Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VvxFIbALB2zfuvixJLhNaWQdL2A.roa
File: VvxFIbALB2zfuvixJLhNaWQdL2A.roa (raw, json)
Hash identifier: w9/DRAPtO9NOd4tIjLMAxKp01S5Eaoq4su1i32rFgxc=
Subject key identifier: 56:FC:45:21:B0:0B:07:6C:DF:BA:F8:B1:24:B8:4D:69:64:1D:2F:60
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01856DCAE87D37961D5192CDD4CE569A12F3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VvxFIbALB2zfuvixJLhNaWQdL2A.roa
Signing time: Sun 01 Jan 2023 14:44:52 +0000
ROA not before: Sun 01 Jan 2023 14:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8772
IP address blocks: 2a0c:9240::/29 maxlen: 29
2a0f:e6c0::/29 maxlen: 29
2a0f:e7c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:e8:7d:37:96:1d:51:92:cd:d4:ce:56:9a:12:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 14:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56fc4521b00b076cdfbaf8b124b84d69641d2f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b7:00:b9:7e:ec:a2:67:95:fa:2e:6e:82:62:
d5:d2:82:de:db:42:ee:51:53:e3:ff:a4:ad:99:3c:
28:4a:cf:ff:06:d1:6b:a9:b9:6b:85:89:82:78:15:
c3:a1:89:e1:ca:cb:18:5c:bb:2e:7d:fc:2f:b6:7e:
65:f1:14:2e:18:dc:c0:cc:20:ba:33:7d:9b:5f:76:
e9:36:45:65:d4:09:ef:c0:af:97:99:73:8a:79:71:
44:1e:90:69:2a:30:78:37:10:02:c6:e8:72:1d:15:
2b:08:6d:7b:e8:13:b6:e8:bd:9a:0e:24:28:33:71:
68:70:9f:00:2a:56:3d:16:31:9d:67:ee:00:20:a6:
33:4e:2e:52:b0:99:8c:ad:d7:8d:b0:ff:61:98:c7:
17:6a:51:dc:bb:5a:f1:c8:f1:07:54:58:a2:f8:13:
06:77:9c:34:59:75:60:c7:6e:13:35:45:0e:39:64:
2b:9f:1f:5b:98:6c:58:ab:07:15:46:28:3a:70:db:
e2:f6:f8:93:e1:9f:0f:63:92:b2:6f:44:dd:76:3b:
cc:3c:36:3f:1e:65:60:ac:11:f1:7d:20:f2:c0:78:
fe:4d:0a:5b:b6:2d:fe:fb:bc:8b:11:d0:35:6f:4b:
b1:6c:e2:70:a3:bb:be:56:ed:55:4b:f6:d7:62:0a:
4e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FC:45:21:B0:0B:07:6C:DF:BA:F8:B1:24:B8:4D:69:64:1D:2F:60
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VvxFIbALB2zfuvixJLhNaWQdL2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9240::/29
2a0f:e6c0::/29
2a0f:e7c0::/29
Signature Algorithm: sha256WithRSAEncryption
49:f4:5e:30:e4:aa:49:a2:57:69:cf:b6:15:28:4c:ae:5f:e8:
c3:53:cd:2d:f6:1d:5c:8f:05:28:36:81:73:5d:77:c0:ad:fc:
37:ee:2e:fe:7f:4f:83:58:c3:3f:54:f4:75:89:94:1a:53:d1:
fe:9c:c3:ec:ec:91:db:05:de:f0:9c:c5:dd:5f:1b:fa:4d:77:
d0:1c:60:4f:ef:22:7f:e3:50:88:d0:66:f7:87:87:a2:69:03:
ea:eb:5c:69:e9:98:d6:78:2a:05:d4:fc:6a:dc:ca:ce:67:78:
8f:9a:47:5c:fa:7c:d1:58:a8:0e:30:47:83:20:a1:94:6b:6d:
7a:fd:46:23:cd:43:a9:f2:87:52:bc:31:50:f9:bc:54:4b:d1:
57:35:59:19:35:0c:7f:8e:2f:ba:d6:04:8a:96:88:d6:5d:ff:
13:6f:6c:fe:8e:99:72:36:40:ab:be:62:64:db:8b:ca:dd:be:
b1:0e:1a:42:8d:83:c6:48:44:e0:c9:60:74:bb:f9:bd:d7:6b:
d4:d2:34:2e:6a:87:ea:f9:e8:a6:0d:3b:ef:6a:1e:55:94:b1:
04:47:bd:0b:16:41:44:10:be:2c:05:bc:64:3b:74:3f:9f:2d:
53:d1:b4:47:bf:0d:4d:39:ed:31:bf:dc:68:dc:e8:b8:bd:c4:
26:f3:46:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:04:44 2025 by rpki-client