Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fNEUo154ZUZY7p030ARYG8-nTs4.roa
File: fNEUo154ZUZY7p030ARYG8-nTs4.roa (raw, json)
Hash identifier: oJp/pa9KWf10RTIbYq/E6ZSnbYwRReEnZ0wYmu4l7do=
Subject key identifier: 7C:D1:14:A3:5E:78:65:46:58:EE:9D:37:D0:04:58:1B:CF:A7:4E:CE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018BF01AAB7B4E4CD6CEFCCBEF25754315E8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fNEUo154ZUZY7p030ARYG8-nTs4.roa
Signing time: Tue 21 Nov 2023 04:19:21 +0000
ROA not before: Tue 21 Nov 2023 04:19:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198571
IP address blocks: 2a0c:9240::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:1a:ab:7b:4e:4c:d6:ce:fc:cb:ef:25:75:43:15:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 21 04:19:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cd114a35e78654658ee9d37d004581bcfa74ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:18:78:a3:a9:66:4a:c4:4e:62:96:1c:24:2b:
b2:f8:97:8e:30:62:1e:de:60:85:1b:40:42:10:a8:
0a:e5:0c:e4:c5:68:be:6c:59:70:19:e8:75:0c:ed:
22:46:85:43:ea:73:66:b3:e6:a1:99:64:62:b2:f9:
3a:9a:4a:f5:a8:c5:c3:a7:28:83:e6:21:f3:28:72:
f5:c7:3d:bb:de:3b:8d:c1:d0:5b:3c:44:35:b8:0d:
00:5e:37:cd:12:59:07:35:77:a5:9d:a8:ce:5b:dc:
4d:e9:c6:7f:ee:a5:94:4c:e1:67:19:01:23:77:d8:
aa:ff:61:16:46:c1:5a:30:de:b7:85:28:b8:30:bb:
d6:8b:c6:12:3f:85:49:74:8d:f9:36:55:0b:81:65:
f9:53:f5:3f:1c:7f:d2:0c:42:45:4b:88:32:f8:b9:
98:79:bc:58:16:4e:4d:fc:4e:1a:3c:64:40:16:9d:
33:da:62:86:28:69:33:9b:5a:43:d1:00:80:05:bb:
cf:05:88:0c:a0:c8:20:05:8a:9a:9b:ab:88:92:cd:
04:87:5f:77:c6:f5:0e:bb:00:c3:c1:b6:6d:8e:d3:
ba:74:c5:be:5b:91:02:4a:80:a1:76:fa:6d:cc:03:
9f:80:31:6c:77:4c:00:8e:79:e2:db:83:d3:89:6d:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D1:14:A3:5E:78:65:46:58:EE:9D:37:D0:04:58:1B:CF:A7:4E:CE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fNEUo154ZUZY7p030ARYG8-nTs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9240::/29
Signature Algorithm: sha256WithRSAEncryption
15:d3:b0:f5:e9:c1:cf:0e:ae:fc:f7:49:cb:f1:ba:3e:9e:0f:
c9:04:d9:52:22:db:da:de:cc:b4:1b:3e:f5:6c:db:72:e6:e8:
d2:81:c7:70:43:37:c8:52:20:ef:bd:c2:3f:e9:ab:4e:ae:00:
b9:30:da:92:61:30:e3:01:48:0d:10:eb:af:a1:f8:89:9b:13:
3b:4e:12:59:39:cd:27:8e:cf:7f:53:9d:c5:5c:a7:90:6c:a9:
e9:c3:51:fe:b3:24:2e:62:9d:32:97:ea:17:b7:af:35:84:d7:
e6:51:76:c1:81:c8:dd:7d:b8:39:cf:ff:96:23:4f:95:99:d4:
39:0a:c4:75:8a:18:c1:58:6c:bc:8e:bb:02:2c:e5:1b:3f:ab:
7c:1c:b5:c5:23:f4:57:53:8f:62:94:9d:fd:73:b6:dc:0d:46:
bc:7e:ca:df:e6:ce:d5:98:a0:88:7d:47:4e:3e:e9:29:ff:1b:
40:5c:d9:0d:aa:b0:f2:76:f3:ad:ce:fe:f7:b1:60:c5:06:82:
f7:d2:c8:d1:0c:53:52:49:a1:b4:d6:47:57:94:82:e1:4f:29:
97:fb:80:84:06:95:a5:42:4f:98:6c:77:40:b0:c3:a0:19:e1:
32:1b:df:d7:4f:53:e8:29:c3:93:0b:b3:44:ad:5e:1b:3e:72:
7e:94:0a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:46 2025 by rpki-client