Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sVbtXlPIFJFW5yKJLAw5Y81-AxM.roa
File: sVbtXlPIFJFW5yKJLAw5Y81-AxM.roa (raw, json)
Hash identifier: /SOu4ilLLlTBfyx7Xkzm2Iy3TFip/arnE/nwDySttXs=
Subject key identifier: B1:56:ED:5E:53:C8:14:91:56:E7:22:89:2C:0C:39:63:CD:7E:03:13
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018AB7F31AEB070DEBA19F646D5FE05C4FE4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sVbtXlPIFJFW5yKJLAw5Y81-AxM.roa
Signing time: Thu 21 Sep 2023 13:34:37 +0000
ROA not before: Thu 21 Sep 2023 13:34:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 2a0f:4f80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:f3:1a:eb:07:0d:eb:a1:9f:64:6d:5f:e0:5c:4f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 21 13:34:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b156ed5e53c8149156e722892c0c3963cd7e0313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:aa:96:03:2c:71:aa:b5:33:89:48:3a:63:e8:
60:1e:b1:c1:80:80:72:6b:c3:5e:f8:0d:6c:04:69:
67:9c:1f:b2:d0:ce:e3:1e:f7:29:78:28:21:c2:6c:
09:2a:6d:30:10:f3:a0:10:96:6b:80:9e:62:92:1f:
3c:94:23:06:38:6e:5e:b3:b0:4b:fc:67:df:f2:a1:
00:b2:63:b4:f8:61:d0:19:50:ce:45:7c:03:bb:08:
8d:2c:78:8e:21:69:37:fe:a8:85:56:81:d2:8c:c6:
65:29:9a:9a:37:05:8c:14:b6:72:c3:a8:ca:ae:34:
7b:4f:d6:cd:f6:bc:55:bf:a4:e8:a0:8f:0a:b1:6a:
64:18:35:bb:85:49:69:64:11:cb:d6:5e:40:cc:0d:
d5:5f:f3:fb:29:5d:6d:dd:2b:20:68:27:20:85:4a:
b2:b5:42:b8:56:8a:a6:64:04:a6:2f:ee:25:53:08:
f2:23:8e:1b:80:ba:ac:95:0e:45:ff:db:40:d9:e1:
cd:3f:46:59:d9:a7:62:64:46:e7:54:08:34:8e:57:
30:3b:77:aa:ec:5e:23:ff:9b:d8:0b:d1:6b:ef:82:
08:11:d2:44:9d:ab:ea:84:b1:02:59:b0:8d:22:e1:
c0:be:1f:99:70:cb:50:0f:28:01:b7:8b:67:e2:63:
8d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:56:ED:5E:53:C8:14:91:56:E7:22:89:2C:0C:39:63:CD:7E:03:13
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sVbtXlPIFJFW5yKJLAw5Y81-AxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4f80::/29
Signature Algorithm: sha256WithRSAEncryption
98:68:20:2a:ef:a3:c7:19:70:8b:8c:54:8c:fe:c0:ba:7e:10:
2e:9b:78:9a:e2:23:4d:a5:da:99:6a:47:f3:83:9c:01:46:6d:
c3:7e:7d:7d:3b:b3:7a:ee:98:aa:dd:d1:8b:8f:70:bb:b5:3f:
2e:1c:88:84:cb:e9:c0:30:cb:3c:63:37:be:0c:96:c4:df:fe:
27:28:42:59:e7:51:cd:06:15:fd:31:cc:2b:e9:d8:57:ad:51:
10:bf:19:08:c6:61:08:05:2e:d3:0b:43:58:31:d4:f6:69:78:
29:2b:ac:9e:b8:91:13:8e:da:d6:83:39:bf:11:48:e3:6b:56:
2a:0b:74:aa:06:06:b1:f6:78:b1:af:88:44:50:0b:f2:06:b7:
5f:e2:4a:85:38:66:9e:36:9b:65:7b:d0:b6:da:87:e9:2f:a4:
76:03:1a:3b:eb:f6:22:16:b5:be:7e:ed:6d:24:d7:d5:7a:3c:
e5:3a:31:df:94:9e:a9:59:c2:1b:f3:78:75:42:26:c0:dc:e8:
c2:c0:ab:55:02:4a:32:3e:6e:72:3d:32:0f:60:b0:b3:a6:d6:
93:5f:d7:e3:30:17:3d:c9:e8:d1:a2:44:5d:38:b7:ba:16:6f:
81:1d:31:8e:e1:b8:d4:86:35:8c:26:d6:de:95:d8:db:0c:d8:
f9:da:1c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:34 2025 by rpki-client