Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uJ9LgRpL5fQngtnNVMUvZXFjn-E.roa
File: uJ9LgRpL5fQngtnNVMUvZXFjn-E.roa (raw, json)
Hash identifier: TjO/WI7JcGUwn3Y8favK6wkMri95ReaV0bJSbfzRJaM=
Subject key identifier: B8:9F:4B:81:1A:4B:E5:F4:27:82:D9:CD:54:C5:2F:65:71:63:9F:E1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0187B1FF2728FFA18B8770955B1D323E5BB3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uJ9LgRpL5fQngtnNVMUvZXFjn-E.roa
Signing time: Mon 24 Apr 2023 06:41:41 +0000
ROA not before: Mon 24 Apr 2023 06:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 2a0f:e940::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b1:ff:27:28:ff:a1:8b:87:70:95:5b:1d:32:3e:5b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 24 06:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b89f4b811a4be5f42782d9cd54c52f6571639fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:d7:e4:c8:53:72:b7:63:0a:17:1d:40:ee:
4a:8b:39:88:73:46:75:8b:5a:86:58:ea:64:a6:ca:
3c:ed:ae:1f:ef:15:7c:72:b3:2b:46:36:0a:f1:8b:
bb:39:a8:85:bf:b9:93:55:e6:91:b3:1f:cf:23:a0:
fb:5e:04:d8:b3:6b:51:61:3f:c7:60:76:33:50:38:
f2:b0:e8:7a:61:d2:5c:00:a2:15:a8:9f:3e:e3:e0:
17:c4:f6:55:3c:fe:cc:2f:8b:84:7a:f2:3c:f0:f8:
d2:11:fa:58:5d:27:40:47:40:bc:46:1d:f3:c7:48:
cf:e4:ac:b0:2c:00:e1:b2:0a:93:f0:c2:c0:79:26:
67:05:db:7c:16:bb:d1:d1:d3:e5:24:a2:e8:23:e2:
e6:3e:9a:5e:82:17:68:3b:c7:cb:02:f1:61:9a:91:
13:1e:39:60:99:fc:72:e0:e4:8e:95:94:1b:8f:8d:
a4:c7:39:18:83:55:56:ff:2c:84:9e:2f:e8:24:47:
ee:e4:15:b4:8c:0a:77:e5:d6:70:ef:68:f8:e9:e7:
8c:d1:9d:8b:6e:ab:f5:d9:e3:4a:da:1d:f5:4c:79:
7a:50:cc:ad:3a:15:a6:85:75:24:b6:81:33:6a:2a:
ab:42:a8:04:ee:9f:53:1e:ec:c8:8b:ac:de:26:94:
af:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9F:4B:81:1A:4B:E5:F4:27:82:D9:CD:54:C5:2F:65:71:63:9F:E1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uJ9LgRpL5fQngtnNVMUvZXFjn-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e940::/29
Signature Algorithm: sha256WithRSAEncryption
06:10:22:47:a7:02:02:6a:58:36:16:74:23:9b:d6:66:ca:30:
8f:d0:30:e1:53:01:aa:c1:cb:78:e0:2c:c4:1b:01:0b:85:99:
67:0a:64:7d:99:3b:ec:64:56:b7:1f:f3:f7:a4:3e:eb:d2:73:
39:4e:83:3a:7a:dc:8d:2f:b2:fa:d7:8e:9c:e1:c9:4b:84:d2:
b6:4d:43:53:35:b5:68:de:66:2a:50:ef:8d:35:13:a6:10:2b:
69:41:be:a9:28:f3:8c:78:5a:c3:4f:0f:3e:d4:08:e6:c7:35:
db:75:f2:c0:00:da:5e:32:c5:a5:9f:b2:4a:e1:4b:56:71:05:
b9:71:74:3e:df:74:0a:62:6f:d9:80:6b:74:4b:39:3f:10:e0:
3b:e9:02:e9:50:f0:d9:69:cd:de:b0:be:a9:fc:a7:b0:c3:1e:
b2:ba:67:22:73:9c:41:58:f9:8e:ea:80:99:87:6e:db:a8:cf:
07:16:52:05:86:32:38:e1:9d:a0:1f:1f:02:ce:44:bb:71:53:
dc:a1:26:f3:41:9f:cd:ba:c7:8b:3e:58:db:63:7e:a8:1b:d7:
3a:16:f9:66:8b:e4:b6:77:0b:0b:85:10:de:fa:86:fe:b5:a9:
44:43:4c:2f:de:d2:0c:8d:5e:f8:df:64:aa:44:2e:ee:e7:7c:
c2:e5:80:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:24 2025 by rpki-client