Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sg9e4_ccCKTh0lAv6seZTMcHYh8.roa
File: sg9e4_ccCKTh0lAv6seZTMcHYh8.roa (raw, json)
Hash identifier: l47n6CGAP+kdg3icr2rwSfv/rKEB35P5ftOkQfLh1FQ=
Subject key identifier: B2:0F:5E:E3:F7:1C:08:A4:E1:D2:50:2F:EA:C7:99:4C:C7:07:62:1F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0186F619204C3E6B145B8B6011C7C259DA8A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sg9e4_ccCKTh0lAv6seZTMcHYh8.roa
Signing time: Sat 18 Mar 2023 19:01:27 +0000
ROA not before: Sat 18 Mar 2023 19:01:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 2a13:1940::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f6:19:20:4c:3e:6b:14:5b:8b:60:11:c7:c2:59:da:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 18 19:01:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b20f5ee3f71c08a4e1d2502feac7994cc707621f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:95:ee:b8:e6:4e:c6:7c:a3:a9:66:32:0e:
9e:f4:9f:d1:6a:25:2e:c1:3a:e5:3f:8e:72:33:5f:
de:a5:ee:c2:92:36:5f:5e:b6:b6:05:bf:1a:34:db:
04:77:ff:bc:1b:ac:6b:3c:dd:7f:2c:88:d0:e3:c3:
30:44:0d:7a:cf:0d:b6:07:47:87:ce:b5:ff:cc:f8:
84:bc:cd:63:94:01:23:db:2a:79:c7:92:45:a3:b2:
61:68:77:f3:ce:74:6e:60:af:87:ea:08:f3:1c:e6:
5b:99:8d:da:6a:36:58:70:4b:9b:39:f7:ae:e7:f4:
3d:02:b9:14:a5:64:e8:32:b0:65:2e:c1:5d:20:0a:
c1:54:08:18:b8:54:53:94:6d:b5:1e:9d:6d:7e:5c:
2f:91:17:47:da:bb:65:07:d1:55:d2:20:d3:f5:1c:
05:ec:67:6e:0e:e8:ee:ea:36:97:9d:e7:29:97:3c:
68:f7:2d:1a:90:40:bd:9f:49:4a:22:95:98:0b:b2:
f1:81:1b:79:9c:ee:e5:3b:03:91:7f:46:72:e3:86:
9b:1a:9b:d8:5a:db:1f:e0:92:3a:8a:5d:f0:40:15:
16:bb:17:38:8d:73:ab:8e:89:4a:5c:ed:bc:80:7b:
0e:11:a2:f2:b9:34:90:94:6b:c5:6d:6e:6d:a7:6c:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0F:5E:E3:F7:1C:08:A4:E1:D2:50:2F:EA:C7:99:4C:C7:07:62:1F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sg9e4_ccCKTh0lAv6seZTMcHYh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1940::/29
Signature Algorithm: sha256WithRSAEncryption
84:f0:13:c9:bd:fb:18:36:58:74:c8:25:4a:f8:2e:27:a5:bd:
f2:dc:a8:4f:2c:cd:62:a9:1b:9f:97:9c:4d:91:98:66:7d:6c:
1a:a4:aa:c3:92:11:69:2d:92:1a:35:85:43:b3:1f:dd:ba:b2:
27:3a:68:34:e1:61:0f:3e:87:ad:fb:0a:15:97:27:82:e8:e5:
41:40:2c:fe:8c:f9:9d:91:97:38:7e:77:0f:e4:a7:9d:74:0d:
7a:f0:7b:10:37:c7:16:ca:4d:12:08:c3:4d:fc:f6:32:7c:67:
ce:05:fd:21:6f:f5:b7:97:03:e2:26:a2:1b:88:e5:41:67:7c:
5d:51:37:b2:15:5b:d3:f0:26:a6:53:a5:f2:e2:80:bf:bb:11:
38:70:f5:13:67:de:87:8f:f0:fa:90:0d:eb:da:2e:75:d9:71:
8c:6e:91:0b:ca:14:5a:60:02:52:83:6f:8e:53:87:02:b5:13:
62:27:50:5c:85:9f:66:34:23:fe:58:16:df:7f:24:18:0b:c6:
b0:ce:d2:0d:c8:63:be:dd:61:b5:90:5d:de:f5:20:b6:c8:ef:
40:d2:c7:c8:aa:65:95:fe:af:a5:6e:f1:db:ef:db:f8:4b:fb:
9a:36:ef:77:3a:ac:88:62:35:c7:bb:27:33:79:64:ae:cd:49:
56:65:1a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:04:53 2025 by rpki-client