Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kciFwVhUKiy7hXOCHkrpswwMYwo.roa
File: kciFwVhUKiy7hXOCHkrpswwMYwo.roa (raw, json)
Hash identifier: 1kFJhb7dwzjMaFAWh1b8cJ2yYlIqQkdVrnU5WJSmb9o=
Subject key identifier: 91:C8:85:C1:58:54:2A:2C:BB:85:73:82:1E:4A:E9:B3:0C:0C:63:0A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0189D4504877392BA9EE5B9682F64AFD03FD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kciFwVhUKiy7hXOCHkrpswwMYwo.roa
Signing time: Tue 08 Aug 2023 08:42:58 +0000
ROA not before: Tue 08 Aug 2023 08:42:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 2a0e:5800::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:50:48:77:39:2b:a9:ee:5b:96:82:f6:4a:fd:03:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 8 08:42:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91c885c158542a2cbb8573821e4ae9b30c0c630a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6a:fd:32:ff:4d:04:9e:27:9e:9a:b4:b6:3e:
47:95:aa:c8:cd:01:52:5f:66:58:4f:0f:47:de:99:
51:7d:71:3b:3e:65:7b:55:85:ac:d6:2e:b4:74:e1:
a1:b5:bc:d8:aa:41:1f:38:73:58:95:12:91:57:86:
c3:04:b0:69:47:84:d9:31:01:08:80:d1:8f:cb:4d:
09:a2:5d:93:84:04:ef:5e:6b:03:9e:71:a8:d0:db:
1f:aa:34:70:a2:72:59:bc:e8:a3:2b:6d:5f:3d:f9:
66:22:fd:79:f2:72:b7:c9:33:86:b1:b9:e4:ca:9b:
14:49:92:6e:fb:84:22:35:68:e2:02:a8:79:35:27:
e6:13:6c:24:0d:bc:38:f6:ba:a5:27:77:25:28:ca:
7c:63:0c:37:49:69:83:6d:6a:30:14:98:b6:3c:80:
5d:a9:84:21:f0:08:e1:c4:95:88:3c:51:d1:ae:9b:
c3:8b:25:3b:a2:ee:91:c0:20:ea:33:00:02:5f:51:
c2:32:b1:d5:ea:1e:16:4c:07:28:ac:1e:96:ac:ce:
8d:22:33:b7:e1:d0:2c:90:c8:c2:a8:7d:e0:00:18:
08:98:73:5c:70:d1:e7:66:54:2d:d7:67:4c:04:d3:
2b:f6:1a:57:f5:77:1e:8d:e6:77:3d:46:7c:87:2a:
49:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C8:85:C1:58:54:2A:2C:BB:85:73:82:1E:4A:E9:B3:0C:0C:63:0A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/kciFwVhUKiy7hXOCHkrpswwMYwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5800::/29
Signature Algorithm: sha256WithRSAEncryption
5a:1b:ee:da:80:57:be:e1:1e:bc:67:e9:0e:07:6d:31:3f:3d:
2d:bc:97:bd:06:8e:10:45:00:2d:6d:25:a9:b7:14:c5:b2:a7:
e0:66:45:5b:66:20:26:54:fc:28:e4:f3:5b:20:33:f5:16:89:
32:26:54:55:7f:25:60:39:c6:af:85:d0:44:f7:76:c8:c6:08:
db:7a:32:90:5f:0e:ab:2c:00:a3:1a:c9:8d:b4:aa:a0:6a:02:
43:b2:fb:eb:1e:14:4e:8f:94:7a:43:cf:b0:bd:78:6c:0b:5d:
ce:6a:35:1b:92:47:e7:f0:46:b4:97:f6:5b:f4:de:4c:22:07:
90:9e:30:1e:4c:1a:07:3c:a8:9f:48:53:75:86:17:42:8f:f7:
37:87:32:f0:da:3e:20:42:e2:0c:7e:ef:72:f3:76:69:94:18:
e6:ff:e4:39:5f:90:d6:85:80:21:23:f6:a8:81:57:0f:01:e0:
3e:17:4e:4f:e5:c9:4b:9c:b2:70:19:79:e7:ad:d0:36:1b:1f:
03:29:6d:f0:56:6d:2d:5e:e4:99:a1:fc:4d:83:32:ce:f9:86:
0c:a7:04:bb:e1:d8:1a:a5:fd:6d:61:7f:7f:05:1f:34:e7:6f:
12:20:eb:fe:33:71:f0:44:7c:1c:2a:6b:08:2c:2b:33:d4:3a:
3a:f1:a8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:21:16 2025 by rpki-client