Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hXEPBLrzn5VocDHWvaEPnTquzSk.roa
File: hXEPBLrzn5VocDHWvaEPnTquzSk.roa (raw, json)
Hash identifier: uRdoe3ylziZ9JjHfBCcHGJ+2X05Ia2tof+2PLdPVYQo=
Subject key identifier: 85:71:0F:04:BA:F3:9F:95:68:70:31:D6:BD:A1:0F:9D:3A:AE:CD:29
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0310B578
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hXEPBLrzn5VocDHWvaEPnTquzSk.roa
Signing time: Sun 08 May 2022 15:35:06 +0000
ROA not before: Sun 08 May 2022 15:35:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 2a0e:c780::/29 maxlen: 29
2a0f:39c7::/32 maxlen: 32
2a12:d6c0::/29 maxlen: 29
2a0f:39c1::/32 maxlen: 32
2a0f:39c2::/32 maxlen: 32
2a0f:39c5::/32 maxlen: 32
2a0f:e840::/32 maxlen: 32
2a0f:39c6::/32 maxlen: 32
2a0f:39c4::/32 maxlen: 32
2a0f:39c3::/32 maxlen: 32
2a0f:39c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51426680 (0x310b578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 8 15:35:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85710f04baf39f95687031d6bda10f9d3aaecd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:bb:fb:f7:58:43:8c:9f:b8:44:36:c4:bf:
53:37:68:b8:4d:83:ab:a0:bf:9e:38:ed:38:d0:91:
2a:e7:64:4f:2c:84:9d:5d:13:ec:e7:b5:35:d2:0a:
9d:65:16:85:e8:34:b3:6e:ac:89:7d:31:9d:73:a5:
f0:4a:9f:ef:c6:20:ce:43:6f:5a:28:50:76:06:16:
8a:c0:5e:bf:7c:72:fc:74:5a:cd:33:d5:5c:4a:3b:
19:30:29:dd:00:59:80:d3:65:68:87:ac:9c:82:47:
b6:f3:d2:2b:69:73:2c:a3:4e:db:df:47:05:3d:67:
19:b4:3a:b1:9a:b3:cb:19:2b:62:1d:a6:f4:00:b1:
ef:16:6e:4f:04:9f:54:79:97:d5:4c:c2:71:a6:96:
e8:1d:98:31:8d:a8:56:9e:a1:58:84:33:7d:c5:4b:
6b:1c:01:a9:f6:c9:2a:9d:09:5d:69:ab:fb:58:08:
93:b9:f4:26:c9:a7:25:c2:f2:07:b4:6e:dd:a8:56:
4f:15:e6:23:ef:67:de:a4:3c:a9:a7:ea:b0:c6:7b:
b4:92:39:7e:38:55:1a:7c:ab:7a:5c:2a:9a:9b:a3:
7e:a2:fc:c1:c2:e2:ea:a3:b5:80:51:75:98:da:e3:
f2:ba:4c:8f:61:38:53:51:21:80:e5:ac:d5:3a:81:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:71:0F:04:BA:F3:9F:95:68:70:31:D6:BD:A1:0F:9D:3A:AE:CD:29
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hXEPBLrzn5VocDHWvaEPnTquzSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:c780::/29
2a0f:39c0::/29
2a0f:e840::/32
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
53:6e:bc:d0:f4:56:b3:ed:1b:df:9d:3c:31:1f:79:98:b1:2c:
49:b2:53:ff:4d:30:ef:eb:81:f4:3e:6c:08:1b:d1:91:14:81:
95:17:d6:d1:0a:8b:92:97:d1:fe:70:c2:9b:6c:99:5a:8c:78:
b7:0b:ba:c5:23:7d:ab:2d:00:0d:8f:f1:3c:99:6d:b8:88:5a:
83:fc:7f:c1:d3:1d:1d:d2:c9:69:ef:ba:d5:5e:45:4c:86:47:
19:c4:3f:49:03:f5:2f:94:76:fa:f2:cd:a8:16:56:2c:b6:5e:
ec:60:cf:c8:07:8c:60:65:be:bf:40:56:0c:bf:2b:47:43:0b:
58:16:ed:db:b7:01:53:eb:9f:3e:61:19:88:a7:3e:fa:f6:8c:
e1:b9:f5:73:58:b8:da:c5:e1:54:6f:11:77:6c:f0:30:46:af:
cb:af:1c:40:c4:c9:f9:34:2d:75:5b:e7:f7:b2:d8:26:c7:25:
09:6a:4b:bc:3e:e3:3e:59:60:ef:de:ad:5e:ce:dc:c0:d5:01:
bf:fb:3d:db:60:2a:39:3c:bb:3a:62:0b:e4:df:82:4b:e7:0f:
cc:24:67:34:15:a8:25:83:9c:b7:09:ce:a5:df:57:9b:aa:7a:
cc:a4:ea:a3:6e:04:54:6e:30:e9:7f:60:60:96:3c:5d:0a:c9:
e0:ed:d0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:37 2025 by rpki-client