Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tODWBlrU9_XIVUh_0p9kvmgAvT0.roa
File: tODWBlrU9_XIVUh_0p9kvmgAvT0.roa (raw, json)
Hash identifier: wZBvXVs4ZNw6WyvcJNM9VCqVzuPFi8CagjXVWEVlP/4=
Subject key identifier: B4:E0:D6:06:5A:D4:F7:F5:C8:55:48:7F:D2:9F:64:BE:68:00:BD:3D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018C33C1B4C53511BFC8DDE958D362BCB3DB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tODWBlrU9_XIVUh_0p9kvmgAvT0.roa
Signing time: Mon 04 Dec 2023 07:36:21 +0000
ROA not before: Mon 04 Dec 2023 07:36:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216157
IP address blocks: 2a0c:d384::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:c1:b4:c5:35:11:bf:c8:dd:e9:58:d3:62:bc:b3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 4 07:36:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4e0d6065ad4f7f5c855487fd29f64be6800bd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:24:96:30:34:aa:59:11:15:f4:02:0f:53:de:
dd:d2:ee:56:21:db:f0:28:7f:16:2d:3e:eb:90:ee:
04:5d:01:72:d6:8b:09:28:32:72:7a:48:93:4b:0a:
08:27:fb:4e:27:d6:30:00:c9:dd:b2:e3:f5:57:ed:
21:e0:97:ea:9c:65:58:a9:f2:00:64:b0:11:15:55:
9e:c8:f9:9e:f3:b1:0e:03:f5:b3:64:7e:97:f1:f7:
cc:eb:bc:f9:b4:ce:2d:8a:d2:45:c6:a7:9e:5c:68:
66:e4:64:8c:7a:2f:71:dd:93:de:4c:14:34:89:a3:
b0:82:21:41:7c:0b:e3:44:dc:a9:90:36:84:b5:3e:
bd:8a:04:83:a0:c1:a8:9a:30:e2:df:3b:2a:c0:ec:
f1:b4:1f:b1:3c:6e:18:3b:2a:34:9a:d5:c5:ef:28:
a7:0a:06:01:62:c9:95:da:98:b7:fd:d2:85:06:f9:
f5:0d:fe:4c:38:fd:56:0d:68:a0:5a:04:c8:5b:17:
4a:75:30:9b:39:b5:69:d1:9a:0c:ca:d6:54:54:f2:
b3:7a:5d:89:9b:dc:28:c9:2c:3a:29:84:03:98:be:
51:7f:21:33:89:c1:60:4e:18:f8:02:b0:7b:c0:8c:
4c:d3:8c:ec:64:e6:40:d9:03:93:31:26:6d:27:64:
82:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E0:D6:06:5A:D4:F7:F5:C8:55:48:7F:D2:9F:64:BE:68:00:BD:3D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tODWBlrU9_XIVUh_0p9kvmgAvT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:d384::/30
Signature Algorithm: sha256WithRSAEncryption
2f:e0:30:c1:e6:22:da:89:9c:d3:a7:b8:63:b5:1b:b7:aa:b7:
26:7c:8c:91:4e:f4:55:9c:91:56:80:51:d2:a5:cb:ba:35:ae:
f9:ec:3a:8d:94:f8:5d:ca:70:9e:45:ac:da:5c:29:60:75:09:
88:bf:25:bb:60:2f:f6:a1:a1:8d:8d:9a:21:c6:a2:e3:d0:70:
de:22:e2:57:b8:0e:a4:fb:ff:b5:fa:0a:d2:b9:05:28:cb:7e:
88:50:86:24:84:e3:84:c5:9b:af:5d:55:6d:b8:c1:3e:26:e5:
c2:80:22:c2:04:90:8d:cd:e6:31:a5:30:e7:02:b2:fd:cf:70:
a8:e5:88:62:a7:a1:47:10:56:11:2d:1d:7c:e5:35:3b:bd:b1:
f3:f8:07:6f:6d:e7:ec:e3:43:23:85:79:f9:7c:17:21:d7:8d:
ca:8c:35:9f:76:d7:fb:5f:54:f2:d3:0c:8a:06:6c:af:89:bf:
73:52:d0:b1:9f:7b:2c:ba:e9:37:6a:c7:2f:2a:59:27:6c:22:
31:f7:73:cd:6e:8b:9a:67:87:0d:1c:15:51:7a:b3:23:dd:1d:
e3:5b:71:be:6e:af:3c:13:cb:a6:22:86:bb:f9:c3:d0:5d:bc:
1b:96:0f:9b:89:66:86:ee:44:e8:d8:00:1a:0f:30:a8:bc:58:
c5:0c:4f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:52 2025 by rpki-client