Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ioy6IMvqKwZYUnCKiwygwarOLwE.roa
File: Ioy6IMvqKwZYUnCKiwygwarOLwE.roa (raw, json)
Hash identifier: /t+lMgYvTE3nny8q5kIBP84jq303mwnBmXWihDlaPV0=
Subject key identifier: 22:8C:BA:20:CB:EA:2B:06:58:52:70:8A:8B:0C:A0:C1:AA:CE:2F:01
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018726EECD0C20D3FA2E4877620266D251FD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ioy6IMvqKwZYUnCKiwygwarOLwE.roa
Signing time: Tue 28 Mar 2023 06:36:36 +0000
ROA not before: Tue 28 Mar 2023 06:36:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 2a13:2b40::/29 maxlen: 29
2a0d:1140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:26:ee:cd:0c:20:d3:fa:2e:48:77:62:02:66:d2:51:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 28 06:36:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=228cba20cbea2b065852708a8b0ca0c1aace2f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:65:9b:fd:69:2b:f7:92:a8:74:01:2a:b9:
b0:d4:40:1b:fe:d3:be:5a:7a:4f:1b:0f:48:23:c8:
2e:f5:c0:6d:39:0c:eb:9e:de:2c:b3:98:2f:4e:23:
7a:7b:e2:4f:08:19:5a:da:23:23:da:c8:c0:cd:10:
15:c0:ef:77:22:4e:af:99:d5:25:ff:6e:37:bd:00:
f1:6e:8e:3d:91:c0:a8:16:9b:6b:97:b7:f3:28:15:
1e:df:1f:b9:cf:a5:8b:9a:5a:e3:70:66:16:b8:46:
28:f3:3c:da:00:42:d0:40:1d:a4:39:09:f2:ce:14:
14:a6:31:d8:c1:e4:f3:c5:08:a0:82:81:70:9c:15:
0b:5e:44:0b:50:68:08:84:76:2b:25:be:95:de:bc:
5e:95:ff:d2:be:99:2f:ab:6b:c5:f0:c4:91:f9:66:
6b:ab:df:fe:8f:70:21:78:4b:d1:2a:9d:78:42:c7:
c8:62:45:cb:7b:c0:a4:1a:5f:b2:3c:2f:85:2b:ed:
cf:f9:91:82:88:b7:85:d5:ee:ed:b5:28:df:06:14:
22:17:5e:54:8e:c6:5f:0a:08:24:9c:e3:7a:46:97:
01:21:5c:d5:22:29:da:44:52:2d:ac:54:12:6b:ab:
0f:ff:ca:1e:86:6f:f7:a4:e5:10:c2:5a:f9:aa:dc:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8C:BA:20:CB:EA:2B:06:58:52:70:8A:8B:0C:A0:C1:AA:CE:2F:01
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ioy6IMvqKwZYUnCKiwygwarOLwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1140::/29
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
03:f9:37:2f:c1:48:e8:e3:a7:a9:66:08:39:16:07:24:ed:a9:
74:31:ea:36:ad:2f:2d:c6:bd:1d:fa:ed:2b:7c:98:34:04:b7:
59:a8:a9:d7:48:37:32:64:06:3c:ac:64:3e:93:b3:cf:a4:c9:
bf:3e:50:47:a9:9a:34:b4:99:57:ce:28:98:89:03:13:4a:e1:
3f:c5:a0:84:45:99:7f:fc:b6:cc:62:66:6c:61:9d:b3:68:8e:
2a:6c:88:59:bb:31:7e:ce:17:66:86:d1:75:7f:77:98:36:3b:
54:dd:84:59:69:b8:f1:b9:84:42:d7:45:ea:9b:8a:00:e3:c4:
99:3d:13:64:3b:ee:3c:dd:d0:72:56:65:8b:ae:05:52:ae:b1:
95:01:9a:dc:6c:40:af:3d:f5:8e:69:fe:62:35:42:10:42:12:
c3:09:7f:0c:f4:67:34:c4:e7:b4:95:70:a5:f4:5e:71:49:49:
bd:78:35:ab:97:24:db:9d:96:e8:a0:40:68:2a:11:e5:ed:f8:
49:f1:68:63:c6:42:02:da:ed:ea:9b:30:83:29:a4:a2:d8:9e:
fb:29:b8:e2:06:36:1e:77:e3:fe:66:40:b0:7d:39:74:db:cc:
44:e8:c5:38:bc:9a:c9:72:ef:a0:0b:c2:bf:4b:4e:ca:44:2f:
51:5b:35:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:21 2025 by rpki-client