Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kaHoCf1S8M-RBXzDPsSJqzliEoo.roa
File: kaHoCf1S8M-RBXzDPsSJqzliEoo.roa (raw, json)
Hash identifier: QdnIAIIN0p+CKJ1UPkqVqoEeAraSoGx4gtj5DivCpXI=
Subject key identifier: 91:A1:E8:09:FD:52:F0:CF:91:05:7C:C3:3E:C4:89:AB:39:62:12:8A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01CA526D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kaHoCf1S8M-RBXzDPsSJqzliEoo.roa
Signing time: Mon 07 Feb 2022 11:21:20 +0000
ROA not before: Mon 07 Feb 2022 11:21:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211444
IP address blocks: 2a0f:e1c6::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30036589 (0x1ca526d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 7 11:21:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91a1e809fd52f0cf91057cc33ec489ab3962128a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:12:39:83:d3:1a:96:c8:a8:f0:e0:d1:b7:
10:ac:de:a2:14:5a:ef:3a:2b:94:66:2b:37:93:f2:
7f:7c:b9:13:5d:d9:dc:b1:3c:b5:47:6d:13:ef:c8:
a5:38:8a:1f:0c:4e:e8:d1:00:d3:da:de:e2:0b:16:
5b:38:2f:49:b7:9b:26:66:02:62:f8:d3:4a:a3:05:
30:8f:b2:98:80:2a:4d:a3:ed:0b:9e:07:db:1b:90:
aa:23:58:d8:01:31:fb:ff:cb:53:cc:89:bf:29:04:
43:c6:bf:93:5e:60:21:ee:b9:ed:24:4e:20:3e:d7:
3f:38:45:f4:b1:72:48:06:70:02:9f:f5:10:ee:ac:
50:b0:f0:d6:f6:dd:3f:66:eb:7a:f9:ec:66:9a:bc:
c7:e8:43:3a:de:f2:02:aa:de:05:35:3b:89:76:6f:
a4:23:6c:ae:42:38:d6:83:63:c5:8b:ae:15:cb:1a:
62:6d:b3:cb:7b:dc:1f:39:56:cc:5f:d2:9f:0f:0e:
ed:28:f7:2f:81:67:f3:95:47:87:42:a0:f3:3d:92:
f3:99:d7:1f:f2:17:29:39:5c:68:11:01:b9:06:a0:
ca:0d:66:8b:b0:70:94:00:e2:34:a9:9c:81:9b:58:
fe:78:ab:c7:f1:37:9c:29:f2:ce:58:2b:da:d6:df:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A1:E8:09:FD:52:F0:CF:91:05:7C:C3:3E:C4:89:AB:39:62:12:8A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kaHoCf1S8M-RBXzDPsSJqzliEoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e1c6::/32
Signature Algorithm: sha256WithRSAEncryption
02:9b:8f:a5:95:1e:82:78:6a:bf:e9:a5:3a:7b:bd:aa:e7:5b:
79:56:c7:da:a6:30:5b:23:69:34:f3:b4:cf:18:14:80:57:cc:
66:85:7b:10:be:6f:a0:77:47:59:93:1d:c4:ff:f5:f4:85:0c:
2f:3f:1f:89:29:38:40:b1:bd:f4:f7:b5:e4:ce:dd:7c:1d:bc:
fe:13:47:16:ff:35:38:d9:54:18:02:88:6b:5f:01:97:92:b3:
50:e0:b8:87:2f:28:d9:dc:bc:2f:9a:44:37:dc:f6:ad:39:7d:
32:ad:82:2b:0a:cd:d3:e1:89:57:4d:e0:63:3a:2c:dd:b7:4f:
bf:e9:b3:af:c2:ad:b0:0d:90:55:7f:04:5d:d4:e7:32:14:89:
cd:2f:bd:9d:15:d0:f2:59:f3:b8:55:54:a8:f4:a6:6b:18:a2:
f5:95:a3:e6:72:79:8d:57:38:54:36:d9:9b:56:90:38:c9:37:
17:55:47:67:8e:e5:0f:7c:d7:dc:df:13:8f:e6:13:c6:d1:dd:
a8:dc:21:2d:09:66:ac:10:77:3b:44:b2:c2:9b:e2:fb:66:e4:
8c:61:4a:de:70:ae:a0:f2:1c:b5:d7:23:96:cb:5d:d0:a0:6f:
c3:35:2b:e3:17:d7:59:42:02:62:7c:48:c5:ed:95:14:be:31:
c3:31:20:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:52 2025 by rpki-client