Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uI5NwTbn9jOUDgOncqYlscE6kIQ.roa
File: uI5NwTbn9jOUDgOncqYlscE6kIQ.roa (raw, json)
Hash identifier: CkUqkz+EVvLBR3tHkwnBtygBw3YCR+mcLoIpE4pUEf8=
Subject key identifier: B8:8E:4D:C1:36:E7:F6:33:94:0E:03:A7:72:A6:25:B1:C1:3A:90:84
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 02419014
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uI5NwTbn9jOUDgOncqYlscE6kIQ.roa
Signing time: Tue 08 Mar 2022 11:11:30 +0000
ROA not before: Tue 08 Mar 2022 11:11:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30633
IP address blocks: 2a0f:1e00:987::/48 maxlen: 48
2a0e:f201::/32 maxlen: 32
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:e841::/32 maxlen: 32
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37851156 (0x2419014)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 8 11:11:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b88e4dc136e7f633940e03a772a625b1c13a9084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:d8:ca:68:ea:52:0b:f0:81:d0:bf:dc:08:
49:66:6b:2c:90:fb:5c:e3:be:9d:13:5f:79:3e:c6:
c1:ad:e5:6b:52:3f:de:f5:97:14:c7:6e:40:10:a3:
f9:5e:d1:3b:a3:94:2d:40:c5:03:85:f4:31:54:87:
d1:d1:c8:51:a3:13:e7:01:40:c8:fb:b1:28:23:70:
99:7c:6b:40:e4:2a:08:c9:45:7d:79:58:ed:71:36:
1d:75:ba:76:61:88:89:aa:44:c4:ca:16:e4:07:7e:
d9:d5:f6:04:ad:09:bf:7c:d8:b0:90:d2:a8:a0:1d:
d4:a5:4d:1e:e2:5a:30:7e:ee:a1:c7:7b:92:ed:48:
06:64:b4:6d:ac:38:b3:f5:22:1d:2a:f2:f5:cf:3f:
a7:d1:90:83:e7:c4:5f:b0:f8:33:e9:34:1d:f4:00:
19:4c:e7:f0:bc:3e:71:d6:2b:a8:41:0a:ca:7e:49:
45:a4:61:4d:95:ae:8f:25:58:50:fb:ef:8e:23:4e:
b8:a1:85:0f:37:bb:ff:92:ee:e1:7b:fe:e0:e1:45:
32:e2:5d:7c:d4:fe:13:30:40:1e:5e:42:31:29:7e:
40:33:5d:f6:e7:7a:ea:76:93:f2:be:0e:29:4c:67:
35:74:31:33:b5:b3:b1:48:97:35:90:52:e3:e5:61:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8E:4D:C1:36:E7:F6:33:94:0E:03:A7:72:A6:25:B1:C1:3A:90:84
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uI5NwTbn9jOUDgOncqYlscE6kIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f201::/32
2a0f:a01::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:e841::/32
Signature Algorithm: sha256WithRSAEncryption
ae:62:72:8d:61:26:02:81:bf:80:19:7c:c4:5e:2f:3a:3e:65:
1e:cb:49:88:85:c7:8a:b3:ad:ab:a1:ff:03:d2:29:a6:5b:84:
ff:c5:9a:64:9e:90:30:53:3e:82:5e:f4:81:59:69:3e:94:a0:
99:b8:d4:21:9d:69:ec:ee:5a:e4:12:6f:8b:d1:92:f3:66:df:
ff:c3:29:d0:98:ae:ea:37:fa:83:39:76:96:87:5b:5b:7c:27:
7d:66:ee:73:83:db:64:01:7c:01:1b:17:26:d3:6a:a7:da:7a:
30:5a:62:f2:e9:87:f9:27:33:39:83:6b:12:a5:a7:70:96:d6:
5c:44:9a:8f:da:c0:8e:e5:6d:ab:47:ee:11:3d:a2:26:5b:a2:
2e:db:50:da:a4:83:47:fb:c4:d8:00:c1:00:2e:f5:22:0c:52:
ae:d1:04:bd:17:ce:02:c5:3b:50:38:ff:3f:23:4a:9d:79:9b:
aa:a7:68:df:ec:d3:73:ea:da:f3:de:53:c9:4f:77:2b:40:02:
36:fc:b3:8f:9f:ae:ec:9c:08:2d:9b:a3:02:b2:82:88:b4:1f:
6e:31:80:1b:93:8c:a5:14:2a:68:7e:d0:48:e8:8c:8e:35:1d:
56:ab:3b:82:fe:9a:1a:38:d7:00:cd:4a:bc:5b:2f:71:08:fc:
17:b6:57:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:36:23 2025 by rpki-client