Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/j9d2HOaAEwYQ5HKy-Jpx6baMtbs.roa
File: j9d2HOaAEwYQ5HKy-Jpx6baMtbs.roa (raw, json)
Hash identifier: tQNbCOVp5ngUac1qnKzEHQkIn4YaIAycoC+PPLWI2cI=
Subject key identifier: 8F:D7:76:1C:E6:80:13:06:10:E4:72:B2:F8:9A:71:E9:B6:8C:B5:BB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018533F6C05FEE3A4D04137988A8F2CA7D48
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/j9d2HOaAEwYQ5HKy-Jpx6baMtbs.roa
Signing time: Wed 21 Dec 2022 09:14:47 +0000
ROA not before: Wed 21 Dec 2022 09:14:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8772
IP address blocks: 2a0f:e7c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:33:f6:c0:5f:ee:3a:4d:04:13:79:88:a8:f2:ca:7d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 21 09:14:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fd7761ce680130610e472b2f89a71e9b68cb5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:d2:ca:48:97:82:62:4d:3f:34:f3:fe:17:
9b:67:17:78:52:47:c1:9f:53:ac:fb:81:f8:39:9b:
11:d7:c9:cd:2e:99:b4:ca:38:4b:b1:b4:19:b3:76:
bb:ca:fc:68:73:e6:84:7e:b0:ec:7e:eb:89:00:3d:
4b:25:9f:02:c2:35:4f:56:b1:04:b1:c5:88:e0:9e:
5b:3b:60:01:29:8e:d5:25:6e:c1:70:0f:53:50:67:
35:2b:b6:f5:e8:9a:08:0a:f2:9b:1b:1e:c7:b2:9f:
0b:85:2a:7e:1c:50:be:02:bf:bb:ab:e5:15:39:36:
d3:09:b0:e4:78:44:4c:1e:30:c5:a7:01:98:47:ef:
57:8b:30:a0:ff:ed:c5:16:10:1f:80:5e:69:a3:44:
81:b8:6e:a7:81:28:d9:fe:6b:45:75:58:4c:17:5c:
4b:40:e7:17:50:63:69:02:8f:e1:49:59:e6:8a:2e:
29:e8:c1:71:6a:9b:6c:bf:8f:a7:dc:cd:ff:04:aa:
89:01:d8:73:c8:88:a4:c8:45:97:c7:61:be:92:7e:
66:8b:82:63:3e:db:ab:df:b6:d5:b8:5b:f9:96:f5:
8f:6e:87:9e:f9:ec:95:eb:33:ce:49:23:13:c8:95:
c8:2d:b1:46:da:6d:67:33:a5:32:be:d8:6c:23:e0:
a6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D7:76:1C:E6:80:13:06:10:E4:72:B2:F8:9A:71:E9:B6:8C:B5:BB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/j9d2HOaAEwYQ5HKy-Jpx6baMtbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e7c0::/29
Signature Algorithm: sha256WithRSAEncryption
1e:52:cf:dc:fe:d1:2d:b8:19:60:a4:16:9a:76:0e:14:3f:3d:
f4:e8:e9:4c:5e:6b:d1:20:cc:00:a5:77:46:0c:ef:91:36:9c:
ea:ec:36:6c:da:b6:0c:d8:ea:02:12:10:8c:66:ce:9c:f8:d1:
eb:33:00:68:8c:40:fd:db:4c:59:ec:46:d9:18:b2:4b:71:69:
18:0d:59:ab:4b:a6:a8:e6:f3:ba:a3:15:bd:a7:5f:ca:fe:aa:
18:d5:e3:94:d7:f6:0a:29:b6:a9:b6:5d:72:53:f0:57:ef:ef:
1f:da:16:57:90:07:bf:3c:08:4d:d2:59:f9:17:dc:c3:8b:97:
96:18:22:6f:39:aa:88:fe:a7:7b:67:ec:d2:16:cd:ef:bf:07:
1e:95:c4:15:0e:a7:4e:61:31:d0:9f:a0:3d:54:be:6b:fb:a9:
1c:2f:ed:9d:b7:b9:18:9e:29:ca:4e:b0:1e:19:5c:1f:e8:e4:
63:d0:72:f3:8d:c9:b0:ff:3f:0f:c3:7b:1e:5c:5d:b4:98:33:
ec:f6:37:2c:c3:72:0d:b7:fb:a6:6d:8e:0e:af:1f:ca:af:dd:
42:f2:ea:5b:3b:78:72:ca:ff:9d:17:d6:c0:a2:ca:ff:4e:38:
77:27:f6:d6:72:e4:4b:98:db:a4:10:99:d1:94:e3:7b:50:6f:
c3:54:b4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:53 2025 by rpki-client