Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gxtXs4RyoeegbGIXvrZf9lKKoDc.roa
File: gxtXs4RyoeegbGIXvrZf9lKKoDc.roa (raw, json)
Hash identifier: WKrl0+/zAE/FFgf31IkvsTzKiXkPIab2THVm3snjo5g=
Subject key identifier: 83:1B:57:B3:84:72:A1:E7:A0:6C:62:17:BE:B6:5F:F6:52:8A:A0:37
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0186302F28DF77508A0805D18684E2F27908
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gxtXs4RyoeegbGIXvrZf9lKKoDc.roa
Signing time: Wed 08 Feb 2023 08:40:42 +0000
ROA not before: Wed 08 Feb 2023 08:40:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8772
IP address blocks: 2a0a:1400::/29 maxlen: 29
2a0f:2100::/29 maxlen: 29
2a0c:9240::/29 maxlen: 29
2a0f:8300::/29 maxlen: 29
2a0f:8100::/29 maxlen: 29
2a0f:dd40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:30:2f:28:df:77:50:8a:08:05:d1:86:84:e2:f2:79:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 8 08:40:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=831b57b38472a1e7a06c6217beb65ff6528aa037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:17:ee:d9:d9:43:85:e1:a7:b3:51:bb:66:
fd:b0:83:19:25:22:ea:84:66:86:58:9b:b2:e5:25:
7e:84:5a:26:c7:dc:75:f7:19:e9:91:0e:17:e5:51:
87:d4:57:7e:f6:33:69:ee:fc:d1:75:1b:f6:4b:b8:
7e:13:32:39:03:3c:33:e2:ca:34:64:a8:df:f2:2f:
9b:d5:0a:59:bd:4e:0f:0b:b6:00:31:92:c6:7c:d1:
ed:88:58:80:82:65:e8:da:8c:98:db:eb:6b:3c:cf:
c7:90:f0:15:a1:a5:50:8d:75:d9:eb:cb:cc:c9:a8:
22:c8:3c:58:e2:1f:d0:a6:bf:e5:f1:0f:17:51:37:
bc:6d:ba:f4:3a:e7:5d:4e:af:4e:da:a1:65:23:c9:
9f:03:e0:e8:70:df:6b:6e:e8:ee:59:36:65:27:f5:
7e:7c:c8:0a:9e:40:d2:85:0f:07:f1:31:e1:22:6a:
89:2e:3e:dd:21:e0:68:0e:be:ab:1a:bd:79:0f:b3:
ec:46:93:38:b7:4b:87:05:55:b7:f4:4c:d4:13:e8:
e3:d2:f5:64:1e:93:01:8b:15:c9:10:1b:e2:50:c7:
8f:14:92:ef:78:35:a1:48:d6:bd:28:eb:72:2a:82:
f9:88:14:c2:81:b8:05:ed:76:4d:6c:73:98:b9:4a:
0e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1B:57:B3:84:72:A1:E7:A0:6C:62:17:BE:B6:5F:F6:52:8A:A0:37
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gxtXs4RyoeegbGIXvrZf9lKKoDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:1400::/29
2a0c:9240::/29
2a0f:2100::/29
2a0f:8100::/29
2a0f:8300::/29
2a0f:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
39:50:28:5f:2d:92:4a:3e:cf:80:a3:d4:91:70:bd:bb:f5:fb:
ea:e5:c8:e0:b6:36:6e:d1:c0:01:d0:31:5e:06:e9:a1:7b:22:
7d:08:1c:61:eb:5a:0d:df:60:63:2b:fd:1d:4a:f8:5d:c3:1a:
63:ec:5d:f4:42:8c:1d:ac:c9:dd:d0:79:69:fa:6c:ed:26:7f:
51:69:cc:b7:ea:f5:90:b3:95:e1:1c:f9:78:fe:25:77:e6:c5:
30:4a:b2:67:d3:36:9b:ef:99:0d:8b:31:fc:5a:90:46:09:00:
c6:ee:b8:14:e3:c9:1f:da:44:e8:78:0a:ce:ef:be:d7:15:e4:
89:a4:6f:97:b1:30:6e:5f:5c:e3:c6:aa:83:cd:54:a2:55:42:
b9:99:54:9e:f5:3b:5e:f4:e7:ab:e8:52:94:36:af:b5:c1:32:
d0:6d:08:04:76:19:6b:ed:bd:0f:30:0b:60:96:50:bd:b3:32:
26:5c:61:dd:c4:92:74:9f:03:8c:c8:f5:ee:62:7c:95:f6:32:
72:ba:ed:aa:34:72:53:ba:6d:be:b2:36:8a:9c:68:c9:31:b6:
3c:f9:a2:25:e2:e4:5c:e4:c3:4f:63:64:54:10:43:c7:04:f4:
64:66:c8:a6:51:1a:79:af:29:5e:a1:87:99:80:0f:57:06:86:
a8:c2:48:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:46 2025 by rpki-client