Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KJjKGQkCo76FZFCfsHMSLuGAkXE.roa
File: KJjKGQkCo76FZFCfsHMSLuGAkXE.roa (raw, json)
Hash identifier: iYT38/n1eg9y97Rmb22yNVo7llcKguKxzKaBbceH6hI=
Subject key identifier: 28:98:CA:19:09:02:A3:BE:85:64:50:9F:B0:73:12:2E:E1:80:91:71
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018A97DD30E2DBFDD0BD7E89E707BFE90F97
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KJjKGQkCo76FZFCfsHMSLuGAkXE.roa
Signing time: Fri 15 Sep 2023 08:02:50 +0000
ROA not before: Fri 15 Sep 2023 08:02:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198231
IP address blocks: 2a13:d902::/32 maxlen: 32
2a13:2dc5::/32 maxlen: 32
2a13:2d41::/32 maxlen: 32
2a13:2d42::/32 maxlen: 32
2a13:d901::/32 maxlen: 32
2a13:2dc4::/32 maxlen: 32
2a13:2d43::/32 maxlen: 32
2a13:2dc7::/32 maxlen: 32
2a13:d900::/32 maxlen: 32
2a13:d903::/32 maxlen: 32
2a13:2d40::/32 maxlen: 32
2a13:2d46::/32 maxlen: 32
2a13:2d45::/32 maxlen: 32
2a13:2dc1::/32 maxlen: 32
2a13:2dc2::/32 maxlen: 32
2a13:d906::/32 maxlen: 32
2a13:2d44::/32 maxlen: 32
2a13:d907::/32 maxlen: 32
2a13:d904::/32 maxlen: 32
2a13:d700::/29 maxlen: 29
2a13:2d47::/32 maxlen: 32
2a13:2dc6::/32 maxlen: 32
2a13:d905::/32 maxlen: 32
2a13:2dc0::/32 maxlen: 32
2a13:2dc3::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:97:dd:30:e2:db:fd:d0:bd:7e:89:e7:07:bf:e9:0f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 15 08:02:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2898ca190902a3be8564509fb073122ee1809171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:57:a2:73:87:e5:75:ed:4f:a3:03:80:6a:
58:69:9d:6e:10:bf:5b:ce:fc:ef:62:d7:9f:46:70:
0f:0c:96:55:9a:83:72:76:5c:67:d6:7a:5b:18:f4:
43:09:49:1c:cc:a4:3e:3f:41:d4:9e:55:e6:9e:3d:
e5:2c:89:68:f5:6d:d2:d0:72:5c:51:fd:ca:58:f5:
7d:bd:7f:ed:d1:cb:c5:02:d1:65:ea:7f:e5:63:40:
b5:e1:e2:89:1a:0a:8c:2c:90:4d:b1:23:eb:45:57:
da:0c:94:be:e3:7f:66:f5:a5:59:6b:5d:1c:0b:95:
2c:5f:bf:7e:eb:04:93:a9:da:d1:0f:b5:d1:9a:68:
85:94:e4:3e:27:01:8a:45:3d:d3:23:66:a1:fb:f2:
fe:b7:be:a1:bf:d9:ab:a0:ae:de:fe:0c:0c:ed:b1:
46:e1:bc:e5:7c:43:88:4c:28:cd:a7:de:6e:f9:9b:
09:ce:97:44:21:a9:12:8c:c9:45:43:a3:41:9a:65:
98:79:c0:99:d2:7a:10:9a:89:22:f2:be:ac:9f:bd:
e0:11:78:0d:dd:93:05:d5:d8:f3:e8:be:76:e5:3f:
c1:61:f1:c6:16:5b:ac:03:88:d9:37:97:8e:4c:f3:
be:cb:66:59:bc:b7:fa:82:15:8a:d7:64:d5:a3:5b:
a7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:98:CA:19:09:02:A3:BE:85:64:50:9F:B0:73:12:2E:E1:80:91:71
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KJjKGQkCo76FZFCfsHMSLuGAkXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2d40::/29
2a13:2dc0::/29
2a13:d700::/29
2a13:d900::/29
Signature Algorithm: sha256WithRSAEncryption
62:1e:a9:5e:c5:51:25:de:ce:73:07:ec:00:79:9c:1d:a7:98:
73:19:9c:30:7e:d0:58:ab:21:3f:42:e4:81:87:e8:99:9d:0c:
f7:84:98:ba:86:1d:47:e7:92:9a:06:98:07:be:7c:a9:0d:18:
e0:6c:bd:56:17:1f:c4:fa:8b:73:37:2a:dd:3f:01:cf:4b:20:
b4:61:88:cf:04:bd:e6:81:c1:1d:b8:cb:ce:02:b9:e4:85:4d:
b8:b0:47:ba:8b:65:4e:6a:22:e8:74:05:0a:e5:37:65:f7:25:
e1:26:eb:a5:08:a7:dd:33:fc:15:97:10:f8:3d:82:8f:ea:03:
e8:99:ba:53:12:19:bf:81:a8:29:c7:e2:d2:b4:61:7f:8c:59:
ce:f2:ee:c3:39:d8:0f:9a:2f:6f:a3:16:51:c2:dd:2f:fa:57:
ed:bb:af:39:a6:ff:9c:3a:af:bd:70:87:1f:d5:55:8a:e7:f4:
f2:9a:df:93:f1:2d:81:3f:04:7b:b5:5d:9c:03:ec:7a:76:d7:
72:cb:95:b5:40:86:b3:22:02:bd:9a:db:6c:01:62:6e:08:34:
6e:4f:b6:9d:34:c0:2b:a8:49:6c:2d:e9:9a:e6:c4:9f:0e:23:
5d:66:8a:10:94:a5:92:36:53:15:1b:b4:23:3e:c7:48:9c:dd:
90:b8:20:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:55:52 2025 by rpki-client