Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bxVSWIRwiq8YOFyfa1YXMUcc7fk.roa
File: bxVSWIRwiq8YOFyfa1YXMUcc7fk.roa (raw, json)
Hash identifier: X5345R/SZMfXJZdVwCZQpud7kZUan4bzOpwaaylcZG0=
Subject key identifier: 6F:15:52:58:84:70:8A:AF:18:38:5C:9F:6B:56:17:31:47:1C:ED:F9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01882DD37E8F6508EC249937E93ABDF62A95
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bxVSWIRwiq8YOFyfa1YXMUcc7fk.roa
Signing time: Thu 18 May 2023 07:46:55 +0000
ROA not before: Thu 18 May 2023 07:46:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205544
IP address blocks: 2a0f:e440::/29 maxlen: 29
2a0f:e6c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2d:d3:7e:8f:65:08:ec:24:99:37:e9:3a:bd:f6:2a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 18 07:46:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f15525884708aaf18385c9f6b561731471cedf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:6f:f4:3f:1b:7e:4e:7b:a4:d2:d0:ca:61:
fa:a7:0e:36:03:1a:fe:e3:c3:40:9b:89:c5:7f:06:
43:a8:cd:d8:3d:26:20:07:71:3a:8e:bb:52:0c:1f:
85:ef:11:5b:82:38:be:22:68:ca:ee:79:2c:b1:f5:
6a:67:4e:df:40:87:b9:b0:47:2f:41:89:fc:65:a8:
4c:bf:ae:53:d7:b2:3c:d8:10:89:7c:a4:bd:60:8e:
85:e8:00:cb:bf:8e:4e:63:8a:7a:99:ab:c6:57:ea:
18:6a:30:1d:c7:c4:dc:82:d9:28:c1:57:e0:a6:fc:
3b:7f:e1:e7:f1:5f:fc:1e:17:82:e7:3c:53:78:46:
07:26:ad:63:86:55:e9:b5:11:9f:25:3c:e8:f5:43:
66:d9:73:d0:e9:47:02:0c:b0:41:72:52:33:d0:ca:
fe:38:a0:28:76:0c:ed:e3:94:57:49:89:fb:5e:47:
4b:62:9d:86:0c:96:1a:4d:b9:b8:39:53:a0:4c:b8:
ee:01:72:b9:14:62:51:ba:8b:20:10:98:36:9b:80:
67:89:3d:9e:e1:01:81:50:7f:39:fb:7e:b4:f4:ff:
19:79:2b:34:8e:e9:61:79:a5:97:53:74:f4:2c:ac:
bc:56:11:08:bb:37:81:19:e8:0d:c8:fb:eb:71:4c:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:15:52:58:84:70:8A:AF:18:38:5C:9F:6B:56:17:31:47:1C:ED:F9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bxVSWIRwiq8YOFyfa1YXMUcc7fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e440::/29
2a0f:e6c0::/32
Signature Algorithm: sha256WithRSAEncryption
b9:0c:32:04:b4:dc:d7:31:22:de:f5:6e:2e:22:3a:8c:79:24:
b1:47:e7:46:f2:e2:dc:27:e2:00:d1:b3:27:53:31:70:13:7f:
33:e1:57:54:b3:7c:c7:11:e6:24:cc:fe:70:cb:3e:a4:17:4e:
a5:6b:ef:3b:5f:d3:d8:c3:fb:b1:89:d1:db:b2:c9:05:cf:d7:
e3:9e:d0:a1:cc:85:3a:3f:b0:61:6e:23:ec:4b:43:59:d4:1e:
3f:08:fc:f3:2f:b2:e0:cc:cd:fc:19:1b:86:b2:58:ef:aa:13:
e5:57:5d:6c:67:a3:03:9e:27:d4:b9:59:1d:78:04:69:b6:01:
cd:d7:a7:50:3b:cc:33:05:a5:f9:5f:fa:bb:56:03:52:8a:50:
5a:e0:d4:25:2b:3d:92:f4:03:52:b2:f2:a7:36:2b:bf:cc:78:
0e:eb:44:9e:d5:6d:b3:d9:4c:67:87:68:8d:27:db:9a:10:37:
a6:d1:e4:74:d8:1c:e7:e0:39:c6:55:65:7d:85:c8:ba:92:ed:
5c:58:a3:b1:38:d0:fd:c1:8b:55:f8:96:4d:bb:60:f6:fd:48:
0a:52:5b:1b:f2:4a:6e:36:3e:ae:57:a5:c6:0a:49:29:bd:34:
ca:10:05:6e:08:ef:04:c7:7c:4c:cc:ca:40:3f:c7:ab:2a:5f:
82:bc:7f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:26 2025 by rpki-client