Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wk37UFRWug-aHNEqlV-RQaczLDY.roa
File: wk37UFRWug-aHNEqlV-RQaczLDY.roa (raw, json)
Hash identifier: aWMJvUdt3+516w9Y8SLIyAzlzilQC0gbT9trbsXu/n8=
Subject key identifier: C2:4D:FB:50:54:56:BA:0F:9A:1C:D1:2A:95:5F:91:41:A7:33:2C:36
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0183550DCB47CAD1D08D2B4A3E0C3523A65A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wk37UFRWug-aHNEqlV-RQaczLDY.roa
Signing time: Mon 19 Sep 2022 09:21:50 +0000
ROA not before: Mon 19 Sep 2022 09:21:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201364
IP address blocks: 2a0f:2705::/32 maxlen: 32
2a0f:e9c0::/32 maxlen: 32
2a0f:dd42::/32 maxlen: 32
2a0f:ee05::/32 maxlen: 32
2a0f:db41::/32 maxlen: 32
2a0b:b740::/32 maxlen: 32
2a0f:dd43::/32 maxlen: 32
2a0f:ee04::/32 maxlen: 32
2a0f:2704::/32 maxlen: 32
2a0f:db42::/32 maxlen: 32
2a0f:dd41::/32 maxlen: 32
2a0b:b746::/32 maxlen: 32
2a0f:dd44::/32 maxlen: 32
2a0b:b742::/32 maxlen: 32
2a0f:db46::/32 maxlen: 32
2a0f:2707::/32 maxlen: 32
2a0f:dd40::/32 maxlen: 32
2a0f:e9c6::/32 maxlen: 32
2a0f:e9c5::/32 maxlen: 32
2a0f:ee07::/32 maxlen: 32
2a0f:db43::/32 maxlen: 32
2a0b:b743::/32 maxlen: 32
2a0f:e9c2::/32 maxlen: 32
2a0f:db40::/32 maxlen: 32
2a0f:ee01::/32 maxlen: 32
2a0b:b744::/32 maxlen: 32
2a0f:db44::/32 maxlen: 32
2a0f:dd46::/32 maxlen: 32
2a0f:2701::/32 maxlen: 32
2a0b:b745::/32 maxlen: 32
2a0f:ee02::/32 maxlen: 32
2a0f:e9c3::/32 maxlen: 32
2a0f:2702::/32 maxlen: 32
2a0f:dd47::/32 maxlen: 32
2a0f:db45::/32 maxlen: 32
2a0f:ee03::/32 maxlen: 32
2a0f:db47::/32 maxlen: 32
2a0f:dd45::/32 maxlen: 32
2a0f:ee00::/32 maxlen: 32
2a0b:b747::/32 maxlen: 32
2a0f:e9c1::/32 maxlen: 32
2a0f:2700::/32 maxlen: 32
2a0f:e9c4::/32 maxlen: 32
2a0f:2703::/32 maxlen: 32
2a0f:ee06::/32 maxlen: 32
2a0b:b741::/32 maxlen: 32
2a0f:e9c7::/32 maxlen: 32
2a0f:2706::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:55:0d:cb:47:ca:d1:d0:8d:2b:4a:3e:0c:35:23:a6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 19 09:21:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c24dfb505456ba0f9a1cd12a955f9141a7332c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:e4:72:2d:61:5a:1f:0b:b4:a5:3f:c1:43:
7d:57:45:8f:0e:9f:99:e7:d5:bf:e8:25:61:db:f8:
3c:fe:6c:00:0b:b8:6d:23:23:b3:2f:38:a2:66:7c:
33:93:2e:25:90:03:26:a8:00:b5:69:d7:a7:7c:20:
07:f8:b2:3c:1f:7b:6d:3a:e4:ad:f0:41:e8:4b:59:
7a:97:aa:4c:02:26:57:eb:85:0b:19:45:20:b8:9d:
c9:96:3e:d8:16:90:40:9a:98:30:85:3b:1d:a4:e2:
63:95:9d:ec:3a:5f:9f:b0:1b:6e:df:3e:60:da:9d:
06:95:a8:3e:03:bf:c8:0d:ad:11:f3:08:d6:96:30:
1a:c7:94:f9:51:eb:65:b7:27:41:af:4f:1a:55:68:
a3:35:0b:ef:8f:b9:21:62:04:75:55:34:c1:38:64:
17:7b:2c:49:f2:d5:54:2a:f9:85:cc:5e:3b:a4:54:
51:c3:b2:c8:fd:c7:0b:bb:d6:f3:c7:17:7c:53:8c:
77:88:3e:2b:33:3a:d3:1c:33:3d:58:aa:86:81:c0:
88:44:aa:6e:a6:2e:f3:04:09:3f:58:95:a5:bd:f6:
f8:a7:73:c1:b4:e9:68:cd:7f:05:c4:1f:99:97:66:
55:61:cc:1d:63:d3:70:c3:98:e1:53:80:b7:30:61:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4D:FB:50:54:56:BA:0F:9A:1C:D1:2A:95:5F:91:41:A7:33:2C:36
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wk37UFRWug-aHNEqlV-RQaczLDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b740::/29
2a0f:2700::/29
2a0f:db40::/29
2a0f:dd40::/29
2a0f:e9c0::/29
2a0f:ee00::/29
Signature Algorithm: sha256WithRSAEncryption
94:d7:5c:77:e3:3e:d5:ae:b6:fc:c8:0a:b4:e0:28:16:9f:ff:
b4:60:77:af:ca:d1:fd:6d:4f:e5:ea:a4:cb:52:9a:e6:57:e0:
df:d9:89:c8:07:19:e1:3f:f8:44:80:3c:c6:62:b2:a5:eb:ad:
2e:18:76:38:93:dd:1a:f1:2b:4f:e4:fa:4f:09:f9:6e:b8:6b:
10:5f:ca:ab:c9:e9:6d:86:0a:b1:c7:45:8a:9a:23:bc:fe:27:
c2:c6:be:2e:25:45:65:84:5d:df:ae:7a:19:fe:42:b9:8b:0b:
be:f8:dd:f4:85:9f:dc:ed:2e:22:a5:6f:b1:ae:27:95:6b:5e:
39:e9:04:b0:cf:ea:a2:9d:91:1d:11:cb:32:75:81:a3:19:3a:
dd:80:32:f6:b5:81:aa:64:54:60:72:8c:30:8f:07:4f:63:8e:
f1:87:39:47:63:24:98:fe:88:af:a0:87:95:88:0c:d2:54:e7:
49:87:b5:db:d7:aa:14:cb:cd:e1:42:e6:4d:73:c1:05:44:21:
da:9d:79:67:19:8d:6c:f5:a1:15:9c:e2:85:54:12:34:bc:05:
1e:c3:20:1f:50:22:99:97:57:e0:8e:fb:2b:72:a7:6d:db:f3:
3a:b5:50:67:80:3d:98:1b:10:97:28:78:cf:9a:99:17:d4:41:
b7:e5:7d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:18 2025 by rpki-client