Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OxtG4bDJBuqDZR7folNCZLTsB4w.roa
File: OxtG4bDJBuqDZR7folNCZLTsB4w.roa (raw, json)
Hash identifier: ORtezyXfJZ5hTwmmL4EwYzRmfnOe6aHJ2kpmRXU771k=
Subject key identifier: 3B:1B:46:E1:B0:C9:06:EA:83:65:1E:DF:A2:53:42:64:B4:EC:07:8C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018948B5AB0E5FC8B20496078878C8DA4D6E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OxtG4bDJBuqDZR7folNCZLTsB4w.roa
Signing time: Wed 12 Jul 2023 06:06:52 +0000
ROA not before: Wed 12 Jul 2023 06:06:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 395839
IP address blocks: 2a0f:3940::/29 maxlen: 29
2a0f:39c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:48:b5:ab:0e:5f:c8:b2:04:96:07:88:78:c8:da:4d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 12 06:06:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b1b46e1b0c906ea83651edfa2534264b4ec078c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:96:58:57:ca:93:ac:7e:02:f1:be:b5:56:7f:
1e:81:97:f0:f7:95:06:55:c2:3e:25:8c:cf:c0:74:
25:f1:e2:42:6a:49:0b:17:a3:70:76:2c:5e:34:1e:
3b:27:13:ea:fe:99:e6:71:07:53:7c:40:5a:73:32:
b2:30:18:f4:d0:2b:28:ca:cb:38:e6:b7:d3:06:54:
a7:76:3a:6b:9e:65:3f:63:8e:ad:03:b3:e3:d5:11:
98:61:5e:6b:db:42:15:53:27:ab:d2:d4:ed:a6:aa:
f7:af:c5:b7:55:e0:46:a9:c6:40:8e:26:1e:9f:68:
bd:6d:ac:9b:c1:e7:dd:34:8f:81:78:9b:89:5a:24:
26:29:48:53:80:b2:46:9e:6d:6f:52:d3:e9:19:fe:
29:d5:6d:40:20:9e:b6:4f:c0:ac:bc:01:07:6b:4c:
af:85:40:1b:50:f1:f3:57:c4:04:01:e5:ff:05:e5:
71:f0:30:0c:98:64:3f:de:b3:b4:6c:29:fa:3a:95:
fe:a6:18:6d:45:77:97:1d:5a:f2:f2:b7:09:9c:07:
57:fb:93:45:40:1f:20:a3:50:af:d8:f9:05:36:64:
1a:04:8d:33:cc:49:c6:6d:be:5c:c0:48:f3:35:a6:
02:11:4c:d6:36:0b:44:36:bb:bf:b5:24:e9:01:96:
bd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1B:46:E1:B0:C9:06:EA:83:65:1E:DF:A2:53:42:64:B4:EC:07:8C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OxtG4bDJBuqDZR7folNCZLTsB4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3940::/29
2a0f:39c0::/29
Signature Algorithm: sha256WithRSAEncryption
bb:65:36:27:82:f6:d6:8c:90:0a:4c:88:c1:33:d6:94:48:ab:
e7:d3:6f:29:69:0e:89:22:57:5a:42:f7:1a:0c:ce:9f:6f:de:
73:0e:3a:a9:1b:eb:60:af:0c:22:1a:d0:be:1e:60:09:80:a7:
78:f6:3e:af:9b:ad:40:59:4c:48:21:12:22:1b:0d:ee:96:83:
66:8f:1d:16:19:b3:1d:41:7c:b3:b4:8b:3d:d8:97:6d:4e:59:
25:e6:4f:bd:5b:d5:6e:43:2c:6d:30:e6:6a:50:23:8f:0b:38:
f0:33:48:8f:73:b4:69:c0:fd:53:60:23:6d:1a:71:eb:d6:ee:
20:97:40:3e:22:45:4b:39:79:0a:48:b1:6b:c0:6d:af:8d:16:
7c:cd:5a:d4:d2:45:f4:99:32:0e:d8:8a:fc:93:2e:20:42:e7:
bc:c4:12:53:2a:b7:4a:ba:22:2b:80:43:56:d9:a3:36:09:be:
d6:e0:ce:15:45:aa:cc:d9:a2:c6:89:87:63:32:57:c6:9a:cf:
dd:18:5d:26:3b:34:49:92:e0:d5:de:f7:b0:16:bf:32:57:8f:
e6:4d:0e:a7:91:8e:65:50:95:97:65:8a:40:43:ee:27:4e:35:
ca:a7:53:27:37:17:0c:54:95:84:66:94:51:6c:f1:77:ad:7e:
38:c4:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:20 2025 by rpki-client