Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/d9m7qY4JwdmIjzQC5vOlzZD6trU.roa
File: d9m7qY4JwdmIjzQC5vOlzZD6trU.roa (raw, json)
Hash identifier: A7LaQ7jdF/n15Dk1GGxD7khMdjxmV6UC0kNkaL7sisM=
Subject key identifier: 77:D9:BB:A9:8E:09:C1:D9:88:8F:34:02:E6:F3:A5:CD:90:FA:B6:B5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0186B24C2783AE03BC6104018B47675960FA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/d9m7qY4JwdmIjzQC5vOlzZD6trU.roa
Signing time: Sun 05 Mar 2023 15:03:00 +0000
ROA not before: Sun 05 Mar 2023 15:03:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 2a0f:8100::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b2:4c:27:83:ae:03:bc:61:04:01:8b:47:67:59:60:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 5 15:03:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77d9bba98e09c1d9888f3402e6f3a5cd90fab6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:88:94:d5:21:5b:fc:95:7c:20:43:80:ac:
f4:eb:cd:97:56:f3:56:55:35:49:4a:8e:9d:f3:86:
a5:24:0d:4c:9e:e1:de:c8:ed:3a:35:09:68:0e:74:
a3:10:82:65:33:14:bc:1b:02:96:90:0e:a6:2d:72:
49:3d:24:e1:81:57:7f:09:4b:b7:e8:3f:1d:25:63:
f9:81:3e:0b:76:e3:56:d1:77:8f:2a:26:0d:ff:5e:
42:7a:70:7e:3a:5b:ab:d2:db:b9:cc:2a:6a:11:c1:
37:6b:8e:be:17:25:b1:df:c4:7b:16:22:d0:3e:1d:
56:bc:81:6c:ce:8d:95:34:f9:05:e3:ef:7f:7f:f9:
ca:05:c3:36:35:1c:38:f3:4a:5f:73:0f:1f:44:73:
19:03:37:29:f1:1a:08:a8:6c:d8:4b:fd:6c:80:bb:
25:bc:77:09:70:a4:a8:dc:a1:6c:9c:7a:cf:38:86:
1f:ce:6d:00:ae:05:d2:d1:29:50:b8:fb:ca:f8:d7:
92:a3:ec:6a:34:f2:ab:f2:82:be:c0:df:ca:09:6d:
f9:63:21:a1:38:dd:fa:54:c2:c9:35:d7:a4:a7:09:
cf:4f:b3:ff:02:d9:6e:63:f7:1a:f9:96:29:ef:30:
52:92:6e:4b:4b:6c:5a:39:c8:ab:8d:8e:38:d3:76:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D9:BB:A9:8E:09:C1:D9:88:8F:34:02:E6:F3:A5:CD:90:FA:B6:B5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/d9m7qY4JwdmIjzQC5vOlzZD6trU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:8100::/29
Signature Algorithm: sha256WithRSAEncryption
0c:fb:d2:b3:e2:3d:7e:d7:af:a1:8b:58:6d:7f:11:31:88:f3:
68:dd:40:f9:39:41:55:47:4a:c4:33:3e:f3:e5:a3:4e:c7:1c:
07:71:75:9d:67:c1:f4:ff:4e:7d:d6:83:32:a9:c5:3d:7b:1c:
20:ac:5f:99:ce:e0:0a:13:08:43:bf:bf:12:84:9a:2a:90:37:
29:e6:70:37:1d:35:f1:92:14:7f:ee:9d:d0:94:94:66:dd:cd:
cd:c9:46:72:72:30:ba:7d:6f:ef:83:4b:4e:62:2e:39:21:d1:
be:96:88:68:6d:8c:25:4a:e2:e8:54:41:9b:e3:64:e7:dd:0e:
1a:36:26:83:2f:15:e2:95:ac:2f:ac:38:4b:fd:22:1c:ac:b1:
b7:d0:f9:8f:dd:61:d7:11:e1:33:75:4d:3d:c9:e2:23:2d:7d:
51:a3:a8:2f:e9:ca:66:b2:76:17:b1:5d:20:f3:f6:8e:04:89:
9a:e9:62:6c:9d:06:e9:9c:11:81:91:83:5f:41:d9:7d:fc:c2:
fe:e8:83:ea:c2:99:5d:29:ff:02:1a:27:a2:3e:0d:ab:8b:5b:
58:80:45:3b:d8:3d:75:1e:d4:d8:28:63:d8:de:e7:55:f9:ea:
27:7a:3e:57:1f:ab:e7:e9:3d:36:e0:33:75:17:8c:ab:e9:77:
3f:d5:48:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:10:00 2025 by rpki-client