Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/L-dcHajKcfn0KAQnPDuE92ueNRY.roa
File: L-dcHajKcfn0KAQnPDuE92ueNRY.roa (raw, json)
Hash identifier: s0AUS3SwBoIP9rvxyjyHwRitXtz83qLS6KJvwj4NAEU=
Subject key identifier: 2F:E7:5C:1D:A8:CA:71:F9:F4:28:04:27:3C:3B:84:F7:6B:9E:35:16
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01856DCAE7555888F8CBB57C35F145C51708
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/L-dcHajKcfn0KAQnPDuE92ueNRY.roa
Signing time: Sun 01 Jan 2023 14:44:52 +0000
ROA not before: Sun 01 Jan 2023 14:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7203
IP address blocks: 2a0f:1e84::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:e7:55:58:88:f8:cb:b5:7c:35:f1:45:c5:17:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 14:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fe75c1da8ca71f9f42804273c3b84f76b9e3516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ee:90:68:52:6d:12:2d:83:9a:ac:ac:b8:87:
47:f1:f7:93:bf:62:87:64:1a:1b:b2:74:f1:5f:7e:
e4:e5:9d:fc:38:8a:3d:d7:d8:ed:a6:e8:52:6c:07:
84:d0:a8:c7:71:be:02:26:b1:d1:43:a8:51:ab:87:
62:a7:42:dc:84:35:e3:f9:f2:79:d1:af:29:ec:a5:
1b:16:d8:b0:b6:c1:aa:5b:b2:d8:dd:33:ff:18:9c:
cc:79:df:9e:ad:e8:72:db:fd:c7:c3:2a:48:09:3a:
9d:77:ec:ef:4e:37:c6:b1:96:08:3d:f6:7b:1b:c6:
01:13:a3:00:b5:76:61:2f:85:3b:ac:5a:5d:de:80:
3f:f4:cf:f3:1d:bd:4f:61:ad:56:ca:20:b7:7e:d6:
c7:c5:e6:98:f4:65:1e:5f:34:21:02:0a:34:1a:a2:
57:61:44:6a:34:25:ef:61:91:94:19:2e:19:74:4d:
08:d5:87:2f:6f:40:3f:3b:f2:53:7d:ed:10:b6:4b:
44:7f:d5:36:95:b3:5b:1b:2a:7d:5d:c0:1b:62:d5:
e9:1c:3c:08:a4:c5:5e:2a:8e:3f:23:bf:cc:f5:a2:
02:3a:c3:1f:07:6b:e9:5b:3d:99:14:b6:50:3b:33:
f3:31:39:59:23:3d:29:6f:d7:46:a3:1e:88:39:62:
a1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E7:5C:1D:A8:CA:71:F9:F4:28:04:27:3C:3B:84:F7:6B:9E:35:16
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/L-dcHajKcfn0KAQnPDuE92ueNRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1e84::/32
Signature Algorithm: sha256WithRSAEncryption
75:82:d4:1e:a8:a6:60:38:11:d1:91:81:8e:7e:03:f1:6c:c6:
80:d0:49:be:f1:a4:0f:67:a2:12:a8:63:22:2f:c4:bc:2f:b5:
e5:10:42:ad:75:02:cc:24:0a:16:b4:b1:42:7b:4b:6f:58:ef:
dc:44:b6:41:ff:a8:98:a0:7e:89:3d:0e:24:89:a8:db:b8:30:
f1:f7:1e:4f:08:a8:ac:b8:aa:94:0d:cb:28:8e:ed:56:15:10:
55:de:3d:10:55:63:2d:93:0c:f0:a5:d2:3d:d4:72:d5:a5:9e:
ca:98:cf:75:e8:73:54:00:05:89:3d:e1:89:21:9e:73:74:7b:
a0:6f:cd:5d:47:41:18:d7:c0:58:f4:29:39:ac:03:5a:f1:84:
58:96:51:a7:5b:92:a3:03:7f:18:e9:4b:3f:de:43:1f:ae:ed:
5a:6e:05:1a:52:39:1f:00:42:4e:31:da:7a:f5:f0:68:34:ce:
e3:7c:48:00:22:2d:72:63:21:d8:f6:02:c5:39:00:4d:df:44:
f7:89:31:6d:f0:76:1f:00:27:c3:68:69:ab:84:03:23:8a:de:
63:82:cc:f4:23:8c:80:6b:e0:57:b2:89:2d:b5:5a:18:5a:07:
26:75:71:6b:5e:c0:64:6e:d7:eb:86:f2:92:1d:68:c1:2a:0c:
96:4c:e2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:59 2025 by rpki-client