Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kSFCpS-ekCd41XkBtqRa2v7lsfI.roa
File: kSFCpS-ekCd41XkBtqRa2v7lsfI.roa (raw, json)
Hash identifier: LCdbNVF6EBugM+AvWz2bJfh67bEMZN4NNCXfQ6M8Hxs=
Subject key identifier: 91:21:42:A5:2F:9E:90:27:78:D5:79:01:B6:A4:5A:DA:FE:E5:B1:F2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0184953E4256606D18087B3187DA2EC5C349
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kSFCpS-ekCd41XkBtqRa2v7lsfI.roa
Signing time: Sun 20 Nov 2022 13:33:16 +0000
ROA not before: Sun 20 Nov 2022 13:33:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 2a13:200::/29 maxlen: 29
2a13:4900::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:95:3e:42:56:60:6d:18:08:7b:31:87:da:2e:c5:c3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 20 13:33:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=912142a52f9e902778d57901b6a45adafee5b1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:14:f7:00:4b:ef:81:35:2c:39:72:f5:da:
e3:0d:04:a7:35:ba:f5:b6:bc:3a:d8:8e:24:62:0d:
e1:a5:ed:05:cb:9d:e9:f2:82:5d:99:43:df:9e:c8:
59:51:17:23:0f:e2:77:ff:7b:d0:73:c7:d8:64:5a:
53:93:70:68:2d:40:8d:6d:9d:71:bb:a2:95:82:76:
14:07:ee:37:3b:08:df:35:39:67:f1:0d:9f:b3:91:
49:15:4d:ff:ea:c4:a8:4b:32:82:1d:4f:b3:5e:9e:
a1:d5:9c:08:6f:29:7b:da:ef:80:f9:f3:c5:12:4e:
c0:51:b4:28:27:81:d9:9c:02:77:a2:0b:6d:60:cd:
c5:72:d6:38:b6:2f:00:42:74:26:15:25:8a:55:fe:
c1:fe:a1:f2:06:83:dd:a5:af:ce:7a:83:bf:4e:6c:
a0:fc:ec:4a:b1:61:7a:a6:e0:24:7c:0e:ea:99:72:
1a:e3:56:43:f9:cf:e9:f3:8c:51:52:05:7b:40:a5:
2f:33:ed:02:a0:a8:52:e6:23:75:79:a6:25:7f:c8:
5c:16:0f:db:b2:37:23:d7:ca:7e:47:e8:3c:d2:bd:
d9:03:7e:18:f4:1e:d0:9e:3c:b5:e5:c9:59:e0:11:
c8:35:dd:a2:4f:d1:c8:8d:08:2a:e4:a0:cf:1c:74:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:21:42:A5:2F:9E:90:27:78:D5:79:01:B6:A4:5A:DA:FE:E5:B1:F2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kSFCpS-ekCd41XkBtqRa2v7lsfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:200::/29
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
3f:60:f0:5c:d1:da:f8:75:82:a2:2e:21:60:74:0e:03:84:68:
83:72:18:af:c3:3c:36:ab:aa:12:54:ee:44:7a:db:04:59:e9:
db:50:7e:02:dd:3a:6a:ed:6e:1b:45:f1:c4:8f:a1:68:00:5d:
14:20:24:d9:bc:e9:d6:72:75:e5:e4:7d:2e:ed:0f:14:73:4a:
2a:4d:ab:86:32:c0:e8:98:e1:18:b5:69:1e:c1:2a:34:1f:fb:
54:ab:b6:68:b7:d5:be:4b:c9:59:68:e6:33:40:e6:7e:11:94:
aa:b0:4e:73:95:f9:6d:c2:0d:85:e1:a5:8c:ad:e1:bf:73:00:
ac:c4:ba:3d:3e:ff:db:40:9e:1e:68:3d:f1:3b:6e:46:43:4f:
3c:60:a5:c8:01:81:99:05:13:79:4d:b2:97:e2:c0:55:40:3c:
bd:55:b0:a7:3e:87:9b:a0:0b:e7:cd:e0:02:5a:22:91:f1:20:
c6:92:01:08:55:9c:9a:1b:65:2c:34:90:1c:2c:74:93:6d:c3:
b0:ac:41:91:ed:3a:fc:18:98:35:e0:b1:0b:67:74:4f:6b:94:
7e:bd:7e:ff:9c:48:bf:b5:60:5f:d3:19:57:64:30:a8:df:6a:
22:f2:61:f9:0e:fd:ad:d2:3a:35:a8:52:86:52:16:ca:fa:1e:
af:f0:61:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:59:12 2025 by rpki-client