Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/opC45IcrxnF8LSxroDFH26wiJIM.roa
File: opC45IcrxnF8LSxroDFH26wiJIM.roa (raw, json)
Hash identifier: u08F7V8CfhwOzkRCKVqerduJRa3tkJDAsR3siNH2ynI=
Subject key identifier: A2:90:B8:E4:87:2B:C6:71:7C:2D:2C:6B:A0:31:47:DB:AC:22:24:83
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0188E6FFB1E5646865C3D8229C4C5A687B5C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/opC45IcrxnF8LSxroDFH26wiJIM.roa
Signing time: Fri 23 Jun 2023 06:44:56 +0000
ROA not before: Fri 23 Jun 2023 06:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396362
IP address blocks: 2a0f:e841::/32 maxlen: 32
2a0e:1a82::/32 maxlen: 32
2a12:d540::/29 maxlen: 29
2a0f:1e80:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e6:ff:b1:e5:64:68:65:c3:d8:22:9c:4c:5a:68:7b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 23 06:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a290b8e4872bc6717c2d2c6ba03147dbac222483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2c:c3:d1:cf:e8:65:1b:37:bc:05:5c:dd:2a:
eb:07:23:14:d8:f5:e2:92:41:47:80:d2:fe:38:2a:
47:cb:92:98:ce:44:82:04:b0:d9:85:5a:3a:99:72:
4e:ef:13:10:d3:f7:9d:40:6b:9d:96:5f:92:9d:17:
c6:35:56:b6:6c:4a:d4:a5:e7:d0:4a:e3:1c:ae:99:
4e:01:87:6a:c5:f9:8f:31:55:7f:26:9c:98:5d:b5:
1e:74:4c:d1:e7:af:ce:5c:b8:7e:ab:85:6c:e8:e5:
f2:3d:fc:6b:86:f9:03:33:a1:15:23:a4:1d:ac:da:
30:5f:fe:03:7c:bd:ac:d0:6b:5c:f4:d9:b5:78:79:
1b:6f:d1:af:ef:42:73:fe:1e:40:41:96:05:1b:26:
58:10:53:4d:81:1b:66:6b:89:5a:30:40:ed:3d:86:
d4:a7:00:eb:42:f3:53:81:17:9d:da:2a:1a:06:a5:
c3:77:51:f9:bc:6d:a4:1d:7d:36:c2:49:3e:d7:67:
27:04:1b:ad:3f:e3:44:41:1c:f0:74:93:8b:90:72:
57:32:fb:7a:c0:df:6b:db:7e:7f:dc:f1:cd:bd:aa:
2d:bb:f4:74:89:d6:d2:3c:13:1a:f1:65:74:2d:7c:
87:b5:28:b3:3f:1e:40:04:3a:d2:92:c3:a3:a4:48:
49:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:90:B8:E4:87:2B:C6:71:7C:2D:2C:6B:A0:31:47:DB:AC:22:24:83
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/opC45IcrxnF8LSxroDFH26wiJIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1a82::/32
2a0f:1e80:1::/48
2a0f:e841::/32
2a12:d540::/29
Signature Algorithm: sha256WithRSAEncryption
77:ba:99:c0:6b:d8:d2:c9:85:ae:94:b8:80:74:74:ea:f1:ef:
06:0f:60:22:14:ea:57:a2:7c:1d:2e:50:45:60:83:f2:19:b1:
87:9a:5d:e7:5e:b1:0a:cf:d7:f1:ab:2f:88:bc:5f:d8:4b:a2:
b1:34:94:86:68:d2:d7:67:93:7c:e6:ad:9c:cf:3a:2b:21:9f:
70:5c:3c:88:ca:66:1a:21:c7:30:52:1c:97:1a:00:fd:60:05:
64:07:48:4d:f4:35:5f:cf:fb:3e:3c:36:25:48:77:af:b2:4a:
8a:bd:fb:67:d7:9b:98:73:95:86:0c:32:ec:1c:94:44:48:92:
81:12:44:6a:e8:dd:0a:11:f1:e0:ea:3a:68:d5:f7:93:d1:5e:
7b:4f:06:d7:c5:b7:31:ad:6c:aa:db:84:b4:65:1f:0b:3b:0e:
2e:a8:0a:03:2f:33:46:b4:5c:01:13:14:9f:19:61:0e:ef:19:
60:0c:89:45:02:f9:33:8d:ea:91:a2:2b:4f:e8:35:b0:74:e5:
4d:eb:76:80:57:19:20:b3:83:72:3f:ce:fb:e9:62:41:36:7b:
fd:d2:c7:fa:a0:a8:60:17:51:36:65:f0:fb:aa:3b:12:f1:bd:
67:c8:24:c6:ea:04:53:da:37:b9:47:b2:ff:a8:c8:06:e0:f1:
cb:7c:ae:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:59:35 2025 by rpki-client