Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pD5PXG-zMoc_532_uV9JQDPY1yY.roa
File: pD5PXG-zMoc_532_uV9JQDPY1yY.roa (raw, json)
Hash identifier: xBUi9NH713OdkhJbMLoBcrPFfAKR39NpgwbghJoEbaU=
Subject key identifier: A4:3E:4F:5C:6F:B3:32:87:3F:E7:7D:BF:B9:5F:49:40:33:D8:D7:26
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018534AD4DA97AAE888BB49C2EAE922CA965
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pD5PXG-zMoc_532_uV9JQDPY1yY.roa
Signing time: Wed 21 Dec 2022 12:34:10 +0000
ROA not before: Wed 21 Dec 2022 12:34:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8772
IP address blocks: 2a0c:9240::/29 maxlen: 29
2a0f:e7c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:ad:4d:a9:7a:ae:88:8b:b4:9c:2e:ae:92:2c:a9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 21 12:34:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a43e4f5c6fb332873fe77dbfb95f494033d8d726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:c0:dc:60:a1:6b:ab:39:04:81:ab:d7:50:
f7:ad:71:6e:8f:9d:9b:5a:62:ed:99:84:67:1c:5a:
cb:01:da:59:23:85:25:0f:25:5c:d0:e4:af:ed:c9:
ef:11:b3:fd:2a:4f:55:cd:5b:13:75:c5:ac:5d:46:
e6:36:1c:41:89:c3:c1:bf:57:08:5a:06:af:31:30:
a8:8e:57:1b:81:2c:b4:06:fe:82:29:bf:4d:49:f0:
ee:aa:93:83:93:d2:e5:ab:de:c6:68:28:a7:b1:3a:
6a:1a:5d:02:18:42:b2:8c:eb:2e:e3:01:13:29:fd:
fa:99:b0:81:0f:fd:a4:fa:b6:36:2f:cd:72:46:30:
8e:85:aa:c5:0b:36:b5:ed:f4:37:67:7d:4d:42:19:
49:6c:c8:8a:48:64:aa:a2:d1:e6:e1:fe:5b:04:c2:
0c:10:c0:e5:9b:bd:b4:cf:9b:e2:54:32:92:12:55:
84:e9:3a:c7:3a:dd:8e:65:27:d9:3e:d4:38:62:06:
1d:fd:65:74:c0:44:63:4e:e4:b4:07:e1:3c:7b:0b:
c3:ee:da:03:a8:d9:25:e9:8f:62:fa:44:78:46:14:
18:52:90:97:fb:28:75:d3:91:b1:a5:c4:94:39:ee:
b6:c2:74:3d:29:e7:a6:7b:0e:af:b9:f7:b8:31:43:
03:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3E:4F:5C:6F:B3:32:87:3F:E7:7D:BF:B9:5F:49:40:33:D8:D7:26
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pD5PXG-zMoc_532_uV9JQDPY1yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9240::/29
2a0f:e7c0::/29
Signature Algorithm: sha256WithRSAEncryption
34:c4:e0:4f:34:1d:8b:03:b1:00:9e:ef:1a:66:77:b7:e5:20:
99:c0:b3:22:43:7a:0a:a5:d6:60:47:cf:c0:48:11:2e:c5:f4:
84:ab:03:5d:0a:15:b6:8d:88:fb:b6:b6:93:d2:00:7f:9d:78:
3c:b7:9c:29:24:86:8a:13:fa:1f:c0:c4:bf:2d:84:7e:59:65:
38:17:a2:eb:69:12:ca:d2:33:02:59:0f:5a:ea:b0:5c:20:b8:
ae:94:30:00:e7:a2:9e:40:09:60:01:02:f0:54:57:4f:27:db:
d5:10:8d:80:9a:22:22:d7:25:97:cb:45:50:ae:e2:d4:03:83:
e1:72:ef:af:b0:41:61:c3:09:7f:96:48:04:52:57:67:e1:3d:
b9:69:99:36:af:fb:1c:43:b9:91:8c:01:c0:f1:64:fd:2f:7e:
1a:ac:ad:a9:66:22:5b:7c:db:91:40:ae:85:57:84:3c:e0:a5:
57:bb:05:60:ba:12:7e:25:3d:38:27:7b:40:79:3d:b1:11:2c:
5c:2b:ab:be:83:b2:4c:83:c2:c0:f7:da:8b:f2:6f:2c:31:ae:
2c:b0:bf:89:c3:37:e4:86:0d:02:69:65:6c:51:a3:24:34:b8:
1d:03:05:8f:bf:4f:a6:86:3b:d4:8e:f2:bb:b6:8c:20:6c:81:
53:4b:37:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:45 2025 by rpki-client