Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vjKVvixc7dwlY3bkW8y7r1OrCd8.roa
File: vjKVvixc7dwlY3bkW8y7r1OrCd8.roa (raw, json)
Hash identifier: iCWeTP3fm8hUCm110gSHrY6Jv5fjTj5VQxPLWTxT5b8=
Subject key identifier: BE:32:95:BE:2C:5C:ED:DC:25:63:76:E4:5B:CC:BB:AF:53:AB:09:DF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0189FE7ABF7218D1198C0D645276FB336F4E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vjKVvixc7dwlY3bkW8y7r1OrCd8.roa
Signing time: Wed 16 Aug 2023 13:13:24 +0000
ROA not before: Wed 16 Aug 2023 13:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205544
IP address blocks: 2a0f:e1c0:1::/48 maxlen: 48
2a0f:e6c7:1::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a0f:e6c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:7a:bf:72:18:d1:19:8c:0d:64:52:76:fb:33:6f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 16 13:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be3295be2c5ceddc256376e45bccbbaf53ab09df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:16:48:66:fc:ae:0d:7c:33:cf:a0:89:85:
88:97:25:54:55:d3:f4:fd:e2:49:da:ff:d2:90:85:
27:17:cc:0a:8b:82:bd:ef:83:fa:40:7a:e9:48:5f:
61:6b:3e:1d:c3:e8:c3:14:59:29:1e:8e:63:8a:a5:
b2:09:7e:30:3b:d0:48:b1:8b:a7:76:a8:58:37:42:
c5:da:b5:ea:29:d1:19:bb:ca:fb:bf:bf:02:4e:05:
d9:d6:31:a7:eb:00:84:0f:8d:44:fd:11:cc:66:84:
44:a5:1f:70:b0:b9:48:35:77:2a:82:24:8c:fc:6e:
af:5e:ad:cf:5c:a6:5e:75:8a:6f:80:31:76:72:50:
a3:9f:f7:fa:28:a8:83:84:01:12:ae:b7:0a:2a:98:
9f:37:28:bf:d0:0b:2d:a0:1f:32:9f:1e:3e:aa:52:
c8:55:4a:51:07:0b:14:7c:17:b7:3d:4a:70:9d:67:
76:f1:cd:94:74:87:2e:2c:29:9d:ab:de:c2:1d:e6:
17:47:42:15:78:3a:24:26:83:8e:3c:ec:b9:4f:89:
89:34:2a:ab:9b:4e:12:be:9c:45:f0:13:cb:de:09:
31:6f:b6:a4:15:13:56:a7:76:c7:5c:a0:12:e7:2e:
5c:19:16:53:26:e0:d9:0a:ff:5f:17:14:e0:14:08:
26:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:32:95:BE:2C:5C:ED:DC:25:63:76:E4:5B:CC:BB:AF:53:AB:09:DF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vjKVvixc7dwlY3bkW8y7r1OrCd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e1c0:1::/48
2a0f:e440::/29
2a0f:e6c0::/32
2a0f:e6c7:1::/48
Signature Algorithm: sha256WithRSAEncryption
90:31:64:5c:54:ef:e5:ab:94:05:c8:74:e7:66:88:b8:5b:70:
09:f5:35:59:3c:88:69:8a:f2:9e:20:11:08:2e:ac:cc:7b:4c:
12:05:b3:97:19:9d:4c:7b:8f:21:e2:af:18:38:b8:61:b8:84:
79:ac:0e:eb:0e:f6:54:df:92:9b:41:ac:9c:46:22:28:06:3c:
45:d3:aa:f4:96:55:48:3a:68:0d:d5:78:09:33:dd:1a:9a:f3:
77:19:99:fc:8a:d7:83:df:4b:65:6f:66:23:af:e2:d9:47:db:
fe:f8:2d:6e:e4:e7:ce:5c:1a:2c:29:c1:c6:2a:98:f3:d9:22:
cb:d8:ec:e1:e6:5c:8d:9f:85:ca:f8:12:bc:87:ae:2d:8f:9d:
55:28:4d:1f:df:16:9f:8c:e8:1a:a5:5b:b4:62:78:64:5e:d7:
f2:1e:42:1d:77:c0:f7:d7:da:9b:3b:f3:98:83:fb:98:2d:41:
31:84:ff:6c:38:2e:e1:06:9b:b9:db:35:98:f5:f0:1d:a5:ee:
ec:15:de:ab:29:07:85:2e:48:1a:96:0d:be:f2:1a:d0:07:b7:
e0:a7:bc:12:50:05:c9:67:07:c1:9e:55:8c:64:c6:48:0b:0a:
84:09:59:53:f0:72:8f:b2:4f:11:b1:66:95:df:ae:4d:d3:bf:
2c:34:62:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:11:10 2025 by rpki-client