Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LJz_wFTnUfWZADjV_w6iggbNdWM.roa
File: LJz_wFTnUfWZADjV_w6iggbNdWM.roa (raw, json)
Hash identifier: D+i/r0IgBInVFLgfuqi7lLN76THiA9kYra8vLt0rDww=
Subject key identifier: 2C:9C:FF:C0:54:E7:51:F5:99:00:38:D5:FF:0E:A2:82:06:CD:75:63
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01856DCAFB74E1F14CB4071130F3C2FE89D5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LJz_wFTnUfWZADjV_w6iggbNdWM.roa
Signing time: Sun 01 Jan 2023 14:44:57 +0000
ROA not before: Sun 01 Jan 2023 14:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399975
IP address blocks: 2a0f:140::/29 maxlen: 29
2a0f:e540::/29 maxlen: 29
2a0f:1440::/29 maxlen: 29
2a0f:cc00::/29 maxlen: 29
2a13:1380::/29 maxlen: 29
2a0f:fc00::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:e4c0::/29 maxlen: 29
2a0f:2d80::/29 maxlen: 29
2a13:1480::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:fb:74:e1:f1:4c:b4:07:11:30:f3:c2:fe:89:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 14:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c9cffc054e751f5990038d5ff0ea28206cd7563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e3:e8:e2:ba:af:ff:03:2e:2e:e4:ad:41:6f:
aa:75:6e:80:87:aa:0c:d5:5f:67:08:62:3c:26:08:
39:6c:2e:11:a1:a7:4f:b4:d1:aa:63:54:85:58:ae:
a4:37:84:65:e4:ef:49:b9:e3:8c:60:ce:43:23:38:
7d:94:be:92:d6:93:7b:37:66:a3:16:e3:a1:15:2b:
e1:3c:e2:9d:09:ae:7b:7f:ae:ba:ca:98:47:f4:a3:
05:57:d2:ab:b8:f4:e0:8b:70:80:17:68:31:0c:66:
79:b4:40:f9:92:a0:aa:1b:7c:12:fb:b9:44:36:9c:
1d:d4:73:ee:f1:ca:7a:68:49:b3:d1:8d:a8:dd:d4:
8b:86:c7:37:2f:84:fc:36:04:09:15:af:35:ae:5e:
8a:d7:59:b5:09:d2:61:7c:44:af:5a:4b:1e:ad:90:
5e:f9:e9:56:83:f1:62:58:c6:d9:b2:60:93:49:63:
e7:9d:c6:c7:f4:74:f7:d5:64:b4:da:65:43:78:d0:
ff:ae:35:50:96:ab:94:1b:5c:35:ca:8f:6e:da:27:
bd:53:42:bc:5d:47:cb:7b:6b:f3:d8:b9:8d:c9:a0:
46:46:54:cd:50:2d:82:b7:9b:74:7d:b3:0c:d2:f1:
46:fa:86:76:b9:76:4b:70:2e:d5:9d:58:61:bb:98:
ab:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9C:FF:C0:54:E7:51:F5:99:00:38:D5:FF:0E:A2:82:06:CD:75:63
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LJz_wFTnUfWZADjV_w6iggbNdWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:140::/29
2a0f:1440::/29
2a0f:2d80::/29
2a0f:2f80::/29
2a0f:cc00::/29
2a0f:e4c0::/29
2a0f:e540::/29
2a0f:fc00::/29
2a13:1380::/29
2a13:1480::/29
Signature Algorithm: sha256WithRSAEncryption
8e:b1:e2:eb:02:ed:48:8f:4c:bb:09:45:41:e9:08:8d:6f:ef:
33:55:10:d1:70:e0:39:42:12:ab:44:b3:1b:b7:29:54:2e:e8:
6f:22:38:d3:d8:92:1d:3b:60:9e:82:63:58:de:98:b2:2f:c9:
39:42:6b:e4:8e:e8:25:3d:85:fd:b5:af:0e:a1:76:de:3e:9a:
37:90:98:7c:3a:f1:23:4f:3e:81:3b:52:ff:7a:ef:2b:45:c4:
b0:c8:08:d9:93:c4:42:64:98:b8:a2:40:df:da:bf:f2:5c:c9:
44:c8:6d:07:95:81:25:46:5d:b5:61:de:20:7c:c1:c0:b4:77:
bb:5a:61:3c:73:24:ac:64:1c:d8:cb:0b:7e:a8:7b:51:60:6f:
99:23:15:a1:8a:a2:e3:41:ee:cc:20:5b:98:e2:be:db:ae:2c:
8b:71:4b:20:c5:10:a2:c5:2d:69:ab:b0:18:c6:ad:c3:6e:61:
14:d6:ba:dd:66:06:a2:87:35:b4:29:0c:3e:16:dd:9f:bc:fa:
6e:78:c9:99:67:67:61:e9:35:3f:96:3f:21:a6:9f:e0:c1:bd:
c3:ae:06:51:88:ec:4f:34:59:98:15:a9:67:b2:99:d6:63:24:
57:f5:3a:28:48:ed:7e:09:11:0f:1d:01:bb:4f:12:6a:62:55:
94:32:3e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:22:06 2025 by rpki-client