Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lS_26OwaZ3KS2BomRIthjTrTJZk.roa
File: lS_26OwaZ3KS2BomRIthjTrTJZk.roa (raw, json)
Hash identifier: cTKTxUQA0LIYOXpP4jninoQw6jz9sW05vhVLQ8iK5X4=
Subject key identifier: 95:2F:F6:E8:EC:1A:67:72:92:D8:1A:26:44:8B:61:8D:3A:D3:25:99
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01856DCAF2DDD40742960CE90BB2E1AEAD89
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lS_26OwaZ3KS2BomRIthjTrTJZk.roa
Signing time: Sun 01 Jan 2023 14:44:54 +0000
ROA not before: Sun 01 Jan 2023 14:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55286
IP address blocks: 2a0e:f201::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:f2:dd:d4:07:42:96:0c:e9:0b:b2:e1:ae:ad:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 14:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=952ff6e8ec1a677292d81a26448b618d3ad32599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:31:5f:df:57:b1:89:a5:d8:11:f5:67:98:
9c:89:e9:aa:ea:d6:6d:76:c0:3f:78:d3:ff:e4:1e:
09:00:ca:77:89:54:36:f9:4f:54:c6:50:5e:e0:a8:
ef:4d:ac:27:ae:74:dc:e9:bf:13:24:a9:1b:53:5a:
c8:e7:48:93:dd:35:71:90:37:c8:77:c7:58:9f:1a:
8f:57:12:2c:68:0b:00:a0:37:31:27:5f:d2:1a:71:
7f:57:01:f4:e2:d4:45:ed:6c:3a:6f:0e:bd:b5:42:
e6:70:46:79:fe:ac:50:ef:02:5a:04:c7:9c:11:4e:
bd:f8:fb:e3:8c:92:06:0c:ae:ad:55:25:ec:c3:1a:
8a:f6:6f:58:af:f3:07:24:3c:39:6a:b2:9b:1f:8d:
d2:7f:fa:1f:d9:da:1b:aa:b0:1c:d4:e2:b3:49:df:
de:5f:2b:c9:22:97:bc:7d:1f:41:31:10:43:1a:84:
a2:75:ea:8c:43:03:7a:d3:d9:5e:f3:97:12:88:3b:
88:13:85:f0:aa:ac:ed:76:3c:47:ab:bd:3c:04:bb:
b7:6e:e8:c0:07:11:ee:89:e0:ae:f3:3e:f1:4f:85:
fe:6f:01:13:99:e7:46:93:64:04:b3:8e:0a:d8:79:
cf:47:34:ae:c9:d8:70:c6:1c:a5:30:ca:1b:ff:47:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2F:F6:E8:EC:1A:67:72:92:D8:1A:26:44:8B:61:8D:3A:D3:25:99
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lS_26OwaZ3KS2BomRIthjTrTJZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f201::/32
Signature Algorithm: sha256WithRSAEncryption
c2:5d:b0:af:05:7e:d6:bb:36:4f:1c:0a:1c:19:3d:01:3d:cb:
5d:b9:3f:de:01:0f:0f:89:47:1c:f4:ac:58:5a:40:96:15:06:
a7:e4:12:d0:24:80:38:28:83:9c:be:20:ab:f0:a4:a4:9f:5c:
72:99:10:fc:0d:36:26:71:e7:6e:57:a6:b0:ab:0a:78:00:7f:
48:98:e9:95:fa:93:4a:b4:0d:61:25:aa:a7:a5:7a:1a:fc:04:
3b:a0:1f:96:b9:79:53:c1:c7:49:93:7e:c4:f7:94:28:b7:da:
94:70:26:5e:23:28:ab:29:99:de:bf:1f:d8:6d:d0:71:ab:72:
bd:6f:96:09:5d:f6:50:9c:7f:39:21:cb:18:b8:d9:57:9a:46:
07:03:58:bb:13:4f:34:29:f3:77:2c:91:d2:62:6b:8c:12:ce:
45:65:1d:35:fc:e3:f0:7e:04:0c:a9:18:65:01:36:c8:54:1b:
4a:2e:ce:bc:e1:8c:ca:70:b7:ac:d5:0f:4a:e8:be:ba:66:9d:
47:6c:85:09:3f:7e:ae:5c:1a:47:b6:a9:cd:b4:06:4c:8c:2d:
12:bb:a0:9f:15:46:06:32:b4:4a:3b:c9:11:38:4e:d5:88:f5:
3d:e1:a6:7d:83:6e:0f:9a:04:86:5b:3d:0e:91:9d:a0:99:72:
19:95:f8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:26 2025 by rpki-client