Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KtPyhd2mauvK64geqdGauNc_vew.roa
File: KtPyhd2mauvK64geqdGauNc_vew.roa (raw, json)
Hash identifier: cmRbygvFBdt2D9rODobysedt1u9OicXUg1HAsOfR/Fk=
Subject key identifier: 2A:D3:F2:85:DD:A6:6A:EB:CA:EB:88:1E:A9:D1:9A:B8:D7:3F:BD:EC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 03142221
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KtPyhd2mauvK64geqdGauNc_vew.roa
Signing time: Mon 09 May 2022 11:02:23 +0000
ROA not before: Mon 09 May 2022 11:02:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 2a0f:bc01::/32 maxlen: 32
2a0f:bc03::/32 maxlen: 32
2a0f:bc07::/32 maxlen: 32
2a0f:bc04::/32 maxlen: 32
2a0f:bc00::/32 maxlen: 32
2a0f:bc05::/32 maxlen: 32
2a0f:bc06::/32 maxlen: 32
2a0f:bc02::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51651105 (0x3142221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 9 11:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ad3f285dda66aebcaeb881ea9d19ab8d73fbdec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:d0:15:1b:89:1e:09:f2:48:20:5a:d1:e4:
90:70:f9:d4:65:21:d7:b0:06:fd:b6:2c:d7:4b:b5:
6e:bf:24:75:91:08:0d:78:69:cd:9c:2c:79:61:63:
a4:33:a3:03:27:2d:8b:a6:11:b0:50:85:e8:3d:5c:
75:26:ba:9c:f4:76:20:14:f0:25:27:03:82:91:2f:
ae:c4:92:ef:5f:c0:43:4c:aa:39:6f:1b:3a:ef:cf:
d3:60:52:f5:ab:d8:f2:30:2e:10:d7:bd:88:de:d1:
1e:64:8d:0a:7a:22:60:b9:3a:3f:93:c9:a0:e3:70:
ae:70:77:6b:d7:2c:6c:6d:d4:93:12:15:99:88:ca:
8b:d5:ba:f2:26:c4:4f:ec:cc:53:9f:0e:d4:55:51:
df:02:4d:14:4d:83:9d:e8:e7:6c:86:04:16:58:0b:
5b:89:18:67:48:fc:28:82:52:2a:b9:d3:e3:f6:85:
f9:4a:5d:e7:80:ff:c9:99:40:57:2d:75:2a:db:a7:
ff:e8:9d:17:eb:b3:e2:22:e1:38:85:86:fd:2b:27:
3c:2c:aa:51:ff:6b:51:ba:92:5c:86:57:72:47:65:
21:36:df:f3:bd:2f:a6:f9:49:74:5b:44:ea:4d:70:
93:95:07:df:af:20:ef:7f:b1:dc:db:5a:62:f9:7a:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D3:F2:85:DD:A6:6A:EB:CA:EB:88:1E:A9:D1:9A:B8:D7:3F:BD:EC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KtPyhd2mauvK64geqdGauNc_vew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:bc00::/29
Signature Algorithm: sha256WithRSAEncryption
62:2a:91:ea:93:71:17:74:20:be:b7:27:4b:00:73:a4:fc:df:
af:8e:bd:d6:e0:01:e7:bc:f7:22:e8:64:35:b0:5f:23:26:ff:
59:97:6b:56:30:6a:bc:af:6e:d8:f2:03:66:73:50:69:1c:dd:
91:e3:c6:a2:10:88:35:2f:58:3f:14:28:25:d4:b9:b3:d6:d3:
b2:6d:05:d4:76:d8:b4:0d:9a:af:06:84:30:8a:56:25:6d:bc:
d1:ff:56:d3:77:38:02:56:ea:75:b9:c9:ec:08:05:3c:d7:8f:
1b:60:d0:f3:26:24:bd:86:ed:cc:83:77:58:79:35:bf:ce:d8:
f8:9a:67:85:62:2f:1c:4d:02:f4:06:53:9e:7a:c0:9c:fa:47:
f4:a8:2d:61:33:a2:50:bb:38:18:34:b5:3e:b5:07:b3:68:c2:
ea:d4:64:71:bd:1a:47:3d:90:27:f1:ef:d6:8e:5e:93:f3:2e:
d2:ef:86:1b:d5:c0:7d:69:69:9d:e9:6e:99:b1:85:5c:51:1e:
b6:12:e1:b2:d8:22:a9:ca:b4:77:f7:10:b2:13:83:76:60:66:
20:29:6b:e2:c2:04:e5:60:3b:5f:fc:b3:f0:cc:49:4e:6a:af:
f3:a7:f0:2c:29:5d:5b:fc:96:e5:da:6c:ba:5e:31:55:01:ef:
ae:68:8d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:14:14 2025 by rpki-client