Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P9XOkZq_ZNJyD_i61AkL_gPgK0w.roa
File: P9XOkZq_ZNJyD_i61AkL_gPgK0w.roa (raw, json)
Hash identifier: kFLeQTynR4yCD7b2R9BSW+T/bBG1LyDe6Y0x+LLjVGs=
Subject key identifier: 3F:D5:CE:91:9A:BF:64:D2:72:0F:F8:BA:D4:09:0B:FE:03:E0:2B:4C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018A026892BE14B9047293D478EC2F4B8F40
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P9XOkZq_ZNJyD_i61AkL_gPgK0w.roa
Signing time: Thu 17 Aug 2023 07:32:02 +0000
ROA not before: Thu 17 Aug 2023 07:32:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205544
IP address blocks: 2a0f:e1c0:1::/48 maxlen: 48
2a0f:e6c7:1::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:02:68:92:be:14:b9:04:72:93:d4:78:ec:2f:4b:8f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 17 07:32:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fd5ce919abf64d2720ff8bad4090bfe03e02b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:f6:b6:69:bb:80:f0:30:0b:a7:0d:46:de:
20:4d:25:5a:b8:6d:24:7a:ad:a7:cd:fd:29:69:08:
6f:fd:df:13:d3:97:1e:0f:a7:e6:89:f9:7e:bf:4a:
ba:3a:b8:d5:c4:c4:d4:14:d1:51:1a:c1:44:f9:9f:
de:97:44:45:3f:43:46:25:71:16:84:fb:55:d8:f0:
b0:1a:90:2d:c4:02:0f:6a:71:f5:2c:07:3e:6f:5a:
1d:a2:84:52:05:53:99:d7:bd:3a:b2:6c:8e:29:e1:
51:3f:c0:73:43:d4:96:24:9e:d2:23:61:91:61:af:
57:60:c8:85:5a:38:41:7a:d1:58:14:a2:9f:4e:79:
5e:05:0a:4a:a0:03:f9:b3:2a:93:48:6a:fc:64:d7:
9d:49:b1:4d:72:c5:9f:cf:c5:27:8a:46:46:19:67:
82:93:69:d1:c9:89:8c:f9:4a:72:fa:98:88:e2:42:
c4:d8:9a:f4:20:00:b9:d4:7b:61:88:08:79:30:27:
00:44:35:af:ea:14:98:58:62:35:65:02:03:e4:06:
f0:d9:b8:e1:f4:26:cf:37:2e:c7:6b:88:fe:47:c2:
08:ac:a1:2e:59:23:94:c9:cd:ea:5a:01:99:6a:ce:
b6:f6:f5:5c:5a:fe:e5:9d:61:ba:20:c0:66:57:98:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D5:CE:91:9A:BF:64:D2:72:0F:F8:BA:D4:09:0B:FE:03:E0:2B:4C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P9XOkZq_ZNJyD_i61AkL_gPgK0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e1c0:1::/48
2a0f:e440::/29
2a0f:e6c7:1::/48
Signature Algorithm: sha256WithRSAEncryption
17:39:3f:ee:96:7d:4e:a3:56:34:94:da:6c:a2:01:0a:68:b5:
c0:1d:2a:98:8d:11:76:37:eb:61:5a:73:4f:d0:14:34:9e:0e:
51:76:df:9a:30:cd:bb:89:ca:80:b2:b0:e5:d7:0b:43:5a:77:
6b:9c:fe:7b:38:be:ba:13:44:12:33:a2:7f:92:49:d1:5a:83:
c8:95:ea:b5:c8:f6:9f:73:93:19:e9:2c:30:8a:61:a0:02:60:
df:a9:c7:46:df:f6:b0:8f:d8:01:89:df:c9:c4:4f:4d:b5:a5:
a7:3c:29:fd:5f:ec:46:e3:07:fc:10:d1:26:f3:35:f2:e4:5c:
7f:67:1c:b8:af:1a:55:4a:71:bf:4e:c7:4b:c9:34:ce:51:3f:
fc:db:00:8d:67:7a:d1:e1:b2:e8:62:1e:31:63:d3:00:49:09:
0a:e3:d2:18:a1:3d:b8:e6:d2:ac:ad:37:1e:4d:e2:5f:c7:06:
62:53:fe:68:c8:f5:2d:aa:dd:8f:c2:04:88:cb:38:7f:1a:cd:
bb:08:02:54:cb:a1:09:95:2b:7b:74:cc:af:1c:83:40:ec:71:
a9:1f:22:b8:ee:46:5c:23:e9:68:4f:48:05:ab:60:64:e3:ad:
ae:c3:97:ec:05:45:bc:00:af:e2:d6:3a:7f:01:ba:ab:fd:75:
6b:d2:36:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:29 2025 by rpki-client