Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SKyYwKkwpY2c-bZ7HkLqY6tw8mA.roa
File: SKyYwKkwpY2c-bZ7HkLqY6tw8mA.roa (raw, json)
Hash identifier: 8vrzyUvfXrwSYN/NRfSI0eAuTHMyrTLeR+tovFZEcsY=
Subject key identifier: 48:AC:98:C0:A9:30:A5:8D:9C:F9:B6:7B:1E:42:EA:63:AB:70:F2:60
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01856DCAF202A2FC076C3BD87E7088D52EED
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SKyYwKkwpY2c-bZ7HkLqY6tw8mA.roa
Signing time: Sun 01 Jan 2023 14:44:54 +0000
ROA not before: Sun 01 Jan 2023 14:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50340
IP address blocks: 2a0f:2e80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:f2:02:a2:fc:07:6c:3b:d8:7e:70:88:d5:2e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 14:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48ac98c0a930a58d9cf9b67b1e42ea63ab70f260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:d9:8f:ab:98:23:0f:46:6c:ef:e7:46:c7:
08:7b:55:67:df:04:0b:69:45:cb:ff:43:46:f8:fc:
35:0a:c1:aa:84:69:ab:fe:58:99:6d:76:ba:a2:7e:
c7:b3:11:31:c0:e9:79:ae:a6:c9:4b:2e:0f:73:04:
a8:57:15:e7:a6:18:43:c8:11:ae:1e:42:9d:c1:e4:
e0:c7:aa:5b:51:45:11:1c:39:fb:34:ea:0a:24:ed:
eb:8c:6b:4b:21:5b:38:5a:09:f7:17:ad:4e:40:36:
56:bc:7a:87:a1:ea:83:f1:9d:5b:e0:67:1b:9b:c8:
72:b8:64:f5:f1:62:26:70:1b:b6:86:ac:2c:72:a6:
e0:12:c8:1a:52:41:a2:e7:34:1e:0b:11:48:5c:9b:
c0:db:e1:50:c5:0b:41:ed:94:d3:80:cd:51:38:22:
bb:72:de:67:f9:8f:2a:14:b4:f0:17:0e:6a:6b:50:
75:f3:ce:06:36:9a:13:39:49:f1:55:97:0f:38:b9:
30:78:b9:d9:74:db:c6:5e:14:36:6b:c1:b1:ba:5c:
20:d4:3c:08:36:73:ba:1b:bd:ca:a9:7b:34:66:e7:
f8:ef:6c:91:4b:fc:f1:30:29:b4:c2:30:75:13:b3:
be:75:51:b6:8a:2a:b3:42:24:3f:8f:fe:43:68:3b:
7f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AC:98:C0:A9:30:A5:8D:9C:F9:B6:7B:1E:42:EA:63:AB:70:F2:60
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SKyYwKkwpY2c-bZ7HkLqY6tw8mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2e80::/29
Signature Algorithm: sha256WithRSAEncryption
11:1f:1c:c1:a7:20:47:47:73:93:6f:07:9c:77:8c:ac:ee:00:
2c:b8:0a:00:68:94:01:ec:aa:90:b9:6e:e1:11:98:08:e6:85:
05:6a:71:e7:af:82:1a:dc:a9:37:9e:55:08:5f:11:b4:6d:9a:
4e:f4:99:55:2f:06:75:30:92:0d:5c:3e:d2:1d:e6:5d:2f:0f:
4a:e0:82:e1:77:31:bd:55:4e:2e:c9:f9:90:7f:1c:fe:b0:75:
45:2d:81:42:0e:f3:e5:a7:a6:cf:64:60:ac:5a:c0:91:9f:03:
df:7d:d1:03:84:4a:8e:43:25:00:8c:97:f7:e9:57:54:7e:77:
0f:fe:20:6b:77:e3:a5:29:d8:74:a8:3f:21:c2:67:bd:64:a4:
1c:20:2f:72:76:e5:94:0c:2e:00:39:81:e9:eb:f7:80:17:20:
3a:49:ed:48:5f:98:65:d5:73:3a:42:11:bb:8d:6e:f0:53:17:
01:ce:6c:d4:0a:01:20:f7:5b:84:22:9a:d4:d4:34:54:13:f0:
2d:f4:fb:22:8c:0f:17:63:fa:2d:70:08:98:50:b5:13:b1:c0:
c9:be:cd:9f:43:9c:9a:0f:b3:8c:15:91:ab:1d:eb:c9:2f:9a:
a4:cc:7b:91:ff:eb:32:a0:2f:dd:4d:5e:68:1c:7d:98:e5:fa:
30:c9:2f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:33:19 2025 by rpki-client