Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dmt7bjSiPmw93OkN-J-WoliM6aI.roa
File: dmt7bjSiPmw93OkN-J-WoliM6aI.roa (raw, json)
Hash identifier: qSLMY86dPUwlRqSMztGQILPWY+ZtdeBPx2iVskpJHp4=
Subject key identifier: 76:6B:7B:6E:34:A2:3E:6C:3D:DC:E9:0D:F8:9F:96:A2:58:8C:E9:A2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0185C3DF268042833FB1C0953F4E7FA2DB5D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dmt7bjSiPmw93OkN-J-WoliM6aI.roa
Signing time: Wed 18 Jan 2023 07:54:19 +0000
ROA not before: Wed 18 Jan 2023 07:54:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8772
IP address blocks: 2a0a:1400::/29 maxlen: 29
2a0f:e040::/29 maxlen: 29
2a0f:2100::/29 maxlen: 29
2a0c:9240::/29 maxlen: 29
2a0f:e6c0::/29 maxlen: 29
2a0f:8100::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c3:df:26:80:42:83:3f:b1:c0:95:3f:4e:7f:a2:db:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 18 07:54:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=766b7b6e34a23e6c3ddce90df89f96a2588ce9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a3:71:dc:f5:19:47:a7:db:23:b7:3a:b8:fc:
6a:21:90:05:c9:93:41:34:0d:72:2a:81:09:c1:b5:
3d:ca:61:73:76:ee:16:66:03:3b:5c:38:42:52:11:
76:e7:1d:e1:d1:5f:cc:ed:5c:70:11:f4:a7:26:cb:
a2:f5:88:d6:c2:20:0a:dd:0e:a3:4a:49:d1:58:90:
15:42:29:3e:1c:73:f5:1c:bd:c9:74:4a:dd:e8:c9:
19:80:5a:7d:82:95:2b:c4:a5:df:59:5a:01:e9:49:
e8:c2:af:74:77:92:12:f5:df:8b:22:5c:26:62:19:
21:07:95:e7:8a:3b:ce:e6:22:04:ce:94:76:86:0c:
bc:ef:ae:38:1d:36:12:6f:d2:34:4f:32:ee:b4:e0:
54:a4:90:f8:a5:e7:02:fa:52:60:09:70:a9:10:82:
94:1c:87:3e:95:fc:40:23:de:70:65:f9:48:b8:0e:
a0:d2:1e:ca:55:7f:4e:67:39:3d:e4:94:76:c5:53:
4d:a8:69:f9:fe:ac:87:12:81:9a:27:8a:e7:67:71:
7f:fa:d4:73:2b:ee:10:b2:32:fa:bc:48:8d:d2:24:
11:41:dc:28:21:da:f0:c6:74:af:f6:61:c3:45:35:
de:94:09:42:38:fe:86:90:67:a0:f1:51:4f:b3:1d:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6B:7B:6E:34:A2:3E:6C:3D:DC:E9:0D:F8:9F:96:A2:58:8C:E9:A2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dmt7bjSiPmw93OkN-J-WoliM6aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:1400::/29
2a0c:9240::/29
2a0f:2100::/29
2a0f:8100::/29
2a0f:e040::/29
2a0f:e6c0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:f6:cb:50:b3:8b:12:dd:a7:95:aa:6d:2d:83:26:39:ca:42:
f1:55:82:8b:87:fe:d8:36:f2:23:d9:68:50:01:14:44:33:b6:
8d:41:f5:86:3e:17:2f:54:31:90:3c:65:24:7f:88:22:f9:97:
e8:df:80:f9:87:b4:b2:a5:50:de:03:81:d0:56:85:f4:ab:0c:
c5:5f:e5:fa:57:69:b8:73:1e:90:ab:82:37:68:eb:db:6b:01:
6f:8d:98:80:dc:2f:33:5f:07:18:c2:e4:90:17:55:61:03:c4:
3d:8b:cb:11:c9:9d:ed:c6:9e:b0:7e:b2:4b:ac:63:3e:23:80:
0d:1b:39:44:6a:0b:b9:76:50:4a:ab:a2:54:84:98:62:d7:67:
85:69:00:f7:0a:4b:99:2f:32:44:d9:b2:23:34:dd:5f:e1:cd:
24:99:37:53:a3:20:22:e1:e7:f7:b9:85:1b:70:de:db:d3:4e:
90:7e:78:de:76:f5:83:2a:cc:0f:87:9f:5d:44:c6:d0:ee:00:
f9:ac:77:d0:d0:fd:0f:96:bf:0a:b4:a1:67:a9:8a:92:26:8b:
76:31:04:eb:7b:ac:d7:26:cf:1f:c1:c0:0e:df:ed:e0:db:d9:
87:99:58:d4:f3:a6:5e:1b:b0:68:71:d6:ed:64:19:88:b2:ae:
18:c6:30:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:59:04 2025 by rpki-client