Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/VrjM7PGaM3c4GTG7Ixjg40kicMY.roa
File: VrjM7PGaM3c4GTG7Ixjg40kicMY.roa (raw, json)
Hash identifier: 6/h6+DQwbqCVUbJHuc3QwKOKwaf7JnscAZJu6QlHlGY=
Subject key identifier: 56:B8:CC:EC:F1:9A:33:77:38:19:31:BB:23:18:E0:E3:49:22:70:C6
Certificate issuer: /CN=af2b0e217a35168392206bda73ce619535a02f35
Certificate serial: 01845B710302B6CAC6E63A1857DF22DACE2B
Authority key identifier: AF:2B:0E:21:7A:35:16:83:92:20:6B:DA:73:CE:61:95:35:A0:2F:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/VrjM7PGaM3c4GTG7Ixjg40kicMY.roa
Signing time: Wed 09 Nov 2022 08:10:43 +0000
ROA not before: Wed 09 Nov 2022 08:10:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209369
IP address blocks: 2a13:5280::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:71:03:02:b6:ca:c6:e6:3a:18:57:df:22:da:ce:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b0e217a35168392206bda73ce619535a02f35
Validity
Not Before: Nov 9 08:10:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56b8ccecf19a3377381931bb2318e0e3492270c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:be:83:82:0b:e7:c7:b3:a7:21:03:df:6c:ab:
49:86:15:f0:12:da:cb:29:b8:b3:da:f8:e7:04:8d:
6b:e4:d8:88:37:92:08:e6:47:63:77:52:db:53:5f:
b2:3a:b9:39:97:92:cc:cd:05:55:7d:25:af:61:0b:
24:7e:9e:8a:f7:3c:fc:72:fe:73:ce:64:8b:3b:b4:
93:63:8f:f1:93:dd:04:9e:b4:1a:49:17:98:7d:0f:
23:98:ff:7c:92:4e:0c:99:3d:1b:84:cc:49:cb:bd:
8b:c0:f6:18:dc:cd:99:c8:b3:5d:b6:8f:f0:20:6d:
9a:95:bc:ce:f5:c8:ce:02:92:fe:d4:d1:da:8e:12:
e9:23:fd:b4:dc:1f:3a:90:e4:29:ab:b2:8d:3d:05:
19:1b:6b:a6:ce:c3:66:15:a2:d1:94:2f:8a:09:bb:
16:8e:d2:83:a6:6b:57:a5:c3:35:ab:fc:6c:36:1e:
30:fd:66:c8:85:12:1f:80:02:c4:68:ba:42:44:31:
90:2f:cb:a6:68:0a:d8:89:91:78:5a:f0:c9:c8:da:
6c:1a:28:74:52:8b:c4:ec:f8:8f:3f:6e:36:a9:08:
82:ff:48:dc:2d:d2:60:b8:1a:9e:06:fd:fb:c9:ef:
e4:5c:b6:b0:e4:1b:a9:b1:62:34:00:15:bb:35:f8:
c2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B8:CC:EC:F1:9A:33:77:38:19:31:BB:23:18:E0:E3:49:22:70:C6
X509v3 Authority Key Identifier:
keyid:AF:2B:0E:21:7A:35:16:83:92:20:6B:DA:73:CE:61:95:35:A0:2F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/VrjM7PGaM3c4GTG7Ixjg40kicMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5280::/29
Signature Algorithm: sha256WithRSAEncryption
18:2f:8f:93:45:bf:2b:c1:c2:f1:f7:4a:c3:ef:4c:32:53:c1:
15:72:64:dc:4f:e1:fb:47:88:95:48:3c:9d:78:a3:8f:2a:c0:
c8:b1:3d:59:b7:fe:e0:34:9b:db:15:3b:d0:b2:0d:a1:4e:f4:
c9:8d:99:d8:32:ca:a0:6e:a0:a0:08:b5:3a:4a:2e:36:4a:44:
ef:08:57:1d:d9:35:2a:86:77:f6:75:47:8f:d2:a9:c4:f3:09:
6f:f2:74:24:4b:53:f8:42:16:ce:c0:58:be:50:b1:a7:41:01:
d7:84:89:73:0d:0d:0b:75:3d:d2:74:03:54:5e:74:7a:54:b3:
a9:99:79:82:a3:fd:ae:70:b3:d8:0b:27:45:91:4e:41:3c:9d:
e5:7e:f3:02:f0:5d:f4:d6:81:67:6b:7f:93:bf:28:d4:50:4e:
26:9b:b0:93:98:a2:03:f4:92:57:0c:31:d3:43:de:e5:36:a6:
8c:0c:15:48:87:d9:8b:4e:1c:c5:0c:c5:d1:c2:3f:be:4e:9c:
72:f4:ee:81:7d:9e:b5:48:bd:83:cf:88:ce:ad:4b:9c:2d:ef:
85:c7:e8:99:64:00:f1:a6:9f:09:82:23:3c:89:86:9d:48:75:
ac:83:a6:e2:d4:10:e5:ab:cd:6f:06:e6:15:c1:1e:2b:93:49:
26:b8:dd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 14:29:33 2025 by rpki-client