Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qvvSiAc_1zJ_CUmOn1jY6p4RR7E.roa
File: qvvSiAc_1zJ_CUmOn1jY6p4RR7E.roa (raw, json)
Hash identifier: D7Ve8pQpgtRKEmv+CzK2rq+vQCUW6HYRLCAXNRAgqDg=
Subject key identifier: AA:FB:D2:88:07:3F:D7:32:7F:09:49:8E:9F:58:D8:EA:9E:11:47:B1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 036FBF4C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qvvSiAc_1zJ_CUmOn1jY6p4RR7E.roa
Signing time: Sun 05 Jun 2022 12:33:20 +0000
ROA not before: Sun 05 Jun 2022 12:33:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205544
IP address blocks: 2a0f:e440::/29 maxlen: 29
2a12:ecc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57655116 (0x36fbf4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 5 12:33:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aafbd288073fd7327f09498e9f58d8ea9e1147b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:e6:73:9a:73:a8:67:b6:a2:55:b0:09:df:
3d:b3:65:01:d5:cc:b3:e7:06:bc:c6:2a:8e:96:ca:
0d:60:d9:d5:15:d9:ac:42:ac:84:0d:a7:31:b8:28:
23:d2:fb:78:d2:13:7f:dd:32:9f:4c:e2:19:05:54:
ac:ee:0f:76:c7:ce:6c:e4:77:f9:19:f9:7d:bb:d6:
20:92:06:8f:4d:ea:0d:ff:d1:89:42:92:3a:c0:3c:
be:b0:71:3d:73:99:69:31:e4:ea:b3:1e:d3:5e:34:
a2:e3:41:a1:31:b9:72:eb:43:ca:b9:80:3c:aa:3d:
20:10:f5:f2:b0:8e:b8:c4:b1:db:dc:af:5a:8a:7a:
9e:82:d1:0c:f4:ea:52:d0:07:8d:c1:c7:40:38:97:
0a:66:13:15:83:27:e4:9f:ef:e3:76:12:fa:9d:6f:
a2:46:51:28:91:5f:6a:ac:af:cf:8d:2f:87:0b:fe:
6e:cf:bd:c7:c3:19:d6:ab:02:80:40:3a:1d:14:f2:
b5:4a:d7:21:60:75:8e:66:68:af:75:b1:37:0c:27:
80:e3:c0:ae:59:aa:fa:fc:ec:38:65:e8:22:af:43:
17:20:8e:d4:b8:df:bb:6a:4e:0c:07:b4:04:91:d4:
ba:30:76:7a:d4:4e:a9:2e:40:5e:64:59:42:b9:b2:
8b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FB:D2:88:07:3F:D7:32:7F:09:49:8E:9F:58:D8:EA:9E:11:47:B1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qvvSiAc_1zJ_CUmOn1jY6p4RR7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e440::/29
2a12:ecc0::/29
Signature Algorithm: sha256WithRSAEncryption
88:33:09:cb:27:11:80:49:b4:d5:48:9e:ce:52:e5:95:ba:4d:
fc:47:fe:1d:f6:37:14:07:b7:0c:81:b0:0f:fc:c8:0c:fa:1a:
f0:0e:ce:32:e5:e3:ca:da:a7:56:a4:39:b4:11:b7:70:9b:56:
87:5b:1e:8c:e3:f4:89:00:d7:66:53:40:4c:0c:6c:68:f3:9e:
90:79:c8:cf:bf:32:6e:b2:a4:53:e6:21:45:e7:cb:7d:d4:84:
8c:8c:76:cc:12:f5:ed:0e:fd:1d:9b:83:ed:03:a6:c0:f6:83:
29:c0:e7:54:81:3f:b5:f3:46:75:cc:80:22:d4:34:08:d6:eb:
c8:a7:49:11:ad:ee:7b:a8:13:ed:63:f2:4d:46:ff:f3:8e:64:
33:e4:1f:3e:74:da:fa:fd:e4:30:a6:e6:5b:f3:70:72:37:fe:
26:b3:73:31:d8:19:f9:cc:f3:d0:a0:e0:fc:70:b1:1d:f0:9c:
c0:5a:fc:18:1c:7c:63:ab:e8:93:fa:f8:23:09:38:9a:ee:f5:
0a:d0:3f:76:45:90:5f:67:02:c7:89:5a:d6:2b:da:68:ab:49:
40:6c:b9:17:fb:99:b6:ce:f2:b9:76:7a:77:fc:1f:28:47:c3:
eb:6c:f4:ab:a0:33:11:5b:9f:85:ac:8a:75:c0:b0:d4:d4:e1:
47:e1:20:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:30 2025 by rpki-client