Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Z_IVs6WBGmocUNahb5cIA4UXRmc.roa
File: Z_IVs6WBGmocUNahb5cIA4UXRmc.roa (raw, json)
Hash identifier: kry/8LPJQZF5dmNH2UsSX36pLnZ82K9/IxPkCAJg66s=
Subject key identifier: 67:F2:15:B3:A5:81:1A:6A:1C:50:D6:A1:6F:97:08:03:85:17:46:67
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0183121A19A3C3CDD906285AEE3EE7902619
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Z_IVs6WBGmocUNahb5cIA4UXRmc.roa
Signing time: Tue 06 Sep 2022 09:20:43 +0000
ROA not before: Tue 06 Sep 2022 09:20:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50340
IP address blocks: 2a0f:2e80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:1a:19:a3:c3:cd:d9:06:28:5a:ee:3e:e7:90:26:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 6 09:20:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67f215b3a5811a6a1c50d6a16f97080385174667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:14:d3:c8:b9:8d:63:ab:62:ec:17:c6:45:46:
8f:f0:0e:0d:c0:cb:3b:5a:4e:0f:a4:d1:88:d0:ff:
86:08:08:da:7c:b0:3b:fa:9c:9e:8a:96:cf:a9:1a:
ac:b4:7b:73:cf:a4:fa:e6:11:f2:15:48:95:be:22:
d2:23:78:79:44:f6:4c:cb:4a:4f:c2:b1:91:f3:c1:
a3:2c:a6:6b:e8:37:54:cf:f4:17:dd:df:31:93:95:
6f:4f:db:56:b0:22:31:5f:a7:8e:88:1e:5c:de:a9:
4d:d4:a1:45:78:77:a2:c5:6f:91:98:dd:b5:c8:bd:
c7:82:cb:dc:d4:3b:5a:c5:32:61:9c:87:fa:3b:7a:
83:ac:0a:a1:06:b4:78:f9:c3:1b:69:36:c3:ea:38:
4e:bf:88:a7:35:79:4b:00:bf:73:7a:0b:12:91:84:
b0:42:95:7d:1f:99:ea:51:05:5d:4e:91:61:12:93:
6c:fc:74:74:4e:e9:71:7a:04:8e:43:a8:37:37:aa:
4b:81:42:01:66:22:2c:ac:ac:53:4f:67:4a:b5:df:
f2:3a:67:83:6b:b4:22:bf:da:e5:67:28:c1:a0:6f:
7a:c3:e7:87:35:44:bd:38:ad:38:a7:e3:1e:e3:c6:
57:96:e7:04:26:5b:7b:22:8f:97:84:cd:b0:e8:b1:
56:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F2:15:B3:A5:81:1A:6A:1C:50:D6:A1:6F:97:08:03:85:17:46:67
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Z_IVs6WBGmocUNahb5cIA4UXRmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2e80::/29
Signature Algorithm: sha256WithRSAEncryption
90:63:6a:0c:df:bb:ed:81:e3:40:4f:0c:b1:f5:c4:89:19:52:
44:4b:03:d8:b8:67:e2:53:ce:55:d6:3d:90:70:78:76:55:0a:
dc:b8:9c:cb:90:21:1b:e3:6c:e5:79:d3:df:02:1e:bc:7f:42:
e8:94:fd:d4:c4:4c:bc:24:08:98:e7:b9:e0:c7:62:e7:73:b1:
ff:d3:61:13:91:41:4d:0f:45:43:dd:19:c3:19:b7:dc:d1:dd:
fb:92:fc:cd:e7:12:9d:02:f8:97:6f:7b:8d:5d:c6:49:da:c1:
46:c7:e3:38:cf:da:22:b7:f3:76:23:12:54:f3:0a:80:dc:61:
a6:ee:d4:fb:9d:f9:28:e7:a7:e8:4f:db:4b:42:46:cb:c5:82:
b2:d2:0d:b2:c4:11:29:24:c2:3c:f6:96:4d:af:62:c9:38:ad:
6a:71:25:ce:57:03:45:23:f0:b5:12:78:30:a8:d0:ac:ea:56:
9c:e8:f5:de:7b:ef:89:72:24:ef:d6:62:a7:51:ea:f6:d0:ec:
54:b7:bd:e2:e5:f9:9f:d6:24:26:bc:20:be:40:27:b7:f1:7a:
ba:62:87:0d:b1:e8:e2:36:d1:51:b2:6b:87:6a:17:47:46:d2:
d7:a9:4e:46:65:87:50:ee:74:7a:14:fa:61:ae:52:de:2e:d7:
e3:c2:8a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:57:34 2025 by rpki-client