Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ye4pDZJ1zWVwBZo0FRmODgiYH8g.roa
File: ye4pDZJ1zWVwBZo0FRmODgiYH8g.roa (raw, json)
Hash identifier: CzihcNBKhnzOWpfAQR4YXs6NCeyP61JaGHmdMbayOIo=
Subject key identifier: C9:EE:29:0D:92:75:CD:65:70:05:9A:34:15:19:8E:0E:08:98:1F:C8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0182B0C682C13DFE0A68C7C337DC5A9A7727
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ye4pDZJ1zWVwBZo0FRmODgiYH8g.roa
Signing time: Thu 18 Aug 2022 11:46:15 +0000
ROA not before: Thu 18 Aug 2022 11:46:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61003
IP address blocks: 2a0f:e7c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b0:c6:82:c1:3d:fe:0a:68:c7:c3:37:dc:5a:9a:77:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 18 11:46:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9ee290d9275cd6570059a3415198e0e08981fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:36:39:83:78:b1:41:45:07:3a:8d:8b:13:
b4:fd:45:cd:bd:97:f8:9f:57:d8:b4:ab:a7:22:40:
c8:d0:9b:54:4d:3b:38:bb:19:60:98:aa:87:d3:53:
e4:fa:e7:33:d3:ad:ec:6b:ac:bc:09:d2:e2:11:ed:
1c:1c:e8:32:e8:11:b7:e6:eb:55:30:cc:b3:d0:33:
1c:76:d1:c3:87:c3:1a:4f:c8:f5:2b:63:00:c1:a6:
c5:db:8b:01:02:e9:4b:4c:41:ca:32:35:66:03:c6:
68:b0:b9:1a:25:94:5c:40:d9:25:cd:4d:10:28:96:
d6:1f:b9:35:6e:60:93:73:e0:d3:9c:2b:d9:0e:fb:
f3:8b:55:d8:dc:cc:d3:38:22:cb:16:d5:3c:ef:92:
8d:f2:2d:fe:7a:49:cd:25:a7:0e:d3:cd:41:fb:fc:
9d:c2:b3:f9:25:ab:2a:b3:99:a1:07:b3:2f:56:bd:
1b:b1:7f:fc:0c:9e:6a:9e:39:73:04:5b:d0:68:cf:
47:17:cd:4d:14:60:ad:91:62:61:2c:e2:38:40:67:
94:9b:80:91:ea:ff:f1:40:c2:0d:23:f0:05:f1:e1:
c7:8d:5d:d6:30:60:f9:60:4f:b0:22:36:40:5d:f5:
20:42:8a:3c:02:33:17:5e:64:59:76:6d:0f:91:b6:
2d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EE:29:0D:92:75:CD:65:70:05:9A:34:15:19:8E:0E:08:98:1F:C8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ye4pDZJ1zWVwBZo0FRmODgiYH8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e7c0::/29
Signature Algorithm: sha256WithRSAEncryption
34:7a:c0:a1:22:b9:91:14:fd:b7:5c:c7:4f:e7:4f:17:2f:48:
28:87:35:3e:4a:a1:27:28:f6:1c:43:62:7c:ce:b6:28:1c:5b:
50:0a:d5:75:b4:27:44:65:66:80:89:42:e3:15:3a:15:7f:db:
50:05:53:87:31:09:65:3b:13:54:e2:42:10:bb:c3:78:a1:c3:
32:76:05:12:ae:e3:fb:d6:88:d4:01:81:c1:79:ca:d5:1e:63:
53:64:a5:dc:9d:d6:e2:48:0b:df:86:5c:9e:58:4f:96:f2:4f:
1a:06:a6:6a:ac:14:18:82:2c:bc:ba:b1:d0:1f:d1:91:16:1c:
1c:bd:e5:50:01:a4:35:b0:68:be:d0:0c:d4:6b:f0:74:8b:82:
2a:6e:95:5a:6b:6b:39:2d:c3:86:8a:6d:a7:2e:a6:ee:c5:82:
b6:f9:d8:63:d0:ce:e8:0e:6d:0e:db:1e:e3:47:95:81:33:ec:
ee:77:8a:e1:28:41:28:1f:2e:0c:b9:a4:61:96:20:04:f0:0d:
19:fa:47:30:e9:4d:80:f5:fd:12:4f:1d:75:ea:d8:1f:6a:c1:
15:04:87:3e:b1:4b:49:fc:50:17:d0:b6:b4:3a:53:96:ab:75:
8c:be:01:d3:aa:88:ca:1f:eb:c1:8d:0f:29:b9:fa:cc:0f:3d:
ab:c9:87:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:03 2025 by rpki-client