Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/t5KqFr3fUSehw9o2bPfuWCUmrhg.roa
File: t5KqFr3fUSehw9o2bPfuWCUmrhg.roa (raw, json)
Hash identifier: 193hh5eL8yH9zXDUZGs3qKrvN1tvg2bONcJSGBM+afc=
Subject key identifier: B7:92:AA:16:BD:DF:51:27:A1:C3:DA:36:6C:F7:EE:58:25:26:AE:18
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0183D068DCDA71EB4131BCEFA812E9E93AC0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/t5KqFr3fUSehw9o2bPfuWCUmrhg.roa
Signing time: Thu 13 Oct 2022 08:14:36 +0000
ROA not before: Thu 13 Oct 2022 08:14:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30633
IP address blocks: 2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0f:3d84::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:3d80:123::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a12:f540::/29 maxlen: 29
2a12:ac40::/29 maxlen: 29
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0f:1e81:1293::/48 maxlen: 48
2a0c:9240::/29 maxlen: 29
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0e:c780::/29 maxlen: 29
2a0f:2100::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:e842::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:68:dc:da:71:eb:41:31:bc:ef:a8:12:e9:e9:3a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 13 08:14:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b792aa16bddf5127a1c3da366cf7ee582526ae18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a3:2d:ce:48:2d:8b:9c:3c:89:0e:10:27:a9:
52:87:98:09:ed:6c:ea:a2:d0:d8:b7:04:28:16:65:
3e:cc:f7:6f:7a:cb:75:e2:3e:f2:e1:9e:11:b0:aa:
5d:23:89:10:76:00:55:eb:ca:1e:9b:52:fa:75:d6:
17:5f:9c:9b:d0:fc:e4:29:94:0d:23:2c:da:90:52:
fb:cd:c2:38:5e:72:fe:24:02:13:34:fd:ca:61:52:
81:c3:9e:eb:24:ed:87:71:92:ff:79:c6:36:a0:9e:
4f:21:4d:13:60:61:14:6c:71:e4:f1:49:09:a1:4b:
96:4b:ef:80:92:af:d0:a8:8f:9a:da:bf:a6:c9:13:
61:5d:62:84:ea:b7:4c:0f:30:e4:ef:6b:fc:86:94:
30:b9:06:e8:08:27:b4:01:f6:3c:20:76:e1:dd:47:
7e:f2:53:7e:e9:6a:15:d8:2c:a7:a9:e5:75:54:ce:
2b:da:04:92:3e:fe:1c:5c:07:80:06:f7:58:95:75:
1b:95:ee:8d:61:dd:e7:b2:4b:d4:de:6c:f8:61:38:
a0:3a:46:83:8f:58:67:b9:bd:91:da:ef:6c:ac:38:
70:71:0d:c4:77:39:79:03:a8:58:58:72:80:a7:60:
1c:14:b9:c1:b5:26:c3:bf:7c:8f:e1:67:46:86:13:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:92:AA:16:BD:DF:51:27:A1:C3:DA:36:6C:F7:EE:58:25:26:AE:18
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/t5KqFr3fUSehw9o2bPfuWCUmrhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f300::/29
2a0c:9240::/29
2a0e:5a80::/29
2a0e:c780::/29
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:e842::/32
2a0f:e940::/29
2a12:ac40::/29
2a12:d540::/29
2a12:f540::/29
Signature Algorithm: sha256WithRSAEncryption
17:5d:05:c5:f8:65:44:78:a0:a7:3a:e7:d2:3f:db:9b:65:c4:
a5:a6:da:3d:d1:02:f4:d5:8a:72:d6:7c:b5:0f:1d:ec:4e:7c:
73:a3:9d:96:89:5a:dc:7a:be:35:ab:3a:a5:1c:05:02:b5:d7:
be:7c:dc:a1:1f:89:c2:c0:1a:84:a2:13:24:9b:83:78:a6:b0:
74:5d:87:13:02:6c:0f:91:0e:2c:72:94:04:c8:a8:2e:92:3f:
b0:18:8c:56:d1:9f:36:74:f9:28:6a:be:77:b6:1c:f9:d2:19:
a7:0f:62:8c:47:c2:3d:4e:42:71:78:c1:ae:2d:e3:18:a9:b3:
c9:01:1a:fc:40:c0:ad:c9:8a:5b:2d:a8:07:d2:57:3c:82:7a:
a3:35:f6:3a:32:38:05:07:0e:a5:f4:e4:73:46:df:dd:13:6f:
17:bf:fe:01:fc:14:93:47:95:3a:c7:89:e3:e2:a1:07:6a:d2:
61:0d:f2:95:9b:da:8e:ae:48:15:36:f4:f5:e2:1b:a1:0b:aa:
df:f1:6f:a1:ac:8c:9e:6d:cf:6d:17:3d:63:bc:99:42:d8:57:
7b:81:41:d5:e2:8d:dc:0a:c9:e6:3d:2d:2c:8d:fc:2c:30:dc:
51:98:6e:b3:d4:6e:21:0c:dd:4d:f9:a2:df:ea:be:85:65:6d:
7a:e9:8f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:40:06 2025 by rpki-client