Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rCqFm-Tp75xUgifUKQfmq_ABtZ8.roa
File: rCqFm-Tp75xUgifUKQfmq_ABtZ8.roa (raw, json)
Hash identifier: kHR9C2LrLJ9eLQeP8OaZZMVERtDZlr1UFbvzb6RNdFQ=
Subject key identifier: AC:2A:85:9B:E4:E9:EF:9C:54:82:27:D4:29:07:E6:AB:F0:01:B5:9F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018B7167481FF17096A7CDFAD73704770BDB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rCqFm-Tp75xUgifUKQfmq_ABtZ8.roa
Signing time: Fri 27 Oct 2023 13:51:15 +0000
ROA not before: Fri 27 Oct 2023 13:51:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205544
IP address blocks: 2a0f:e6c6:1::/48 maxlen: 48
2a13:e101:1::/48 maxlen: 48
2a0f:e1c0:1::/48 maxlen: 48
2a13:3380:1::/48 maxlen: 48
2a0f:e6c7:1::/48 maxlen: 48
2a0f:e6c5:1::/48 maxlen: 48
2a13:e100:1::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a07:f302:d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:67:48:1f:f1:70:96:a7:cd:fa:d7:37:04:77:0b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 27 13:51:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac2a859be4e9ef9c548227d42907e6abf001b59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ee:83:4d:a4:62:e4:a4:60:74:fb:d0:5f:c5:
24:88:89:83:2c:a9:ae:ad:2e:3c:5a:fc:9e:6f:f5:
19:b7:7a:dc:05:6d:24:e0:0e:aa:df:99:d5:9c:46:
be:45:d6:96:08:2a:2a:4e:22:ca:df:7b:33:3f:93:
d2:ae:ee:32:a1:c5:d4:4c:e9:46:76:65:19:17:c8:
39:68:d3:2b:27:cd:c4:58:8b:c5:93:d5:39:95:0f:
2c:20:ed:df:15:f4:38:f4:14:0a:e3:e6:91:08:ac:
99:5c:50:49:7c:3c:27:72:a4:28:c9:56:ee:55:b2:
ec:7d:f7:87:0e:af:cc:53:72:de:fb:62:03:a8:b5:
cb:01:68:76:ab:28:0b:5b:8d:80:ee:93:bf:a8:45:
ee:01:a9:2e:9d:89:87:f8:4e:d7:0a:bf:48:cd:a2:
04:cb:5e:46:4d:e1:90:9a:0a:59:93:b4:9e:56:1f:
db:bb:31:86:dc:60:82:56:bd:67:ca:d3:de:f9:8d:
6b:a3:bd:5b:8f:b1:7f:fe:d5:2b:4a:21:ab:09:1e:
5c:08:d1:40:5d:7f:ad:4b:57:3e:7e:64:6d:17:04:
66:6d:16:35:4b:a6:8a:27:e9:36:43:35:f5:c5:99:
83:39:09:5b:8e:98:7d:28:fe:10:ed:dc:ab:e8:48:
39:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2A:85:9B:E4:E9:EF:9C:54:82:27:D4:29:07:E6:AB:F0:01:B5:9F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rCqFm-Tp75xUgifUKQfmq_ABtZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f302:d::/48
2a0f:e1c0:1::/48
2a0f:e440::/29
2a0f:e6c5:1::/48
2a0f:e6c6:1::/48
2a0f:e6c7:1::/48
2a13:3380:1::/48
2a13:e100:1::/48
2a13:e101:1::/48
Signature Algorithm: sha256WithRSAEncryption
bd:53:87:74:08:df:e3:23:90:c2:f9:d5:d2:8e:09:89:6c:cb:
28:67:fc:fa:70:bd:1d:76:3a:da:29:88:e5:da:b3:89:65:f4:
db:68:59:8a:b6:32:64:04:a2:83:7d:54:cb:06:7c:da:5c:21:
f8:7c:2f:25:a2:ed:be:bf:19:ed:33:e4:2c:bc:0d:2d:a7:39:
20:e7:0f:81:e0:2f:d5:8a:5c:1e:7f:20:b0:1f:8a:b6:58:38:
8b:f0:66:7a:6b:8a:d4:7c:c9:57:52:7a:69:51:d1:45:0d:ef:
d6:a1:a3:49:68:7b:a5:91:0f:83:5d:67:4a:ca:22:9a:b3:d7:
eb:02:9d:91:ea:33:b9:08:3a:a5:7d:29:79:ce:42:69:30:40:
d2:23:64:e1:1c:21:d1:0b:f5:08:9c:8f:6a:2f:81:0b:e6:2f:
ce:7d:02:d7:c7:5a:ca:a1:11:fc:33:7e:96:15:b7:8c:fe:03:
cf:9a:98:d7:ce:b3:71:3d:92:3f:23:90:dd:a8:f6:13:d7:6d:
d2:d2:e5:94:af:e0:8f:63:0e:7f:00:41:f3:a6:72:19:03:3f:
57:d1:60:72:e5:0a:e7:23:a9:70:45:15:dc:f3:63:76:99:17:
b6:4e:92:c4:a9:e6:03:fd:10:d7:4b:14:4d:e8:ea:24:a3:aa:
b8:4e:78:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:48:26 2025 by rpki-client