Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pfOev2UfqdQCe2iAD7YOIt2Npj8.roa
File: pfOev2UfqdQCe2iAD7YOIt2Npj8.roa (raw, json)
Hash identifier: puCwMeQdSQiTte2d9uPpIbGcT16/r+Wz7OJ22NC/YLk=
Subject key identifier: A5:F3:9E:BF:65:1F:A9:D4:02:7B:68:80:0F:B6:0E:22:DD:8D:A6:3F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0187E04D1E2C75F14115E9CBB7B42EAC51EC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pfOev2UfqdQCe2iAD7YOIt2Npj8.roa
Signing time: Wed 03 May 2023 06:29:23 +0000
ROA not before: Wed 03 May 2023 06:29:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 2a0d:1140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:4d:1e:2c:75:f1:41:15:e9:cb:b7:b4:2e:ac:51:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 3 06:29:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5f39ebf651fa9d4027b68800fb60e22dd8da63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:c5:63:30:3a:cb:5b:90:78:a9:b3:1a:fc:
05:f9:16:11:b1:1d:42:51:94:46:3c:1d:17:36:3a:
9e:0b:4f:ee:20:dd:e8:3c:6c:26:a6:72:ba:47:5f:
51:ee:c1:96:3a:60:3c:8d:d6:86:8b:e9:0b:5e:87:
e9:a5:73:04:60:7d:db:b8:94:5d:a7:fa:bd:35:79:
4f:23:b3:d3:8c:ba:09:47:78:ac:ea:69:c6:57:ef:
3c:1a:c9:cd:a4:1e:f1:3d:82:9d:82:8b:07:79:15:
70:d5:44:8e:62:29:f7:62:9f:5e:d1:1f:59:9f:48:
d5:de:29:32:c6:f7:73:32:de:ff:51:b5:fe:48:14:
37:1f:06:b9:16:47:b0:6e:fc:3c:7a:cd:4e:9b:e4:
96:99:83:07:69:c8:fa:2c:5a:25:1e:4c:dd:66:0b:
d9:01:27:af:08:96:e4:80:ef:11:dc:80:c7:d6:fe:
d5:54:35:6e:02:85:fa:1f:7c:11:ea:ec:e5:95:bd:
2c:a3:81:fc:a8:e3:33:46:d2:dd:02:80:82:f7:83:
6b:93:6b:07:4f:71:ae:83:9f:79:01:a8:73:b3:3b:
a8:23:76:8b:91:89:c5:49:a7:2f:a0:4d:bc:a6:5e:
4f:ca:8e:8d:2c:fd:be:88:f1:a9:9c:f6:35:1e:37:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F3:9E:BF:65:1F:A9:D4:02:7B:68:80:0F:B6:0E:22:DD:8D:A6:3F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pfOev2UfqdQCe2iAD7YOIt2Npj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1140::/29
Signature Algorithm: sha256WithRSAEncryption
30:99:ac:3f:8b:cc:3d:d4:e2:ed:89:14:d1:1f:96:30:82:af:
08:71:b2:50:1c:66:19:d0:b2:b9:e7:50:dc:be:3a:6b:81:0a:
50:37:87:db:ce:e6:f7:99:f1:a8:59:5f:f7:ff:d9:62:bf:00:
77:c3:33:90:a6:0b:c7:67:1a:7d:c5:ea:53:92:a3:3d:81:d9:
90:a5:63:30:4c:b0:40:06:5d:ab:e8:f4:ce:a0:9f:eb:d1:18:
08:4d:39:a2:50:65:d1:ae:13:db:87:59:72:ec:09:ed:9f:f0:
09:22:a9:26:70:25:a8:5e:e3:db:7a:d0:91:9a:2a:61:1f:05:
0a:bd:f7:51:08:2a:38:69:90:ca:ef:05:8a:2a:21:cc:f2:58:
8e:17:7c:42:eb:c6:c1:b6:ff:f8:69:d3:cf:6d:e9:92:6b:26:
23:16:c1:f8:67:0d:aa:17:10:ab:5c:96:95:00:a6:e6:ce:ef:
6a:85:5f:05:80:e4:3a:86:e3:14:7e:e8:56:79:6c:55:2c:df:
ce:2f:5a:5b:4a:7f:76:1a:94:2e:79:ec:ee:b7:76:ba:8a:8e:
ba:92:47:f9:ef:80:e8:fa:e1:e5:ac:a7:ee:ea:e3:57:30:d0:
51:69:d9:43:03:2c:4d:fc:2e:6c:c9:4a:7d:1b:9a:a8:29:80:
fb:6e:8c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:21:53 2025 by rpki-client