Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SAVfsHYNw1AJX-K_nU4pAq-wYi4.roa
File: SAVfsHYNw1AJX-K_nU4pAq-wYi4.roa (raw, json)
Hash identifier: Feo8m2rXZ+pvnLe+3faUA1eqPywiy/GqrZvbYyDWqPA=
Subject key identifier: 48:05:5F:B0:76:0D:C3:50:09:5F:E2:BF:9D:4E:29:02:AF:B0:62:2E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 038621D9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SAVfsHYNw1AJX-K_nU4pAq-wYi4.roa
Signing time: Tue 14 Jun 2022 07:30:44 +0000
ROA not before: Tue 14 Jun 2022 07:30:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 2a0f:39c7::/32 maxlen: 32
2a0f:39c1::/32 maxlen: 32
2a0f:39c2::/32 maxlen: 32
2a0f:39c5::/32 maxlen: 32
2a0f:e840::/32 maxlen: 32
2a0f:39c6::/32 maxlen: 32
2a0f:39c4::/32 maxlen: 32
2a0f:39c3::/32 maxlen: 32
2a0f:39c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59122137 (0x38621d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 14 07:30:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48055fb0760dc350095fe2bf9d4e2902afb0622e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:26:54:e5:27:62:5c:a4:dd:29:b3:42:c9:
75:56:ee:3b:95:2c:23:ab:be:cf:e9:c9:18:ef:c2:
bc:57:e1:32:77:61:d9:21:27:6e:04:c3:b1:f9:cb:
19:24:87:a2:69:2c:3b:81:73:cc:a1:ea:f4:dc:3a:
60:24:e0:25:c1:54:6b:e5:21:e8:69:66:6c:21:2a:
46:3a:3d:ee:d5:fe:6c:42:07:93:4d:70:3c:cf:9c:
1f:e4:68:b7:7b:c1:70:ef:20:e7:d2:ac:3b:26:a2:
8e:cf:c5:ab:ce:ce:d5:eb:4c:d9:22:a1:0d:89:93:
1b:73:1c:db:6b:e3:ca:e7:2b:86:97:bc:d2:95:de:
20:40:26:d0:98:86:fc:46:ef:21:2c:4c:0a:35:69:
be:ff:e5:7d:ee:b0:a3:70:56:96:9f:bc:16:d8:29:
4f:9d:75:4d:c9:b4:fb:ae:d8:4f:1f:c8:90:3e:8b:
f4:00:f8:ec:49:78:5f:33:d3:f3:78:45:36:74:22:
1e:a1:7e:52:e7:6f:57:d4:88:bf:35:08:28:7b:c4:
fc:7d:2c:20:81:8a:3f:28:0e:a6:cd:08:6b:04:5f:
86:b9:b7:f4:7b:b8:34:6e:17:4a:98:71:c7:c6:ed:
d7:78:bf:4b:0d:74:8d:3a:1d:9e:b2:77:c2:cd:ef:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:05:5F:B0:76:0D:C3:50:09:5F:E2:BF:9D:4E:29:02:AF:B0:62:2E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SAVfsHYNw1AJX-K_nU4pAq-wYi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:39c0::/29
2a0f:e840::/32
Signature Algorithm: sha256WithRSAEncryption
76:04:fe:2d:d1:dd:a6:21:bf:83:8c:d5:bf:3d:7c:b6:4a:f3:
cf:92:f9:57:24:30:a0:fa:8c:72:0c:0f:6b:16:1e:ac:e3:b4:
28:a9:a3:0b:f3:61:a8:5f:27:6d:6d:dd:1a:54:70:72:c2:0b:
32:1f:7d:97:2e:0e:c7:c8:17:e8:76:23:84:0e:84:74:c0:5b:
63:8a:47:e4:d9:6d:01:c0:be:db:67:fe:bb:ce:cb:38:e5:b0:
11:95:79:b7:b8:f1:af:6c:65:3a:83:70:84:98:c1:78:7e:cd:
d7:ef:da:f3:d4:ed:bf:95:b7:34:6e:c0:16:eb:a4:20:ee:c7:
64:15:24:37:9f:18:7d:d2:22:15:ed:4d:c8:23:a1:26:34:c8:
5c:93:84:d0:10:c9:cc:49:73:42:0f:76:14:37:71:d9:c9:1e:
07:d1:e0:7a:36:ca:e8:01:1c:0b:48:f5:9a:0c:5a:16:5a:05:
cf:4b:b5:cf:e2:c1:d9:26:cc:26:5f:8a:56:86:2e:e3:29:33:
bd:f3:dd:32:d5:8d:44:98:10:7b:77:37:81:81:eb:9d:f2:7c:
45:de:a7:db:53:25:14:8a:68:9d:3c:f4:26:4c:14:b5:95:db:
16:49:ef:49:8e:8b:44:60:9d:9d:ed:00:69:ac:86:55:ec:24:
d2:a7:6c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:15 2025 by rpki-client