Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sVjJ9jk12Jg7aSndGi6YoBCZeQ4.roa
File: sVjJ9jk12Jg7aSndGi6YoBCZeQ4.roa (raw, json)
Hash identifier: gx+Z4QYLIxHyXAGLXhx4srKg0xSV6mPtTguBacZp5fk=
Subject key identifier: B1:58:C9:F6:39:35:D8:98:3B:69:29:DD:1A:2E:98:A0:10:99:79:0E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0189729D70067D8C81E906AC71452209730D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sVjJ9jk12Jg7aSndGi6YoBCZeQ4.roa
Signing time: Thu 20 Jul 2023 09:24:27 +0000
ROA not before: Thu 20 Jul 2023 09:24:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a0f:7d00:1::/48 maxlen: 48
2a12:d6c1::/32 maxlen: 32
2a0a:2d00:1::/48 maxlen: 48
2a0c:7884::/32 maxlen: 32
2a0f:ea00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:9d:70:06:7d:8c:81:e9:06:ac:71:45:22:09:73:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 20 09:24:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b158c9f63935d8983b6929dd1a2e98a01099790e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d5:e2:48:ac:7e:7f:a6:45:b6:20:c0:4b:04:
e6:3c:a6:50:b1:7b:75:0c:b1:f7:00:fd:01:39:cf:
44:a0:0d:7f:ac:8a:cc:ad:a4:6a:e0:a8:0d:89:cb:
4c:eb:69:75:a1:37:eb:d1:bc:ea:f5:3a:c9:0f:00:
c9:a1:8b:bf:8e:a7:5e:d8:e8:90:e3:54:5c:61:39:
06:bf:23:ac:ee:c2:b0:e4:31:d4:d1:ba:62:0c:65:
a1:75:bf:42:6a:dd:24:01:22:0b:47:6a:64:ea:2e:
7c:a5:13:8c:80:5d:90:10:c8:18:82:ed:77:65:24:
20:89:54:a6:f8:29:32:93:68:f5:2f:cf:f0:57:cf:
ce:8d:dd:2d:15:cf:a2:b7:35:59:1a:84:07:e1:51:
b4:81:2c:91:14:e9:ab:26:a7:4f:67:be:a1:1a:7c:
a8:d7:03:cb:cd:8c:d4:b0:42:9b:9b:2c:3d:0b:20:
72:e3:72:04:62:d0:8d:f2:ff:55:18:7f:ad:15:67:
0d:c0:f6:1f:31:1e:70:f0:2f:f8:dd:94:09:23:90:
91:42:bd:ee:15:9c:92:6e:89:26:0f:1a:22:0c:36:
14:52:1b:7a:9f:da:50:59:e9:f5:b9:c9:04:a7:b7:
f6:99:a7:dc:bd:56:3f:f2:2c:62:21:16:13:d6:b9:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:58:C9:F6:39:35:D8:98:3B:69:29:DD:1A:2E:98:A0:10:99:79:0E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sVjJ9jk12Jg7aSndGi6YoBCZeQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d00:1::/48
2a0c:7884::/32
2a0f:7d00:1::/48
2a0f:ea00::/29
2a12:d6c1::/32
Signature Algorithm: sha256WithRSAEncryption
1d:d0:61:9a:6e:8c:2b:04:ac:ad:eb:cc:38:aa:40:52:f1:9e:
60:b0:74:ce:f2:b4:f4:71:8a:1b:4d:41:25:e0:d5:cf:08:52:
4e:d5:d1:44:28:8e:aa:5b:20:2a:6e:cb:12:ba:44:3f:53:f1:
28:55:5a:fe:4e:35:08:87:6a:fa:95:0e:df:dd:0b:2a:f7:db:
b9:2c:88:22:a9:2f:91:f6:67:8f:ad:b9:bc:9a:cf:36:e0:48:
93:bc:4a:96:ec:dc:8f:6d:34:e9:f4:2e:9b:e3:4d:f4:2f:18:
f8:73:f6:eb:8c:18:a4:49:62:37:a1:29:86:52:c4:4c:20:5b:
c3:53:dc:42:da:13:fa:7c:2c:9e:98:70:5b:1e:5f:d8:e4:41:
08:ea:b1:ce:1e:20:f7:97:c5:db:a8:db:ce:1a:7a:be:15:0f:
fa:af:e6:68:8d:53:2f:79:c7:7f:85:f1:89:fe:e5:ae:40:08:
a0:c2:a0:a8:49:e7:01:d4:6e:94:bb:1c:05:a2:4e:c4:84:5a:
40:df:6d:77:7c:25:e6:d5:92:b4:4b:7a:7d:06:f2:22:14:48:
e1:b0:56:43:74:e7:e0:47:5b:c7:42:9b:65:ad:68:d0:7e:15:
d9:25:07:5f:89:93:f0:c8:41:1b:ba:44:bf:24:46:45:59:67:
85:26:11:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:14 2025 by rpki-client