Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/t5rBG-QbD8cJite_TeJJkHSdook.roa
File: t5rBG-QbD8cJite_TeJJkHSdook.roa (raw, json)
Hash identifier: lC+ajAVLswdaCH9zNGR4DNrcGaprEUqdp8LVqJzWAFI=
Subject key identifier: B7:9A:C1:1B:E4:1B:0F:C7:09:8A:D7:BF:4D:E2:49:90:74:9D:A2:89
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0182843CF3CF855A92139526644C8520A601
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/t5rBG-QbD8cJite_TeJJkHSdook.roa
Signing time: Tue 09 Aug 2022 20:12:43 +0000
ROA not before: Tue 09 Aug 2022 20:12:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 2a0f:dfc4::/32 maxlen: 32
2a12:f440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:84:3c:f3:cf:85:5a:92:13:95:26:64:4c:85:20:a6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 9 20:12:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b79ac11be41b0fc7098ad7bf4de24990749da289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:14:b5:67:d2:f5:62:b5:cf:0c:ab:52:55:4e:
09:50:fc:d9:85:3d:b0:fa:cf:15:82:db:52:dc:c5:
18:9a:ba:cb:29:c8:af:7e:15:8e:8b:0b:61:93:d0:
95:88:0f:f8:b2:d0:cb:7e:1e:91:a5:c9:cd:ee:f7:
6e:11:b9:8b:b3:cc:fc:e6:d0:dc:df:26:0d:11:b4:
f6:15:65:aa:cf:12:01:2c:3b:95:39:e3:59:cd:c4:
8f:52:6e:92:7a:23:65:b3:0b:a8:ad:cc:cb:bb:43:
5f:82:05:74:14:9c:13:0d:3b:4a:ba:ec:f8:5f:02:
1f:4f:3f:ab:2b:83:f6:f3:1f:22:af:31:b4:38:bd:
d8:b8:ab:9b:4c:da:76:ae:fe:e8:d6:4a:60:85:f4:
e8:67:c5:fe:e3:9a:ce:fa:7c:67:f0:01:e2:a5:b9:
d8:9c:72:b1:ef:11:ac:39:27:c8:a9:63:a3:bb:b2:
19:1b:f3:66:5c:14:8c:3f:bb:3e:68:42:11:92:04:
7f:a6:1d:c8:27:a8:ce:6b:0a:77:95:73:56:ca:64:
03:6a:f3:ab:d7:f9:35:37:a1:33:65:f2:6d:ee:22:
cd:f8:ab:4a:f5:fe:87:cb:63:8e:31:38:fe:8b:07:
3a:25:ff:71:83:7c:64:ad:f1:10:f6:6b:c3:87:70:
fe:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9A:C1:1B:E4:1B:0F:C7:09:8A:D7:BF:4D:E2:49:90:74:9D:A2:89
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/t5rBG-QbD8cJite_TeJJkHSdook.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:dfc4::/32
2a12:f440::/29
Signature Algorithm: sha256WithRSAEncryption
16:85:38:ea:42:46:0d:29:ab:77:04:23:cb:25:ab:37:2a:52:
28:75:b9:4d:b1:f1:fa:5b:ff:0f:f5:b9:8b:39:dd:48:99:8f:
30:41:ce:77:c4:8e:0d:1b:01:15:cf:53:8b:05:e1:d2:85:62:
af:13:6f:eb:06:9f:bf:d1:68:4d:cb:05:41:e6:38:dd:09:4d:
5e:97:1a:6c:ce:33:ca:9c:f2:51:9d:c8:c0:c2:9c:be:82:65:
f7:b6:25:ce:bd:1c:f1:9c:ed:06:7c:e7:83:c3:7e:0d:c0:ca:
3c:62:9b:70:22:95:54:d3:21:2a:47:0f:7b:ea:3f:8c:80:d4:
8e:f8:6c:1c:b7:e4:ef:58:b6:73:ae:6a:2f:1c:f0:fc:a2:7b:
41:e6:53:c1:03:0a:62:05:b8:20:d1:5a:b3:0a:dd:c6:3b:17:
29:80:b0:75:d0:0c:f9:82:44:ab:bc:ff:dc:a0:01:35:1e:78:
0b:58:36:15:56:87:9b:c8:b4:ec:93:a3:9e:15:6d:52:50:f1:
ff:49:ed:75:d4:d5:25:7a:95:e1:66:ff:95:9f:71:4e:cf:fd:
df:3f:dd:11:c4:11:02:df:a6:b8:a2:64:09:34:43:b1:ba:30:
e5:98:56:7a:52:af:a4:b4:2c:08:3b:c5:94:79:fe:7e:42:60:
83:94:d3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:53:09 2025 by rpki-client