Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yMKsf-72hAGPUQ3HwtDDdLNuVow.roa
File: yMKsf-72hAGPUQ3HwtDDdLNuVow.roa (raw, json)
Hash identifier: 9LL68CN+dAOHvz0MisboSqbo0BIke4nwxFYWYJ9K1Bw=
Subject key identifier: C8:C2:AC:7F:EE:F6:84:01:8F:51:0D:C7:C2:D0:C3:74:B3:6E:56:8C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018AA74F329A042A75622373A566D3752506
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yMKsf-72hAGPUQ3HwtDDdLNuVow.roa
Signing time: Mon 18 Sep 2023 08:01:39 +0000
ROA not before: Mon 18 Sep 2023 08:01:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197992
IP address blocks: 2a0f:7f00::/29 maxlen: 29
2a0f:2100::/29 maxlen: 29
2a13:2cc0::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a13:2b40::/29 maxlen: 29
2a13:18c2::/32 maxlen: 32
2a13:200::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:4f:32:9a:04:2a:75:62:23:73:a5:66:d3:75:25:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 18 08:01:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8c2ac7feef684018f510dc7c2d0c374b36e568c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d6:0a:b1:24:a3:0b:a9:50:51:8a:8f:4f:ef:
5d:5f:8c:7a:08:ba:09:24:b6:50:6e:29:c9:76:5c:
3a:06:49:7e:92:a1:f0:78:84:ca:cc:86:99:4a:d3:
45:a4:41:98:1f:bb:f7:b1:8e:91:3d:2a:1e:4d:4e:
52:60:cd:38:b0:fd:a6:b6:db:c4:36:d3:20:19:ab:
91:40:90:85:12:56:b4:e3:1f:e2:06:24:27:54:8b:
82:d2:d7:3c:3a:73:3b:e7:b0:d5:88:ef:ca:23:61:
7c:89:c7:8b:92:5a:3c:03:ee:77:92:c8:bc:67:85:
59:41:a6:97:d0:cf:32:af:7a:e3:9d:87:30:f0:4f:
b3:5a:f0:2b:06:9b:ae:55:a2:9f:44:09:da:b0:4c:
82:46:91:91:a6:9e:f0:bb:45:49:25:e9:c8:5d:5b:
25:87:65:86:cf:89:d9:4a:d5:fd:76:71:00:6c:15:
83:55:a1:d8:83:cb:a1:0a:68:e5:49:3b:4a:c8:37:
31:95:0d:11:ff:0b:d4:e8:da:4f:85:3d:e1:3c:df:
7f:7f:ea:11:7f:29:5f:ca:50:4e:01:1e:b5:81:ed:
bc:0f:e8:5e:30:14:19:f8:6d:07:83:37:7f:a3:63:
a9:aa:66:f4:2a:af:c2:22:49:5d:6f:f1:5d:e9:b2:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C2:AC:7F:EE:F6:84:01:8F:51:0D:C7:C2:D0:C3:74:B3:6E:56:8C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yMKsf-72hAGPUQ3HwtDDdLNuVow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2100::/29
2a0f:7f00::/29
2a12:d6c0::/29
2a13:200::/29
2a13:18c2::/32
2a13:2b40::/29
2a13:2cc0::/29
Signature Algorithm: sha256WithRSAEncryption
14:34:4f:95:d6:40:2b:24:74:ea:99:38:a1:1d:a8:d3:6f:0c:
9a:24:ab:66:31:69:f2:a6:a1:9c:7f:06:af:8e:24:bc:50:9d:
a6:91:b5:80:0c:12:cd:35:06:84:fb:02:1b:e8:e3:13:36:0c:
b4:e7:6d:cc:b9:11:a8:c0:7f:8c:c3:7b:54:8a:6c:6f:9c:fd:
0f:c5:9e:01:76:e0:b2:29:5b:8f:e3:38:ee:a7:12:c6:95:83:
92:34:31:f0:0b:7f:38:43:7b:e6:a4:89:bd:a0:bd:ca:42:06:
39:10:1d:ba:7b:1f:91:85:12:92:cd:d3:e6:b6:f3:25:0e:37:
b9:dc:ea:a6:11:46:25:99:d2:34:74:e1:c8:96:2d:41:e3:f9:
39:5b:a8:9f:96:7a:6d:5d:8f:50:b6:2a:c2:35:f5:95:f8:80:
31:68:33:e3:ad:40:c2:79:96:6b:07:1d:76:c5:01:64:2d:a0:
0e:f4:5a:ac:84:14:c8:65:f7:fa:bd:76:1e:5a:0f:09:db:54:
3b:2d:31:58:a7:4f:d4:9f:08:7d:1d:82:40:2b:57:15:8b:20:
cc:c7:71:48:2e:eb:0a:1c:fc:0c:2e:a8:ac:41:f3:67:ab:8e:
26:9f:a6:6a:40:33:be:5b:b4:69:84:c8:05:de:0f:29:5a:55:
92:03:04:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:02 2025 by rpki-client