:DA:08:B0:FA:C1:8C:90:B5:2E:76:D0:D4:D6:D4:3B:38
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195E8B7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HNdzUdoIsPrBjJC1LnbQ1NbUOzg.roa
Signing time: Mon 24 Jan 2022 07:40:58 +0000
ROA not before: Mon 24 Jan 2022 07:40:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 2a0e:c780::/29 maxlen: 29
2a0f:a01:3::/48 maxlen: 48
2a0f:e840::/32 maxlen: 32
2a0f:a01:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26601655 (0x195e8b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 24 07:40:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cd77351da08b0fac18c90b52e76d0d4d6d43b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:ab:59:51:35:bf:cb:13:46:77:9b:f1:8d:
85:1b:ae:16:ce:b9:40:60:ea:54:6f:9e:38:64:cd:
fd:63:3d:f4:f9:06:02:6e:24:ae:c6:ab:20:9f:2d:
f1:a1:69:36:26:d3:b2:3c:62:db:9d:8a:44:15:9f:
e2:81:4c:8f:e5:2a:60:09:24:44:76:18:4d:3e:86:
7d:f7:49:21:af:3b:10:3a:86:12:fd:40:26:85:58:
13:1b:dd:58:80:aa:c3:1c:83:8e:a5:ef:cb:46:89:
c2:11:9d:17:6d:15:95:b2:25:db:2c:25:35:45:c3:
82:1f:24:43:09:86:a2:b6:56:de:5e:c0:58:32:a6:
9e:a7:48:90:88:91:d1:d1:7c:b4:41:bc:83:7b:f4:
cb:c7:7a:2a:2e:cf:4e:76:b7:35:57:70:74:64:88:
58:21:b1:f5:c0:c2:6d:e8:ad:6e:f1:1a:54:b1:07:
b5:3e:cd:1b:f7:61:9d:d0:e3:5f:21:16:9f:b7:ba:
37:85:68:18:aa:6f:0b:8a:e5:ac:23:70:d2:4e:a5:
b3:19:65:22:25:40:a3:a7:db:2b:e0:07:a1:0e:49:
d2:e3:b0:47:f4:66:59:1f:83:b5:ab:a8:47:62:ea:
a6:4d:11:e6:01:96:a5:1f:e8:55:46:51:76:45:45:
aa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D7:73:51:DA:08:B0:FA:C1:8C:90:B5:2E:76:D0:D4:D6:D4:3B:38
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HNdzUdoIsPrBjJC1LnbQ1NbUOzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:c780::/29
2a0f:a01:3::-2a0f:a01:4:ffff:ffff:ffff:ffff:ffff
2a0f:e840::/32
Signature Algorithm: sha256WithRSAEncryption
51:51:8e:5c:bd:f3:ec:aa:c3:ff:fa:65:2e:be:b9:75:e6:ab:
75:89:ba:50:da:ed:cb:3a:45:74:dc:b8:39:42:17:07:95:34:
01:29:93:d5:3e:9c:68:b5:e8:98:98:54:79:58:f0:5e:79:16:
ef:3b:07:50:de:a6:db:c6:7a:ca:ac:9d:1f:15:2c:e4:0d:29:
d2:a3:0c:ab:3a:d9:fc:78:ab:f1:c1:8c:40:e9:00:9e:bb:c5:
0a:94:3f:d2:23:79:ab:87:05:99:15:d2:df:39:02:b3:fc:e3:
16:33:61:de:81:d7:f9:fd:7f:44:6d:2d:a8:b2:2e:a4:c5:ac:
d8:51:17:4b:4b:85:34:57:e2:2f:26:90:85:f9:1c:bd:38:06:
00:00:ba:07:e3:d6:b0:84:e7:79:0b:4f:8e:ae:33:b8:d6:4f:
47:5b:f1:de:48:8b:2d:21:0f:95:83:71:f7:b4:19:d7:8a:47:
ed:2e:c1:93:5f:fd:f5:26:4f:ba:f0:27:91:32:52:f9:cd:f2:
6e:2e:52:43:5e:d3:3f:ad:f7:e5:44:21:ee:79:f8:28:21:e4:
90:74:96:57:47:2b:8e:33:71:aa:f8:0f:47:76:85:f3:a2:8b:
1e:84:41:14:53:ce:e5:18:36:04:93:8a:7f:37:11:36:cf:fa:
96:0f:05:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:30 2025 by rpki-client