Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qwEYGQo7Hwp4hk9cGg5cVqyU33c.roa
File: qwEYGQo7Hwp4hk9cGg5cVqyU33c.roa (raw, json)
Hash identifier: 71fvJOd0S3vtkKnIrX500hfmSn+EtwXVcMwoDl4mah8=
Subject key identifier: AB:01:18:19:0A:3B:1F:0A:78:86:4F:5C:1A:0E:5C:56:AC:94:DF:77
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018700E170ECCFE7892C410729D99500F990
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qwEYGQo7Hwp4hk9cGg5cVqyU33c.roa
Signing time: Mon 20 Mar 2023 21:16:27 +0000
ROA not before: Mon 20 Mar 2023 21:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 2a12:eb40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:00:e1:70:ec:cf:e7:89:2c:41:07:29:d9:95:00:f9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 20 21:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab0118190a3b1f0a78864f5c1a0e5c56ac94df77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:16:30:bc:b9:de:00:d1:16:d7:e5:97:55:
c1:49:96:97:79:f4:63:98:46:10:ba:16:a9:07:00:
fe:ed:e2:cc:59:59:c2:c1:ad:61:28:76:c6:59:c4:
aa:4f:8f:7a:23:df:e7:9c:e2:9b:ca:30:e9:2e:6e:
91:24:eb:3f:f5:3c:45:fd:c5:01:c0:89:d7:ef:c5:
10:37:1a:5c:3f:96:b6:2a:83:8b:ed:2e:56:96:2a:
10:e6:8e:2b:c0:e7:0f:70:ab:39:5e:be:2a:5e:0d:
f4:8a:d8:fa:5b:9e:ca:5c:14:af:f0:d8:5b:f4:00:
c6:21:60:6a:7b:3f:68:78:ef:de:4d:64:42:ce:84:
c3:17:68:29:02:76:e6:c4:66:ba:54:1d:da:f4:03:
a5:3b:a7:1b:ca:5b:40:19:e1:9f:96:68:46:02:a3:
ba:db:98:f4:4f:e3:cb:74:0a:df:04:2a:06:80:4f:
2d:90:d8:18:f3:a0:ad:39:b2:83:84:e1:a4:d4:82:
7b:f7:39:b8:82:37:d2:0a:70:b2:f5:94:6a:f3:6b:
88:76:d6:c1:a2:86:f8:6c:d4:02:99:5e:bd:e6:00:
34:27:da:94:86:15:72:d3:bc:59:5d:33:d0:af:19:
65:dc:d0:f6:14:83:34:0c:3b:5a:8f:48:13:eb:0b:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:01:18:19:0A:3B:1F:0A:78:86:4F:5C:1A:0E:5C:56:AC:94:DF:77
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qwEYGQo7Hwp4hk9cGg5cVqyU33c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:eb40::/29
Signature Algorithm: sha256WithRSAEncryption
6c:56:68:9c:d2:4b:b4:5f:29:eb:f6:a7:e2:e2:fb:c8:6a:2b:
04:b9:03:ba:62:5d:53:46:89:77:d1:0f:12:16:b7:34:dd:2c:
99:76:e9:84:15:85:7e:ce:5c:35:4b:26:a6:da:f5:86:ba:e8:
12:85:81:ac:bd:1d:6c:78:87:30:29:90:16:57:c3:de:a1:a4:
e5:0a:a2:bd:6d:c9:6d:ca:ea:9b:fb:c4:72:54:bf:bd:83:f4:
4b:1a:44:99:e0:ed:89:b5:7b:cd:67:00:74:26:ec:a6:4c:1c:
08:b7:a1:99:8b:01:ad:86:64:c3:7f:af:43:db:6f:a1:74:0a:
c1:c6:5b:38:7a:b2:7b:c7:19:36:1b:d2:95:e9:d3:68:6d:9e:
9e:02:ea:05:c3:68:58:a4:a0:08:5c:24:2e:e0:5d:9e:8b:82:
ee:ec:b8:b0:b8:58:ae:0f:5c:98:a3:ac:c0:2a:06:b1:e6:91:
0d:c3:b4:8b:9d:31:ba:24:53:63:f8:f3:5e:68:8b:83:a1:3d:
3b:40:bf:60:d8:53:01:f2:d5:bd:e3:f3:a6:97:da:aa:18:1d:
9a:dd:6e:f4:8c:1f:ea:25:01:a5:a7:76:bf:09:00:de:c1:c6:
f7:fe:ac:e1:db:6e:f6:b5:ef:1e:8d:3b:00:f3:f0:7b:3e:b9:
b5:d4:35:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:35 2025 by rpki-client