Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Oc-pzZhHTOQh-GBclySRNJqdph4.roa
File: Oc-pzZhHTOQh-GBclySRNJqdph4.roa (raw, json)
Hash identifier: wBBn9i7Pq9uobFwc01oDBSjbwoSTfWgObWOQVKK+t6k=
Subject key identifier: 39:CF:A9:CD:98:47:4C:E4:21:F8:60:5C:97:24:91:34:9A:9D:A6:1E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018AD5BC610FB4E878359BDD4B09CEF6BC16
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Oc-pzZhHTOQh-GBclySRNJqdph4.roa
Signing time: Wed 27 Sep 2023 08:23:27 +0000
ROA not before: Wed 27 Sep 2023 08:23:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198231
IP address blocks: 2a13:d902::/32 maxlen: 32
2a13:2dc5::/32 maxlen: 32
2a13:2d41::/32 maxlen: 32
2a13:c906::/32 maxlen: 32
2a13:c905::/32 maxlen: 32
2a13:d700::/32 maxlen: 32
2a13:2d42::/32 maxlen: 32
2a13:d901::/32 maxlen: 32
2a13:2dc4::/32 maxlen: 32
2a13:d702::/32 maxlen: 32
2a13:c904::/32 maxlen: 32
2a13:c907::/32 maxlen: 32
2a13:2d43::/32 maxlen: 32
2a13:2dc7::/32 maxlen: 32
2a13:d706::/32 maxlen: 32
2a13:d900::/32 maxlen: 32
2a13:d703::/32 maxlen: 32
2a06:35c4::/30 maxlen: 30
2a13:d903::/32 maxlen: 32
2a13:2d40::/32 maxlen: 32
2a13:2d46::/32 maxlen: 32
2a13:2d45::/32 maxlen: 32
2a13:d704::/32 maxlen: 32
2a13:2dc1::/32 maxlen: 32
2a13:2dc2::/32 maxlen: 32
2a13:d906::/32 maxlen: 32
2a13:c902::/32 maxlen: 32
2a13:2d44::/32 maxlen: 32
2a13:c901::/32 maxlen: 32
2a13:d907::/32 maxlen: 32
2a13:d705::/32 maxlen: 32
2a13:d904::/32 maxlen: 32
2a06:35c0::/30 maxlen: 30
2a13:c900::/32 maxlen: 32
2a13:2d47::/32 maxlen: 32
2a13:2dc6::/32 maxlen: 32
2a13:d707::/32 maxlen: 32
2a13:c903::/32 maxlen: 32
2a13:d905::/32 maxlen: 32
2a13:2dc0::/32 maxlen: 32
2a13:d701::/32 maxlen: 32
2a13:2dc3::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:bc:61:0f:b4:e8:78:35:9b:dd:4b:09:ce:f6:bc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 27 08:23:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39cfa9cd98474ce421f8605c972491349a9da61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:17:e9:76:54:95:19:99:84:cd:12:de:78:
30:43:10:0f:92:66:4e:7c:f3:66:35:0d:9b:68:0f:
52:c8:ce:96:70:fc:43:ea:59:b0:be:14:50:51:53:
58:f5:b9:1c:19:ef:0c:1b:7f:82:21:50:ce:09:71:
10:a0:82:25:b1:ff:d1:ef:a8:79:e1:9f:ef:56:97:
cf:09:3f:9f:2f:8f:dc:60:58:b7:b1:66:56:64:02:
24:62:2a:c0:39:4e:22:1f:d6:5f:eb:84:ec:0b:b1:
70:79:60:b3:ef:e0:f8:99:c2:7e:56:d4:49:b2:6b:
2f:73:4c:81:d8:76:0b:65:c3:7c:54:d3:f9:7c:e2:
03:62:b0:0e:23:8a:57:ec:c6:60:e2:f9:98:eb:e7:
f6:7b:68:7b:39:f5:e3:5b:ff:f9:4b:c9:0c:54:e3:
84:b1:a6:4e:e6:e0:1b:4b:88:2a:0d:43:f9:e0:5d:
57:3c:b7:78:8b:da:f7:f8:ff:9b:99:ec:07:2e:99:
58:cf:64:ea:d0:08:b7:7c:cb:5e:ba:dc:0d:e5:b6:
35:f2:a0:af:4c:67:22:99:0e:64:b1:d3:f1:62:82:
0d:0e:c8:89:1f:49:a5:db:94:7b:c6:34:83:ed:29:
40:45:46:f8:dc:b4:eb:e0:84:87:73:06:b1:89:03:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CF:A9:CD:98:47:4C:E4:21:F8:60:5C:97:24:91:34:9A:9D:A6:1E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Oc-pzZhHTOQh-GBclySRNJqdph4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:35c0::/29
2a13:2d40::/29
2a13:2dc0::/29
2a13:c900::/29
2a13:d700::/29
2a13:d900::/29
Signature Algorithm: sha256WithRSAEncryption
44:88:68:9c:f3:a8:15:45:2f:cb:49:fa:3a:e9:df:81:43:2a:
e0:97:d0:3b:51:e6:20:96:ce:10:c7:53:2b:87:a1:00:ab:43:
1d:67:f1:9c:53:b0:75:f9:54:38:c7:5d:31:3e:14:6a:2d:cd:
fe:82:f3:be:af:bd:7f:21:38:75:f0:c5:b0:91:8f:a2:9d:af:
d6:e1:62:ba:93:15:46:28:3f:26:00:9f:61:49:16:0d:75:a4:
df:0f:ee:a9:91:5c:36:c5:d6:06:d1:92:89:b8:4a:c7:18:ba:
7d:ff:0c:c8:e2:a0:49:67:64:57:fd:2d:d7:03:3f:03:0d:77:
9d:32:9f:6f:69:e4:21:3c:b5:96:cc:c6:50:9e:62:20:e2:4e:
4a:62:89:40:87:c8:f5:63:12:2a:82:3d:53:60:a4:ef:75:f4:
5b:ed:50:15:b5:d8:63:b9:29:86:b8:a1:00:b5:98:02:90:06:
c4:d1:5c:04:51:12:15:c4:9e:d1:e5:57:14:2f:e1:82:3f:08:
b1:13:ce:54:41:99:46:8e:97:47:fd:67:47:90:fe:4f:03:e4:
3f:08:8a:99:6e:66:c4:e2:00:ff:b1:f7:d7:6e:ce:9a:8b:32:
5a:88:81:2f:6d:f8:f7:4e:59:8a:65:d2:fc:c2:72:43:80:78:
8c:a5:a8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:23 2025 by rpki-client