Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mCZSph6RXIuXDdIxOkozMNy-mTY.roa
File: mCZSph6RXIuXDdIxOkozMNy-mTY.roa (raw, json)
Hash identifier: r3PsFZGM1sFQ18tBmiQLcEP7bJv5TqF08+PUbLTqfYU=
Subject key identifier: 98:26:52:A6:1E:91:5C:8B:97:0D:D2:31:3A:4A:33:30:DC:BE:99:36
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018C8140F21912B6D9CB08B17CAA0FD5523D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mCZSph6RXIuXDdIxOkozMNy-mTY.roa
Signing time: Tue 19 Dec 2023 08:46:06 +0000
ROA not before: Tue 19 Dec 2023 08:46:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a0f:7d00:1::/48 maxlen: 48
2a0c:7884::/32 maxlen: 32
2a0f:ea00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:81:40:f2:19:12:b6:d9:cb:08:b1:7c:aa:0f:d5:52:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 19 08:46:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=982652a61e915c8b970dd2313a4a3330dcbe9936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:50:8e:e6:2a:52:31:5f:90:24:be:68:40:
51:5f:df:fd:cd:1f:eb:8d:d1:b8:5b:6f:eb:64:fe:
b6:ea:96:18:37:a9:fa:c0:96:a9:7f:52:b8:b1:81:
8f:63:e9:b5:9f:34:c4:b8:c3:f0:61:f4:42:48:70:
d2:27:3d:47:e8:01:00:37:16:63:89:0b:19:c6:59:
1b:2c:12:ac:41:bb:c4:91:41:51:42:76:b4:f6:29:
5b:19:37:8c:f5:a8:c1:f9:87:3b:fc:25:e1:43:6a:
94:37:96:90:71:c3:62:59:5b:23:af:4e:a3:f3:e5:
0c:eb:be:5f:0b:0d:8d:64:48:49:8b:ad:c8:8e:eb:
3c:0b:74:b7:46:82:97:ba:35:58:15:78:95:25:15:
30:da:4d:da:5d:fe:47:96:f9:7d:39:3b:15:6f:ad:
27:eb:cd:77:52:39:c4:23:bf:3e:f1:4f:c6:51:bd:
d4:87:b9:1a:de:3d:d9:27:3b:43:c1:6f:67:b3:18:
82:7e:6c:d5:02:d7:95:a5:09:25:80:53:3e:d9:13:
a3:cc:da:8e:a9:ae:5d:fe:25:77:c4:ce:ed:fd:b6:
a5:89:37:9e:53:ec:f1:e7:94:eb:56:d4:b4:d9:c3:
2b:e7:af:49:fd:70:5e:51:9b:4c:95:71:eb:65:88:
26:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:26:52:A6:1E:91:5C:8B:97:0D:D2:31:3A:4A:33:30:DC:BE:99:36
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mCZSph6RXIuXDdIxOkozMNy-mTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7884::/32
2a0f:7d00:1::/48
2a0f:ea00::/29
Signature Algorithm: sha256WithRSAEncryption
30:32:35:84:04:92:00:c1:46:16:7b:f8:46:3a:c5:04:75:06:
68:28:da:d4:bf:42:8a:8a:b3:4b:55:68:0a:b6:f6:39:1c:4c:
3a:66:2e:22:61:93:b2:f9:14:b5:8d:67:6c:12:c8:33:17:20:
6a:1a:03:46:b4:41:14:ac:11:49:77:6d:fc:4b:01:7f:d5:b5:
76:9d:e3:1a:cc:9c:9a:27:54:5c:26:c3:3c:83:56:3b:bd:b0:
29:96:18:1c:37:01:06:5c:fc:a7:c6:cf:1a:59:95:e8:a1:db:
7b:24:6f:31:90:d1:9e:4c:47:98:52:a4:e1:31:39:d4:97:41:
05:4a:33:7f:dd:75:e4:43:67:6c:20:cb:da:dd:bf:69:54:37:
76:22:c7:b1:e4:bc:b5:97:6b:7e:c9:fe:73:c5:cb:e1:0c:09:
d6:c7:21:ac:aa:f9:e5:c3:f9:ce:14:34:bb:53:2d:02:16:12:
47:ac:5a:e7:55:e1:ee:87:1b:5b:f5:a7:e9:ab:f9:ac:22:85:
cd:2c:79:02:03:7c:d9:00:3d:80:97:08:24:55:91:94:a3:45:
e1:da:3a:5e:1c:57:7e:45:3a:7c:df:19:91:98:e4:09:1f:a8:
47:53:96:1c:0a:a5:e5:e5:9a:0f:56:91:68:da:5b:36:7f:aa:
4c:5d:97:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:30 2025 by rpki-client