Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_93PIhEcaBx2CnRZCLyOPyRoypg.roa
File: _93PIhEcaBx2CnRZCLyOPyRoypg.roa (raw, json)
Hash identifier: 8By/pTSbnGVjcc+7gV5Ou9DkIBbSdFFISykERGGpW9o=
Subject key identifier: FF:DD:CF:22:11:1C:68:1C:76:0A:74:59:08:BC:8E:3F:24:68:CA:98
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018C79CB98A67D81B9286595357584D24CA1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_93PIhEcaBx2CnRZCLyOPyRoypg.roa
Signing time: Sun 17 Dec 2023 22:00:35 +0000
ROA not before: Sun 17 Dec 2023 22:00:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 64.226.156.0/22 maxlen: 22
64.226.54.0/23 maxlen: 23
2a13:9580::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:79:cb:98:a6:7d:81:b9:28:65:95:35:75:84:d2:4c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 17 22:00:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffddcf22111c681c760a745908bc8e3f2468ca98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:aa:c8:72:5d:5f:de:2b:83:ab:9b:5f:23:
fa:93:1e:bf:bb:9a:3d:a4:6c:b9:23:e1:46:87:ff:
b6:15:fb:13:74:de:df:f0:07:df:bc:dc:ec:67:63:
76:33:2f:96:3a:15:7a:d6:63:04:a7:16:f6:51:93:
af:ce:23:1a:d7:9d:c0:92:3f:32:78:a7:cb:ef:d8:
b0:c3:64:ff:95:7d:12:8c:d6:f8:c1:6c:6d:0b:37:
5c:b8:64:11:6d:58:ce:29:8f:a9:a0:16:52:96:6f:
e2:b7:7c:61:2a:30:60:87:58:d0:f5:35:05:83:87:
40:59:9f:9c:ae:93:31:e3:e8:28:dd:ab:8a:18:0e:
c3:3c:98:81:ac:61:9d:b4:82:c8:de:47:d8:9c:05:
64:7f:8b:87:b8:45:77:1b:12:4f:49:fc:14:9b:8d:
59:8d:7e:b6:d3:de:2a:ab:6f:01:52:f6:68:8e:f3:
93:2e:61:16:11:04:6f:f9:d3:39:e6:ea:97:c6:fb:
82:2e:1c:95:21:db:a9:3c:ef:37:6f:fd:39:98:2a:
e6:92:64:46:c6:07:61:5a:18:75:60:2d:24:23:51:
e9:16:f5:00:33:d1:95:49:71:9b:05:76:ed:16:6a:
38:12:57:62:77:1c:21:56:d3:65:60:e3:1b:93:19:
5f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DD:CF:22:11:1C:68:1C:76:0A:74:59:08:BC:8E:3F:24:68:CA:98
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_93PIhEcaBx2CnRZCLyOPyRoypg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.54.0/23
64.226.156.0/22
IPv6:
2a13:9580::/29
Signature Algorithm: sha256WithRSAEncryption
b4:00:d3:58:67:2f:8b:a0:15:38:ff:9c:5e:cd:64:da:13:2c:
3f:27:6b:2e:3e:91:b8:fa:33:71:ae:71:a8:d3:97:32:d5:b1:
59:e0:0f:37:16:46:17:4f:5a:e5:ee:55:a0:0e:11:c6:62:ab:
ad:8f:a8:c2:4e:4c:4d:68:a5:0d:f8:49:a6:cd:9c:89:22:d5:
fb:2d:7f:17:68:1d:c5:f0:fe:ad:a0:43:db:1a:d6:9c:ca:ca:
f4:d1:ee:4b:71:b5:8f:b9:82:03:3b:46:3f:a5:b3:1b:41:97:
d7:f9:ec:3e:c8:31:ec:e2:17:43:75:57:eb:45:59:d0:b6:cd:
f6:28:bd:df:13:45:fb:e6:de:09:f0:e2:18:6c:f9:a4:4e:b0:
05:1a:19:15:de:66:80:3c:75:2e:c6:85:67:2e:51:50:39:5b:
77:5e:69:14:0e:53:aa:d5:55:18:30:6b:51:9f:82:44:b3:88:
0e:f1:1b:60:d2:18:c2:93:4d:77:ed:15:ec:84:9d:f3:c2:df:
de:11:4d:aa:8d:9d:8d:e2:5e:c2:a5:cc:2b:61:98:bd:8f:50:
b2:da:b6:68:c7:60:16:8d:a2:b3:54:b2:b9:3c:f5:34:86:90:
31:4c:71:f1:b5:d6:4c:fc:5c:43:b1:ba:00:b7:ca:cf:71:a8:
8b:f6:be:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:10 2025 by rpki-client