Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/J0lqErbet5hEizfRSksztTw9JnY.roa
File: J0lqErbet5hEizfRSksztTw9JnY.roa (raw, json)
Hash identifier: VZ07JzelDrsk99whvavYh5d1K04zPPVPUXMwV/Vr3P0=
Subject key identifier: 27:49:6A:12:B6:DE:B7:98:44:8B:37:D1:4A:4B:33:B5:3C:3D:26:76
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01889FE56A1824C8F57CA18C55B1624B7C22
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/J0lqErbet5hEizfRSksztTw9JnY.roa
Signing time: Fri 09 Jun 2023 11:23:12 +0000
ROA not before: Fri 09 Jun 2023 11:23:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 2a13:2d40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:e5:6a:18:24:c8:f5:7c:a1:8c:55:b1:62:4b:7c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 9 11:23:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27496a12b6deb798448b37d14a4b33b53c3d2676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:03:26:3a:42:92:aa:a1:af:0a:57:fd:bb:e3:
e4:ef:ba:e3:f3:06:41:88:1e:4e:b9:1b:3c:48:41:
42:07:14:b2:5f:32:b5:cc:88:74:2f:e7:03:ca:8c:
16:c3:1d:7f:66:f8:6b:9c:40:74:b3:12:ab:29:c1:
87:48:ba:e0:2a:48:bc:b5:49:46:7f:e3:4e:50:6a:
35:e8:a6:77:05:20:a9:b8:5a:4e:60:8b:84:bd:f3:
bf:97:48:fa:1a:80:4f:fe:2c:ec:1c:1d:45:9f:c9:
d3:1d:00:3c:3b:c0:25:bb:32:21:cf:e4:00:cb:da:
19:4f:0d:66:f2:6e:31:e9:08:6d:81:ee:b4:fa:7f:
5e:d6:2d:93:d3:c9:de:09:d3:d4:f0:0a:8f:3b:af:
cb:48:33:1d:e2:f6:ae:53:c8:34:88:e3:6c:dc:9d:
6b:25:37:bd:44:3f:10:c2:5e:26:ce:fe:50:04:ff:
51:14:05:3b:22:c9:c4:bf:00:99:bf:96:15:b3:e9:
b8:0a:77:59:b2:9a:3b:96:f9:1c:0c:ac:16:d7:e7:
2a:60:de:86:76:bb:db:1c:85:a0:35:a7:f7:64:70:
6c:23:28:3f:55:83:eb:bd:5b:fe:0b:a1:0d:d2:d6:
cd:e6:40:d8:e3:0c:4c:47:3e:f3:7e:60:96:f7:21:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:49:6A:12:B6:DE:B7:98:44:8B:37:D1:4A:4B:33:B5:3C:3D:26:76
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/J0lqErbet5hEizfRSksztTw9JnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2d40::/29
Signature Algorithm: sha256WithRSAEncryption
18:07:30:14:5d:bd:24:df:29:83:d4:e5:07:09:3a:f9:3c:0d:
0d:0a:41:91:ee:5e:15:d6:aa:61:e4:fb:61:1b:99:a6:72:5e:
88:fa:81:8f:07:18:ca:71:3c:5c:17:4b:f3:a2:29:7a:27:03:
99:2f:1f:53:ed:94:aa:47:e5:6b:cb:b5:5d:b3:a9:e7:88:9e:
e4:67:18:7e:e9:02:b0:84:ca:54:6b:b1:5c:a3:86:06:e8:07:
9b:90:5a:7d:d6:27:8f:a6:1e:e4:60:76:98:59:5f:af:28:e6:
80:5a:3c:b8:f1:d4:58:7b:2b:0d:12:f9:3e:ef:2f:6d:5f:9d:
aa:76:e2:9b:55:86:89:d9:2a:1f:5f:c9:63:9e:16:53:1e:a5:
ce:ed:8f:3b:a2:5d:65:3f:36:58:df:1f:ca:1a:be:5f:96:48:
c2:bc:cc:4e:e1:7c:22:5e:50:a4:f2:9a:e2:09:b8:bc:5d:62:
05:2b:0f:5e:42:62:40:9c:0a:49:e0:e3:08:74:d9:43:ed:a6:
72:3f:23:04:2d:61:fe:85:79:e5:f0:11:86:c0:a2:1f:89:a3:
0d:c2:b1:63:cd:08:f8:f4:b9:6a:c8:d2:03:67:4d:26:b0:51:
a9:44:5a:1d:98:7e:52:30:1e:89:f8:21:24:43:d3:74:57:be:
87:6e:1b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:28:56 2025 by rpki-client