Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SFKzZTsdm9XW82e2JtC5Ot9PQr8.roa
File: SFKzZTsdm9XW82e2JtC5Ot9PQr8.roa (raw, json)
Hash identifier: Cw69urmw2vgeHEqFeoujGQJ3CZEn9lGqHaWp318m160=
Subject key identifier: 48:52:B3:65:3B:1D:9B:D5:D6:F3:67:B6:26:D0:B9:3A:DF:4F:42:BF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01835D1C785335159C79FA3EB70DE094F447
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SFKzZTsdm9XW82e2JtC5Ot9PQr8.roa
Signing time: Tue 20 Sep 2022 22:54:50 +0000
ROA not before: Tue 20 Sep 2022 22:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 2a12:f5c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5d:1c:78:53:35:15:9c:79:fa:3e:b7:0d:e0:94:f4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 20 22:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4852b3653b1d9bd5d6f367b626d0b93adf4f42bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:fe:66:8d:8c:2f:f2:3b:3c:3c:58:42:e0:
7c:ee:ad:4f:5b:9d:d0:b7:4b:c8:08:1d:44:24:ad:
68:3a:d2:7f:61:fe:ca:bd:0a:14:64:3b:da:54:20:
2f:04:e9:2a:46:57:20:a8:88:c3:dc:1f:ec:f3:4c:
e8:6e:bf:15:7c:b7:e2:7a:07:c3:62:94:11:77:ae:
25:e4:92:b1:d2:58:78:ef:fe:35:db:c4:8e:a8:c9:
3b:5b:a7:21:eb:39:4d:6b:38:5f:f7:5e:ca:bf:63:
a7:4d:b5:d9:9b:3c:8a:c2:13:89:93:a8:27:bf:3e:
28:ae:0d:d8:60:c1:33:77:57:58:5c:86:91:9b:63:
74:0e:0c:6a:d3:8e:9d:dd:10:b8:23:1f:66:27:bf:
f2:7e:3c:bb:58:c6:87:0d:db:6e:f2:e2:40:f1:2d:
54:45:fb:57:e9:6b:b5:08:88:28:6c:65:35:ee:87:
e6:3e:bc:33:6c:b9:8f:26:a8:c7:59:d9:5e:53:cf:
17:d1:c8:fb:2a:95:82:02:c0:64:4f:33:55:d7:23:
0c:95:cf:d2:17:ed:8c:5b:ca:6c:ba:f9:2b:a3:ba:
49:28:82:89:bc:94:b5:9a:3f:1e:0e:20:46:c6:51:
5d:b8:41:80:0f:c2:d6:f0:62:0f:3b:62:08:73:41:
e6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:52:B3:65:3B:1D:9B:D5:D6:F3:67:B6:26:D0:B9:3A:DF:4F:42:BF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SFKzZTsdm9XW82e2JtC5Ot9PQr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f5c0::/29
Signature Algorithm: sha256WithRSAEncryption
8c:6c:82:0e:1d:9c:78:22:82:b0:8b:ec:75:c0:50:97:ae:db:
f6:c8:4e:71:da:55:21:e5:04:e6:0b:a5:a1:06:93:d1:60:61:
d5:e1:11:a9:d8:8e:f4:c3:a6:1e:18:f1:06:9b:aa:e0:03:e1:
14:60:20:6d:cf:67:4e:d9:2b:97:11:fe:9a:15:c2:f7:36:5d:
4c:1f:ae:8f:20:94:88:71:a3:2e:12:0d:9c:e4:9f:73:a5:52:
58:bf:4f:bb:9b:80:0a:ca:92:e7:21:0e:57:2e:29:2c:d2:41:
60:54:99:b1:ac:6d:da:fc:76:e1:f4:e4:50:87:ae:a5:e9:7e:
a9:5c:8b:79:bf:98:30:c0:ff:4c:6f:1a:4e:55:8e:c2:44:2f:
49:26:7c:d2:a7:88:25:bc:80:95:ff:17:42:1f:0c:5d:91:c0:
83:d4:76:41:c7:9e:6e:1e:7c:21:5e:d7:c2:a8:73:50:07:76:
77:a6:a4:14:43:26:07:56:3d:e6:94:29:8c:70:b8:68:b2:0e:
ed:f2:81:4f:f4:76:ac:5b:5c:af:47:b1:87:d7:60:94:3b:bf:
b5:26:2b:7c:cd:c6:79:29:59:bd:d6:de:f1:30:6f:03:a3:f2:
c3:52:2f:2b:24:5a:c6:ef:c8:9c:ef:7a:77:2b:51:2a:ee:19:
04:a4:58:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:13 2025 by rpki-client