Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/x82AYPFo-Vmo9k2tlbbOcTbWh-4.roa
File: x82AYPFo-Vmo9k2tlbbOcTbWh-4.roa (raw, json)
Hash identifier: IxQHqUZ0QnUWGLMDpiPQmX5gv7sRZM+WdYDl+xhGxYs=
Subject key identifier: C7:CD:80:60:F1:68:F9:59:A8:F6:4D:AD:95:B6:CE:71:36:D6:87:EE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0182589DF68D723BACEDD6CA4833F64B628F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/x82AYPFo-Vmo9k2tlbbOcTbWh-4.roa
Signing time: Mon 01 Aug 2022 08:55:23 +0000
ROA not before: Mon 01 Aug 2022 08:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 2a07:7885::/32 maxlen: 32
2a07:7881::/32 maxlen: 32
2a07:7882::/32 maxlen: 32
2a0f:39c1::/32 maxlen: 32
2a0f:39c2::/32 maxlen: 32
2a0f:39c5::/32 maxlen: 32
2a07:7884::/32 maxlen: 32
2a0f:39c4::/32 maxlen: 32
2a07:7887::/32 maxlen: 32
2a0f:39c7::/32 maxlen: 32
2a0f:e840::/32 maxlen: 32
2a07:7886::/32 maxlen: 32
2a0f:39c6::/32 maxlen: 32
2a0f:39c3::/32 maxlen: 32
2a0f:39c0::/32 maxlen: 32
2a07:7883::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:9d:f6:8d:72:3b:ac:ed:d6:ca:48:33:f6:4b:62:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 1 08:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7cd8060f168f959a8f64dad95b6ce7136d687ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:62:76:99:13:f3:b6:35:bd:5d:78:df:b6:22:
e6:69:43:e3:85:e0:42:9b:d8:56:30:67:48:36:7a:
7c:62:2f:6d:b2:4b:3c:d9:3e:99:1d:ae:43:1d:93:
78:aa:6f:32:5c:71:f0:f3:a9:9b:64:11:34:3f:d7:
00:15:ad:35:93:7b:cd:6b:d9:03:bc:a5:61:a5:84:
e5:a8:3d:fd:da:c2:43:8b:2d:2c:ed:40:99:9a:bb:
74:d7:18:11:d5:6f:28:63:f2:ef:e8:02:10:95:86:
8a:47:72:1b:74:0e:bb:0f:b3:94:98:b0:1c:43:55:
d6:74:42:ce:46:3f:08:0f:d4:ce:04:9a:e8:72:56:
e1:93:13:01:1e:cc:29:4d:bf:b5:a6:48:fe:b7:db:
18:c7:b7:ea:36:f1:d0:24:e9:7e:b6:25:c8:75:23:
11:f5:63:95:c6:8c:b6:20:4c:23:f1:8d:27:71:20:
88:74:6d:3d:58:84:08:73:22:c5:c8:b8:9d:09:fd:
0d:8b:d3:57:da:67:bf:f0:cc:85:9d:e2:75:b8:1b:
6c:26:05:36:30:7c:e9:30:05:ff:72:0c:33:8d:dd:
25:ef:ae:aa:e8:ea:c7:9d:64:15:67:16:8f:47:84:
21:4b:31:5c:f5:c2:86:62:4b:e6:38:cd:0d:9a:96:
9b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CD:80:60:F1:68:F9:59:A8:F6:4D:AD:95:B6:CE:71:36:D6:87:EE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/x82AYPFo-Vmo9k2tlbbOcTbWh-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:7881::-2a07:7887:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:39c0::/29
2a0f:e840::/32
Signature Algorithm: sha256WithRSAEncryption
3b:0e:9f:44:9d:72:a3:66:cc:89:ba:ba:6e:f1:48:a0:50:45:
aa:03:5d:84:76:9c:8f:56:4a:77:73:18:f1:ee:bc:09:01:1a:
81:1c:f3:66:fb:85:fd:47:9f:80:e3:9d:09:ac:4f:9d:5b:4e:
dc:c5:8c:c1:e2:44:15:05:54:c5:3f:9d:99:62:3e:83:6a:bc:
7e:7b:21:b4:00:f0:9b:c1:c6:54:a1:c3:41:34:08:7e:95:27:
09:c9:39:31:89:4b:fc:2c:3f:b1:58:db:bc:f2:b4:56:73:14:
de:fb:7e:ba:85:cf:b6:3a:1f:e3:55:2a:56:97:71:f6:89:2a:
4c:e6:64:e6:74:a9:f9:18:02:47:26:7d:d9:ea:ec:be:d1:54:
ce:18:3e:87:fb:a0:23:ef:fe:c4:b0:37:c2:d8:a8:1a:8b:88:
51:ac:d9:4d:5a:a7:92:05:be:aa:42:8a:ef:a2:30:1a:e5:dc:
b5:8b:2c:d4:d6:11:64:94:b0:80:6d:6c:76:49:a6:4f:bd:4b:
d3:1d:7f:17:f4:d6:db:e3:3f:e0:44:00:97:93:25:ff:2d:29:
63:77:16:ee:a1:36:44:44:da:46:e1:fc:cf:49:38:58:31:b7:
e0:cb:9b:7b:bc:61:6a:43:1c:f1:ea:cd:13:f0:77:d7:07:69:
26:93:2e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:16 2025 by rpki-client