Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/h6otKYRuUBt_vdfdhIFGJr8S1Pg.roa
File: h6otKYRuUBt_vdfdhIFGJr8S1Pg.roa (raw, json)
Hash identifier: THv8EdRfQRH+WPRmtZGE3yYfd2AOnYvU/1tyDW2UAXo=
Subject key identifier: 87:AA:2D:29:84:6E:50:1B:7F:BD:D7:DD:84:81:46:26:BF:12:D4:F8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 02343F7F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/h6otKYRuUBt_vdfdhIFGJr8S1Pg.roa
Signing time: Fri 04 Mar 2022 12:21:44 +0000
ROA not before: Fri 04 Mar 2022 12:21:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30633
IP address blocks: 2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0e:f201::/32 maxlen: 32
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36978559 (0x2343f7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 4 12:21:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87aa2d29846e501b7fbdd7dd84814626bf12d4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:3c:78:17:5c:be:ef:6b:0a:68:46:5c:20:
7b:df:4f:fe:60:91:67:67:4c:12:44:5f:4a:6b:89:
2e:5c:c2:aa:e9:ee:45:e9:08:58:de:0c:ae:cf:29:
a0:d2:17:5a:46:27:0e:10:6f:d2:d2:1a:2f:23:36:
d1:79:7a:ac:bf:3f:77:c2:cf:d6:91:aa:a1:4c:81:
f1:9d:6a:22:fd:a3:f0:d9:41:17:7e:86:fc:11:f6:
78:97:26:55:0a:32:40:af:3e:22:5d:28:68:8b:4d:
e7:97:e8:60:2d:c8:2c:cd:74:95:14:56:26:3c:6e:
a2:d9:28:a4:6f:51:1a:f6:6b:e8:13:3f:8f:30:cc:
bb:54:45:cc:5f:4d:63:00:ad:72:5b:a3:72:69:d1:
9d:f3:15:29:c9:2e:36:ed:5f:bc:a1:9c:63:37:fd:
ce:41:a2:e1:0b:31:4e:a9:12:fd:7c:7c:5f:2f:6b:
dd:dd:3b:aa:86:86:77:c9:d6:3f:d4:5f:0e:95:20:
1d:ca:e6:68:50:bd:09:53:d2:0c:b6:99:7d:61:50:
e5:b7:a4:f1:39:9d:5d:fe:d2:16:31:be:10:c9:09:
0d:fc:60:83:d4:5c:fb:df:3f:07:69:bb:c2:2c:21:
c4:85:9d:05:4d:ba:a7:45:1c:e3:e4:db:52:cd:71:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AA:2D:29:84:6E:50:1B:7F:BD:D7:DD:84:81:46:26:BF:12:D4:F8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/h6otKYRuUBt_vdfdhIFGJr8S1Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f201::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
Signature Algorithm: sha256WithRSAEncryption
7e:00:87:ec:ff:32:af:9f:80:7f:ad:0e:e6:4b:2c:26:2e:39:
9f:2a:97:b8:de:5d:ec:92:ef:8b:9d:4f:6a:35:8c:67:90:28:
6e:2d:1e:1b:2a:69:84:96:f6:a9:c7:82:42:57:0e:cd:d6:bc:
46:ad:07:2e:01:d3:85:7f:56:9b:a1:6a:1e:38:3c:8a:28:3e:
d8:ad:3c:fd:42:5d:c0:da:89:f4:cf:69:91:cb:1e:c3:7d:12:
65:b7:e4:e6:19:82:66:7d:9e:02:33:91:fd:e6:cb:08:6c:d1:
a2:ef:f8:ec:73:ea:e6:57:76:f4:0b:c6:50:f1:b1:a8:fc:20:
47:f7:ee:9d:00:27:b8:96:a8:54:b4:bf:a1:ba:0c:e9:b0:7e:
ae:d8:02:f5:ca:1e:9f:d6:31:79:2b:2f:63:53:93:18:da:9f:
d4:29:79:41:82:21:4a:d7:fd:87:f9:67:cc:a4:1b:fc:ad:8b:
d2:89:e6:5a:3e:9d:ba:a0:79:9c:57:d8:37:7d:b1:c4:89:bc:
ca:51:d8:4e:05:4a:d4:5a:9f:be:09:a3:ef:f9:ef:31:0d:ae:
7d:a6:12:e4:d0:75:2c:de:a6:93:1d:55:48:9d:de:7b:09:a3:
78:56:a6:7e:91:4a:3c:62:bc:65:d9:c3:31:d2:e0:66:ef:c6:
34:73:1e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:33:19 2025 by rpki-client