Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zd2QOgpIrGrUHT9Lz48mmnAFQC8.roa
File: zd2QOgpIrGrUHT9Lz48mmnAFQC8.roa (raw, json)
Hash identifier: cuv/XmvdkX7/nwOcgjhKiuANjA/m++takbqiNOSIE1I=
Subject key identifier: CD:DD:90:3A:0A:48:AC:6A:D4:1D:3F:4B:CF:8F:26:9A:70:05:40:2F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CAA6A134DE88AF860F3D7EDC3A0D859C4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zd2QOgpIrGrUHT9Lz48mmnAFQC8.roa
Signing time: Wed 27 Dec 2023 08:35:27 +0000
ROA not before: Wed 27 Dec 2023 08:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8772
IP address blocks: 2a0f:c400::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:aa:6a:13:4d:e8:8a:f8:60:f3:d7:ed:c3:a0:d8:59:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 27 08:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cddd903a0a48ac6ad41d3f4bcf8f269a7005402f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:a6:e0:c3:ff:e8:9d:f0:7e:3c:82:1f:73:
86:46:02:57:49:92:57:58:e2:4a:73:c3:0e:cf:55:
0f:27:05:1e:1c:bc:28:86:ce:5e:85:fc:c2:55:b6:
f9:8d:f9:8a:40:7c:4e:d7:f2:b7:b9:82:99:fa:4c:
f3:96:5b:f6:76:2c:72:ab:ea:3a:57:16:24:21:af:
50:18:32:ac:82:06:fc:b5:f1:ce:91:b7:05:a5:e6:
bf:0e:1b:82:9b:b7:fb:e9:89:b2:50:ee:8f:55:fc:
77:d7:49:ce:a8:10:a2:ab:6b:0e:46:88:12:da:ab:
64:11:9b:e0:6a:ed:a1:04:6b:ea:ac:40:1d:b3:46:
59:8d:2f:d0:66:28:5f:ac:6e:d6:28:f2:1f:b4:45:
67:6b:c4:f1:90:e0:5a:55:42:35:69:79:b0:90:04:
ab:78:c5:14:28:2e:60:c0:f4:c5:2e:9b:20:02:44:
06:72:95:98:68:99:66:07:da:5f:20:a4:71:83:fe:
45:9e:ab:e0:45:90:51:d7:79:5e:99:81:9f:eb:1c:
ec:49:c4:dd:86:25:9c:b1:e6:a3:9b:1f:0e:9c:1a:
64:1a:69:69:15:b3:99:d3:30:e5:2e:f4:b6:cc:9c:
dc:eb:89:e1:01:da:bf:38:e6:01:60:d5:ec:c2:48:
32:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DD:90:3A:0A:48:AC:6A:D4:1D:3F:4B:CF:8F:26:9A:70:05:40:2F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zd2QOgpIrGrUHT9Lz48mmnAFQC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:c400::/29
Signature Algorithm: sha256WithRSAEncryption
41:67:8c:f5:bd:3e:2b:b4:5f:20:5a:6d:7d:af:54:b6:45:43:
1b:5b:93:45:74:89:0f:6c:16:44:6e:99:d6:6c:ce:f0:ea:30:
5c:67:0c:5c:45:f2:fc:ad:ec:a2:e1:3d:c2:4a:f8:72:d1:3e:
7c:7c:cb:60:cb:bf:ea:31:91:c6:7a:4d:1b:32:f6:79:60:10:
b8:6b:e7:dc:0f:96:8c:5d:35:1b:d8:b0:5f:ca:04:04:25:8a:
0a:3d:29:46:d4:68:6c:36:a6:a0:e2:25:26:f4:64:23:e3:f7:
83:fe:b8:15:00:a1:e2:b7:67:24:03:37:07:fa:19:69:32:c3:
af:50:e2:b3:6c:ca:71:e6:3d:37:0e:6f:c4:d5:e7:90:5b:cd:
36:0b:ff:33:2e:53:ae:9e:bc:11:b4:8b:cc:94:8f:8f:b9:7b:
00:47:ef:17:d8:7a:8d:92:b2:81:43:96:94:cd:9b:d3:d4:f9:
98:3b:18:e8:ca:73:22:d2:31:13:b5:cc:52:35:a7:d4:4a:5a:
1f:0e:8d:78:65:6a:84:85:d1:bb:86:a2:07:f4:e3:59:bf:bb:
18:c4:04:e3:2c:5f:6a:56:7f:34:02:53:4b:32:f4:6d:8d:54:
a5:58:0b:1b:13:b0:45:ce:45:5c:96:a3:fb:62:3e:f1:f0:7a:
76:b9:7a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:07 2025 by rpki-client