Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pxN7f0wg1-S-85fk5SbSRPvA6pY.roa
File: pxN7f0wg1-S-85fk5SbSRPvA6pY.roa (raw, json)
Hash identifier: eNcvNotZq4vGOriE12CQx0pf9vLbh2BqwC0oTdCSmjQ=
Subject key identifier: A7:13:7B:7F:4C:20:D7:E4:BE:F3:97:E4:E5:26:D2:44:FB:C0:EA:96
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018C33C1B3AA4B062E5F2E58C36D72E9C659
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pxN7f0wg1-S-85fk5SbSRPvA6pY.roa
Signing time: Mon 04 Dec 2023 07:36:21 +0000
ROA not before: Mon 04 Dec 2023 07:36:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198231
IP address blocks: 2a13:d902::/32 maxlen: 32
2a13:2dc5::/32 maxlen: 32
2a13:2d41::/32 maxlen: 32
2a0c:d380::/30 maxlen: 30
2a13:c906::/32 maxlen: 32
2a13:c905::/32 maxlen: 32
2a13:d700::/32 maxlen: 32
2a13:2d42::/32 maxlen: 32
2a13:d901::/32 maxlen: 32
2a13:2dc4::/32 maxlen: 32
2a13:d702::/32 maxlen: 32
2a13:c904::/32 maxlen: 32
2a13:c907::/32 maxlen: 32
2a13:2d43::/32 maxlen: 32
2a13:2dc7::/32 maxlen: 32
2a13:d706::/32 maxlen: 32
2a13:d900::/32 maxlen: 32
2a13:d703::/32 maxlen: 32
2a06:35c4::/30 maxlen: 30
2a13:d903::/32 maxlen: 32
2a13:2d40::/32 maxlen: 32
2a13:2d46::/32 maxlen: 32
2a13:2d45::/32 maxlen: 32
2a13:d704::/32 maxlen: 32
2a13:2dc1::/32 maxlen: 32
2a13:2dc2::/32 maxlen: 32
2a13:d906::/32 maxlen: 32
2a13:c902::/32 maxlen: 32
2a13:2d44::/32 maxlen: 32
2a13:c901::/32 maxlen: 32
2a13:d907::/32 maxlen: 32
2a13:d705::/32 maxlen: 32
2a13:d904::/32 maxlen: 32
2a06:35c0::/30 maxlen: 30
2a13:c900::/32 maxlen: 32
2a13:2d47::/32 maxlen: 32
2a13:2dc6::/32 maxlen: 32
2a13:d707::/32 maxlen: 32
2a13:c903::/32 maxlen: 32
2a13:d905::/32 maxlen: 32
2a13:2dc0::/32 maxlen: 32
2a13:d701::/32 maxlen: 32
2a13:2dc3::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:c1:b3:aa:4b:06:2e:5f:2e:58:c3:6d:72:e9:c6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 4 07:36:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7137b7f4c20d7e4bef397e4e526d244fbc0ea96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:32:28:cf:4d:1e:41:a1:0f:e4:cf:9d:da:95:
ee:84:49:fb:d5:c3:41:20:cf:4a:0f:87:9c:ad:9f:
e2:e0:c3:69:0b:20:7f:2d:04:00:85:fb:e8:ca:43:
b3:fb:e4:e9:aa:71:bd:4d:c0:40:e1:11:a6:79:eb:
bb:07:57:42:08:6e:4b:36:c4:58:06:55:9c:12:35:
81:9d:ca:3d:28:50:80:d8:60:d3:e4:8f:91:3b:a4:
9f:41:f5:93:0d:2e:f5:76:13:ea:71:5f:bf:6c:bc:
1a:21:58:59:f5:f7:c4:28:1f:77:a1:13:2c:10:e2:
1b:ce:c5:9e:7a:42:6f:7a:7f:2e:26:3b:4c:17:7c:
70:de:34:ef:13:fc:fe:81:9d:d7:25:d4:4e:75:95:
b3:8e:cd:86:d2:34:1d:6e:d4:d6:2a:b9:19:c8:1d:
85:7a:58:4d:4c:99:40:b9:56:29:3b:fd:b7:7a:f8:
10:0d:c8:a9:2d:fd:32:33:95:92:38:0c:0f:58:67:
c8:d2:2c:48:17:31:ab:cf:50:f8:eb:c9:0a:55:eb:
de:b6:2c:16:39:d6:86:4b:18:00:a7:5e:e2:f8:04:
0f:58:a4:31:5b:66:99:ec:dd:5e:e3:52:6c:a5:56:
7d:17:a0:e0:11:10:b5:fc:1c:70:7e:a8:76:ea:f1:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:13:7B:7F:4C:20:D7:E4:BE:F3:97:E4:E5:26:D2:44:FB:C0:EA:96
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pxN7f0wg1-S-85fk5SbSRPvA6pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:35c0::/29
2a0c:d380::/30
2a13:2d40::/29
2a13:2dc0::/29
2a13:c900::/29
2a13:d700::/29
2a13:d900::/29
Signature Algorithm: sha256WithRSAEncryption
49:51:00:4f:e7:11:e2:83:bf:be:10:64:06:8d:7e:93:9b:ac:
11:b9:f0:e4:70:4a:4b:e8:3f:43:2f:93:09:d0:bd:f9:20:71:
54:5f:0c:1b:c7:23:84:62:9d:a8:b1:df:e4:ec:e6:d1:c0:46:
76:3c:2e:d0:6a:5a:be:1c:9a:70:c0:f8:5e:ec:26:bf:a8:ca:
fa:d4:ba:e0:c3:f2:4a:c4:8a:b8:c2:86:3d:5b:28:5f:f3:60:
bc:f3:48:7c:67:84:db:bc:18:23:14:d3:8e:00:e6:df:66:cc:
73:db:80:2e:2a:30:5d:40:04:fd:4d:88:56:4d:b7:ff:cd:3b:
6d:a6:5f:ff:f2:67:a0:e6:31:57:d1:38:76:af:7a:e1:00:5d:
79:ad:aa:c1:6c:0c:76:d7:7f:8d:37:bd:10:88:b4:03:41:19:
02:16:a6:75:42:72:4b:99:5f:eb:1b:64:d0:f2:b8:45:02:67:
32:8f:36:6d:d6:54:3e:d1:96:3e:e9:96:b8:5f:d5:38:bf:42:
c4:3f:0b:77:e6:5e:54:7c:6d:4a:5e:2e:10:ab:b4:72:3e:65:
ee:10:c8:5f:2d:e1:da:3f:00:eb:8a:d7:64:3a:13:25:da:52:
5d:ac:4f:d9:2d:34:98:ff:f7:fd:c8:08:da:c0:a2:b9:40:56:
be:6e:de:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:32:27 2025 by rpki-client