Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XRGBMsAhQtPEAGzdWe-1nmK_Jno.roa
File: XRGBMsAhQtPEAGzdWe-1nmK_Jno.roa (raw, json)
Hash identifier: C4K5h4IbNlGh7ltXz2JnrdaLRYQn3/URtwIkUSSAdxc=
Subject key identifier: 5D:11:81:32:C0:21:42:D3:C4:00:6C:DD:59:EF:B5:9E:62:BF:26:7A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0184667E4AA6D020C34B56914853AB884DEA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XRGBMsAhQtPEAGzdWe-1nmK_Jno.roa
Signing time: Fri 11 Nov 2022 11:41:03 +0000
ROA not before: Fri 11 Nov 2022 11:41:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 2a0f:bc01::/32 maxlen: 32
2a0f:bc03::/32 maxlen: 32
2a0f:bc07::/32 maxlen: 32
2a0f:bc04::/32 maxlen: 32
2a0f:bc06::/32 maxlen: 32
2a0f:bc05::/32 maxlen: 32
2a0f:bc02::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:7e:4a:a6:d0:20:c3:4b:56:91:48:53:ab:88:4d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 11 11:41:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d118132c02142d3c4006cdd59efb59e62bf267a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:a7:06:e4:0a:f8:30:eb:59:bb:3e:1c:b6:
db:54:63:ad:60:4d:ec:73:85:12:a0:9c:d0:4c:ec:
8a:9c:70:0e:9c:0d:0b:53:9b:04:f6:b3:1f:70:c5:
b8:fd:b5:2a:0d:a6:e5:37:3b:93:45:bc:65:1e:79:
8c:6b:21:d3:bd:db:80:c2:c8:20:29:93:4b:a4:d0:
f7:de:1a:b8:eb:11:bd:2b:e9:2d:3a:43:29:c7:8f:
fc:64:d6:bc:94:00:a6:70:58:a1:e3:36:54:93:71:
cc:66:b4:1f:9d:28:b7:6f:74:71:65:e7:38:ab:fb:
f3:b9:d6:c3:52:41:d4:27:d5:c4:17:f9:95:dd:b3:
57:81:a5:e9:1e:24:e5:dd:d6:83:99:77:03:15:e1:
7e:43:7c:29:00:bd:6f:a1:ff:2c:af:a1:ab:1b:ec:
83:dd:11:77:6c:4c:53:29:bf:cc:fb:29:e8:fd:e4:
c7:11:0f:e2:56:58:79:2f:75:9b:da:bc:76:cf:96:
b5:7c:68:a9:4f:e3:c9:1d:88:c1:e7:0d:eb:f9:e9:
cd:93:ea:a0:97:63:0e:20:e5:ae:fe:31:19:b3:03:
63:e6:7d:d7:a2:7a:92:a9:05:90:15:58:14:3e:bf:
4b:5c:25:e3:35:97:db:bf:be:38:08:95:4b:13:62:
d4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:11:81:32:C0:21:42:D3:C4:00:6C:DD:59:EF:B5:9E:62:BF:26:7A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XRGBMsAhQtPEAGzdWe-1nmK_Jno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:bc01::-2a0f:bc07:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
be:3d:4b:71:08:ba:d4:be:b5:13:87:16:ae:2d:a7:0d:49:79:
bd:40:1f:04:84:18:e0:1b:c8:53:72:86:c0:ca:a4:da:3b:82:
6c:a5:47:53:ea:da:41:8d:d3:35:ad:3e:b1:c0:15:0c:a6:4b:
55:82:d2:99:6e:f9:c4:92:10:7b:af:18:80:27:97:ac:43:66:
42:26:cc:6c:fa:32:3e:9c:fc:d4:f7:34:10:03:b7:48:17:3d:
39:cc:17:8d:81:50:76:03:42:95:d8:a2:f5:2c:61:2e:2e:ba:
25:6e:2b:32:c2:57:ed:9c:49:b9:3d:6a:77:45:6c:58:71:11:
1c:22:fa:18:e0:d6:0f:c5:4d:66:1f:f3:b1:ef:b8:95:c0:66:
33:81:a3:c3:aa:c6:39:dd:e2:6c:3c:8e:74:49:0f:51:b7:76:
da:f3:d9:92:71:b9:ec:ec:48:b6:0c:94:85:d3:d0:29:61:f9:
01:ab:7a:ab:1d:7c:c3:c9:e0:75:b0:ae:9a:30:4f:73:cb:50:
8b:5b:4e:d2:7c:e3:82:d9:98:de:cb:da:99:35:14:85:11:f0:
c4:c6:6e:14:30:ae:52:9b:e2:7b:7a:eb:38:3a:85:6a:e8:db:
df:8c:15:b0:2d:1c:9c:c7:1f:fb:24:14:b2:0f:67:9b:c5:9a:
8d:3d:35:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:43 2025 by rpki-client