Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gYOisrXMhb9ztyPhwC9pC24LoIw.roa
File: gYOisrXMhb9ztyPhwC9pC24LoIw.roa (raw, json)
Hash identifier: trU0ft9nUruB/0PIssFhklCB/+mJjPFzu635LaHVBgY=
Subject key identifier: 81:83:A2:B2:B5:CC:85:BF:73:B7:23:E1:C0:2F:69:0B:6E:0B:A0:8C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018C39575954B4A336C0084D1382027466D9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gYOisrXMhb9ztyPhwC9pC24LoIw.roa
Signing time: Tue 05 Dec 2023 09:37:54 +0000
ROA not before: Tue 05 Dec 2023 09:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197992
IP address blocks: 2a0f:bc00::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a06:b5c0::/29 maxlen: 29
2a13:7d80::/29 maxlen: 29
2a0a:2340::/29 maxlen: 29
2a0f:7f00::/29 maxlen: 29
2a13:9380::/29 maxlen: 29
2a0e:5a80::/29 maxlen: 29
2a13:d300::/29 maxlen: 29
2a07:95c0::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a07:a300::/29 maxlen: 29
2a12:d540::/29 maxlen: 29
2a06:3bc0::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a06:bf40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:57:59:54:b4:a3:36:c0:08:4d:13:82:02:74:66:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 5 09:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8183a2b2b5cc85bf73b723e1c02f690b6e0ba08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:84:2a:11:35:7a:dc:79:db:b9:1e:93:f0:27:
22:a4:c5:e2:3f:b7:2c:ad:ba:ac:58:05:40:f7:1e:
f3:51:17:a6:76:de:f8:0b:a9:4a:c7:e5:1f:ca:61:
a5:87:19:61:b2:82:24:b1:e0:ab:d3:21:93:d4:3c:
49:d2:00:38:1f:d1:5d:ea:67:45:79:92:18:93:b8:
c9:e9:a0:a5:1a:c9:e6:ff:03:dd:4e:12:30:3f:5a:
6d:61:6d:19:6a:cd:99:33:18:29:27:e0:52:68:d6:
a8:97:72:08:24:8f:6f:49:bb:9d:3c:e0:bf:e8:94:
eb:56:43:8e:f0:83:21:a3:aa:8f:42:f0:8c:5a:32:
e3:0a:57:c0:df:d6:65:6a:91:7c:57:a0:6c:88:1d:
db:5c:c2:93:52:4f:3c:37:eb:5c:bc:98:62:2a:5e:
b0:b7:3e:7e:79:26:cb:10:22:3a:56:46:30:8b:db:
49:e9:ae:ac:70:ef:c2:65:b2:06:21:62:e0:e8:6c:
ae:e6:2e:bc:15:74:f0:c7:89:6e:fd:c4:48:cc:ce:
85:57:3e:7e:2e:02:3b:66:5f:fe:e1:85:12:65:bc:
1a:ff:c1:e0:25:2d:6e:3c:fb:7f:29:64:6f:0f:6b:
20:f3:e6:62:77:17:b3:21:08:29:21:ea:6a:23:c4:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:83:A2:B2:B5:CC:85:BF:73:B7:23:E1:C0:2F:69:0B:6E:0B:A0:8C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gYOisrXMhb9ztyPhwC9pC24LoIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:3bc0::/29
2a06:b5c0::/29
2a06:bf40::/29
2a06:dfc0::/29
2a07:95c0::/29
2a07:a300::/29
2a0a:2340::/29
2a0e:5a80::/29
2a0f:2300::/29
2a0f:7f00::/29
2a0f:bc00::/29
2a12:d540::/29
2a13:200::/29
2a13:7d80::/29
2a13:9380::/29
2a13:d300::/29
Signature Algorithm: sha256WithRSAEncryption
96:42:bb:64:a9:b5:04:51:2e:1c:bc:ff:a2:4f:7b:86:bf:3d:
dc:fd:fe:95:58:17:58:57:3a:d0:73:e0:77:86:85:c2:71:e3:
98:9e:22:b4:05:1d:17:63:e1:fa:a0:c1:f6:b8:6d:8b:7b:5d:
df:15:ed:2d:f5:37:12:ef:12:e9:e2:b3:51:3a:87:3d:d3:41:
e0:a5:5e:46:57:14:b8:ae:51:90:3e:a3:70:e1:41:3b:6e:3b:
41:76:0c:9a:0b:a5:0d:de:3f:54:e5:ed:b6:c5:63:43:33:f6:
a2:c9:55:c8:6d:8e:d6:d8:a9:a2:0c:de:5d:8a:ea:bf:92:1f:
98:cb:e5:4f:3c:94:14:74:3d:65:49:ea:5c:0d:fe:1e:ac:fa:
b8:6a:0d:d5:92:28:d7:e8:53:7e:cd:dd:06:56:a1:1a:31:5f:
77:76:11:8a:1a:e6:c9:38:04:1a:52:5a:b4:de:ca:56:d5:ad:
45:bf:70:e6:9c:84:ca:fe:5d:b2:af:da:31:84:21:f7:f2:82:
aa:a3:fd:59:f2:b7:67:01:b4:ea:ef:e6:71:30:90:6e:ce:bd:
20:08:e7:00:be:d5:82:10:75:86:dd:e5:3f:33:27:4d:2e:3d:
9c:44:d4:7f:36:ef:9f:3f:b4:b6:0b:90:13:fb:6a:7a:a6:ff:
d2:65:61:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:05 2025 by rpki-client