Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sxCs6P7eQInIxFMV8CnUSZ7Omr0.roa
File: sxCs6P7eQInIxFMV8CnUSZ7Omr0.roa (raw, json)
Hash identifier: figrBPm0bgnVc5GJsd2FU0WzZ4JAR8ktftB6Ore9aO4=
Subject key identifier: B3:10:AC:E8:FE:DE:40:89:C8:C4:53:15:F0:29:D4:49:9E:CE:9A:BD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018B2E360C277C2C4E2F51E725F7AC99A1F5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sxCs6P7eQInIxFMV8CnUSZ7Omr0.roa
Signing time: Sat 14 Oct 2023 12:42:55 +0000
ROA not before: Sat 14 Oct 2023 12:42:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61335
IP address blocks: 2a13:9180::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2e:36:0c:27:7c:2c:4e:2f:51:e7:25:f7:ac:99:a1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 14 12:42:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b310ace8fede4089c8c45315f029d4499ece9abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:53:38:f0:06:a3:3a:8f:60:3b:ca:47:07:
ed:03:02:84:c3:46:8f:e6:e2:5e:c7:9a:09:0f:8d:
bf:85:70:12:3a:fb:2b:43:a0:6d:63:81:d4:f8:fe:
f7:38:b9:89:90:36:2a:3d:68:10:f5:21:b7:34:60:
e5:89:cf:50:3e:d5:c5:58:8d:00:1f:d7:ae:fc:fa:
b8:d8:c2:1c:53:1a:c4:d8:07:f0:06:ea:fe:c6:2f:
5c:11:fb:48:77:cd:94:19:03:d4:00:f5:4b:4c:d3:
39:3d:b4:fa:07:42:1c:8b:6f:83:43:86:cf:7f:86:
34:af:d3:60:c4:1c:fa:41:dc:d6:30:ad:a9:2c:da:
72:bd:21:ad:fc:c6:8f:7a:3e:e5:26:86:a3:70:54:
54:9a:cf:71:bb:b3:75:27:46:c0:eb:9c:65:c3:8a:
6d:4d:f0:31:50:c8:41:92:a9:29:29:9f:d1:af:da:
81:31:6d:a7:70:33:9e:9b:e9:e9:a7:96:da:59:6c:
a2:3e:a0:63:6d:ea:2f:a2:24:46:1c:fa:19:f6:78:
33:24:fe:15:c8:a6:71:2a:be:28:b2:f9:a0:42:3e:
21:06:f1:67:57:40:71:56:e0:e8:27:88:84:ff:a0:
48:72:99:cd:cd:dd:7b:54:96:9c:83:53:14:b1:75:
24:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:10:AC:E8:FE:DE:40:89:C8:C4:53:15:F0:29:D4:49:9E:CE:9A:BD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sxCs6P7eQInIxFMV8CnUSZ7Omr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9180::/29
Signature Algorithm: sha256WithRSAEncryption
86:33:63:4a:ac:46:40:03:fd:10:7f:b9:c2:f1:0e:53:d8:98:
56:e9:61:48:6e:86:f5:4a:88:50:b0:76:e9:a1:d2:46:dd:78:
dc:58:ec:f1:94:b7:3b:d0:e7:31:15:9c:85:51:dc:9a:a3:4a:
40:70:da:77:e2:d2:20:1c:85:ce:74:2e:c7:75:82:83:1a:c7:
e1:c1:0b:af:21:99:96:8f:ff:cd:9d:05:30:c5:11:cc:15:e2:
6f:ed:3c:49:af:b4:ce:72:e5:7b:c3:9b:8a:04:a4:c3:a6:6b:
78:b6:b4:be:03:db:a2:42:de:ba:e6:67:3c:69:3d:96:77:d5:
53:0a:c5:cb:ca:2a:7b:4c:61:b8:9d:e1:0a:ee:12:e5:25:28:
35:0b:a8:fc:c1:68:53:07:e3:e2:96:61:98:12:cf:6c:74:bf:
fb:e4:cf:0f:a4:85:82:96:34:ab:a1:34:80:60:ee:33:5f:e6:
fe:3f:d8:b2:00:46:05:51:6c:97:5c:1a:27:1d:e5:59:42:9e:
cf:eb:f2:64:f0:13:0c:17:0e:06:33:79:4a:5b:a8:92:4a:96:
41:d1:4b:08:f3:ba:fa:59:05:7d:f2:ef:82:b2:8c:c9:a6:f0:
68:67:04:d0:e6:bd:2c:a8:0d:8e:dd:18:95:10:d7:b2:33:b7:
15:5b:ad:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:47 2025 by rpki-client