Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/q7ULaZfJwrBr--u812AUz2PpboM.roa
File: q7ULaZfJwrBr--u812AUz2PpboM.roa (raw, json)
Hash identifier: YD/cIxR3qJd6ECUk7uH7W6IJW+apSKINDR8+Z3FA4nw=
Subject key identifier: AB:B5:0B:69:97:C9:C2:B0:6B:FB:EB:BC:D7:60:14:CF:63:E9:6E:83
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018C9C16F104E89F71EBC3AE1513939F00BD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/q7ULaZfJwrBr--u812AUz2PpboM.roa
Signing time: Sun 24 Dec 2023 13:49:58 +0000
ROA not before: Sun 24 Dec 2023 13:49:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216157
IP address blocks: 2a0a:2344::/32 maxlen: 32
2a0a:2340::/32 maxlen: 32
2a0c:d384::/30 maxlen: 30
2a07:a306::/32 maxlen: 32
2a07:a305::/32 maxlen: 32
2a07:a302::/32 maxlen: 32
2a07:a301::/32 maxlen: 32
2a0a:2343::/32 maxlen: 32
2a0a:2345::/32 maxlen: 32
2a07:a304::/32 maxlen: 32
2a07:a307::/32 maxlen: 32
2a07:a300::/32 maxlen: 32
2a0a:2342::/32 maxlen: 32
2a0a:2346::/32 maxlen: 32
2a0a:2347::/32 maxlen: 32
2a07:a303::/32 maxlen: 32
2a0a:2341::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9c:16:f1:04:e8:9f:71:eb:c3:ae:15:13:93:9f:00:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 24 13:49:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abb50b6997c9c2b06bfbebbcd76014cf63e96e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7f:4a:6b:be:44:25:a0:55:89:0d:36:38:71:
be:88:83:7e:f1:12:5f:b6:bc:f5:3e:3b:a8:a3:cc:
7b:19:1c:c7:48:d6:d4:ac:78:b3:a3:24:a0:1e:8a:
19:75:12:32:2f:6a:d1:6c:6b:08:ed:00:56:d6:2e:
20:ee:11:5d:12:63:b2:f6:b7:e9:a2:84:19:e6:2a:
ee:10:5b:b4:64:18:44:59:ea:07:f2:c0:85:6e:f9:
3f:a5:4f:16:1c:2f:8c:2d:b2:80:6f:f3:84:eb:17:
68:5f:92:a6:80:53:d6:59:3b:9f:60:8d:1b:0a:5b:
0b:36:13:71:fd:4d:24:c5:a5:1f:df:70:37:b7:cd:
94:dd:12:5c:30:dd:14:db:0b:03:1c:d5:43:39:4b:
09:16:fe:c6:7b:f9:64:b5:81:ff:f4:af:5f:04:f8:
a2:12:b8:dc:9b:73:44:dc:83:06:e5:7f:1c:32:60:
e7:05:f0:9b:ae:76:38:39:92:f3:da:d6:42:76:95:
d4:0f:48:2f:5d:e6:74:48:f9:d2:08:01:4d:9d:bd:
6a:23:c1:e5:5d:95:d3:58:9b:de:38:62:a2:e5:7a:
41:5b:6d:8b:ec:fe:ca:cb:9b:4b:ec:43:54:8c:a6:
a3:5a:99:52:08:82:bd:72:bd:76:5b:b4:c7:f2:61:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B5:0B:69:97:C9:C2:B0:6B:FB:EB:BC:D7:60:14:CF:63:E9:6E:83
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/q7ULaZfJwrBr--u812AUz2PpboM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:a300::/29
2a0a:2340::/29
2a0c:d384::/30
Signature Algorithm: sha256WithRSAEncryption
93:9c:c3:d4:41:1b:71:8f:06:ea:d0:74:a8:ee:6f:74:25:6a:
0b:14:85:b6:6d:86:6a:10:8f:b6:72:2a:72:e0:12:cb:4a:cb:
25:0a:de:60:b3:22:08:7b:44:df:34:81:8f:21:8c:b6:71:15:
85:6b:66:53:9f:b3:bb:9b:fa:77:76:16:70:cb:f7:43:b8:d7:
5a:9e:dc:d1:ec:a5:18:dd:bc:e3:08:2d:d5:b3:52:b5:13:15:
79:1b:ae:51:e3:8a:bb:34:00:ba:33:cb:ca:26:43:45:66:92:
51:20:17:f2:d2:3d:02:34:df:ef:e4:87:b7:45:a8:9c:38:60:
f8:3a:6c:2e:b2:a1:28:e9:d0:62:4c:cf:24:c5:83:14:eb:7d:
3f:20:3e:b3:7b:bf:95:37:ca:97:9b:5a:70:7c:3d:0e:04:af:
aa:be:e1:01:4d:39:c4:d0:6f:5c:3d:95:9e:be:a9:86:27:35:
d0:80:de:27:bf:3c:45:91:e5:35:af:c0:24:3a:7f:90:37:8e:
05:e5:ab:0f:1e:07:0c:90:13:bd:f4:f7:63:10:68:09:75:9c:
a2:55:41:bb:28:ab:7c:5c:be:ea:0c:db:61:dc:82:55:d9:39:
1f:38:0f:f0:5c:c8:e3:64:87:4c:53:bb:17:27:0d:61:15:a1:
4e:f9:9f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:06 2025 by rpki-client