Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6rf5iadN6wUvgha8xVRUZzHyErI.roa
File: 6rf5iadN6wUvgha8xVRUZzHyErI.roa (raw, json)
Hash identifier: CxJ4/aEXTGRXHcKES8xRSPBinjPhnMDBEKLshOpUiEk=
Subject key identifier: EA:B7:F9:89:A7:4D:EB:05:2F:82:16:BC:C5:54:54:67:31:F2:12:B2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 03651B7F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6rf5iadN6wUvgha8xVRUZzHyErI.roa
Signing time: Thu 02 Jun 2022 10:18:22 +0000
ROA not before: Thu 02 Jun 2022 10:18:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 2a0f:39c7::/32 maxlen: 32
2a12:d6c0::/29 maxlen: 29
2a0f:39c1::/32 maxlen: 32
2a0f:39c2::/32 maxlen: 32
2a0f:39c5::/32 maxlen: 32
2a0f:e840::/32 maxlen: 32
2a0f:39c6::/32 maxlen: 32
2a0f:39c4::/32 maxlen: 32
2a0f:39c3::/32 maxlen: 32
2a0f:39c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56957823 (0x3651b7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 2 10:18:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eab7f989a74deb052f8216bcc554546731f212b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:4a:a0:4b:e8:c8:d6:9b:a0:91:0f:1f:91:
61:29:4c:89:db:89:53:9c:8c:c3:f6:51:6a:6e:cc:
30:84:d7:dc:3e:d3:f0:68:44:16:4a:e0:c6:07:8a:
5e:36:37:43:0e:1a:a2:97:e6:3a:b3:c8:2f:13:0b:
cf:d6:a1:31:12:4a:17:23:07:33:45:85:33:a5:1d:
f5:34:2c:1d:74:1b:d8:0d:7b:30:bb:10:8e:5e:e7:
e6:f9:50:de:0a:8f:e0:e7:92:76:c2:1d:24:73:98:
c7:ac:95:66:6a:15:01:5e:57:8d:44:c2:ab:59:df:
d3:f0:37:93:84:7e:5d:89:ac:ba:19:f1:5d:7d:17:
ec:4f:63:42:6a:a1:94:5e:2d:9f:47:75:65:4b:54:
0b:21:b8:dd:b5:16:13:a8:28:2b:1c:56:98:ac:8a:
4e:a3:13:0a:b2:cb:76:43:ca:69:eb:3c:cc:f3:bc:
e8:f8:cd:08:39:02:6a:bf:c8:9e:4b:c5:38:33:93:
01:73:dd:d6:e4:d2:f1:dc:fe:8a:3f:b4:24:a4:4f:
be:c9:91:09:46:76:6d:f2:c8:10:f3:a7:4e:7b:39:
ec:94:a7:8b:ce:8b:50:61:a4:80:c5:e6:ab:ea:8b:
eb:2a:06:a8:5c:10:e9:02:6b:2d:3a:20:47:c9:66:
54:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B7:F9:89:A7:4D:EB:05:2F:82:16:BC:C5:54:54:67:31:F2:12:B2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6rf5iadN6wUvgha8xVRUZzHyErI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:39c0::/29
2a0f:e840::/32
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
23:c7:02:60:9d:f0:db:b9:fb:cc:f3:a8:10:84:9b:ba:40:a5:
8f:c1:cc:5f:b6:b9:3a:12:c7:11:2a:bb:50:33:fa:a3:7d:93:
21:bf:05:e5:2f:c1:6f:e2:82:18:53:bd:2b:af:80:71:6d:c6:
05:2e:10:d1:a9:50:42:56:af:4e:c6:06:ac:a0:c7:4f:29:52:
63:45:25:e6:d7:b8:58:86:ed:ad:57:1b:e7:6f:fa:3d:ac:fc:
15:4a:0a:ba:7a:db:ba:56:6f:14:9e:4e:e3:8b:7a:d8:5a:87:
a2:9a:2f:0f:ff:d3:da:16:b9:0c:f8:12:57:90:04:fb:a0:d8:
85:f4:a5:ae:c5:d1:9c:a2:3c:f2:40:2e:af:f8:3c:a9:a8:7e:
c6:e6:4e:aa:8c:af:eb:fa:e0:1e:6e:12:68:05:32:fc:62:9e:
53:5d:54:69:52:aa:4b:23:7f:30:34:ac:13:9c:64:7b:ba:8b:
c3:fc:06:6a:f1:4d:26:e1:f4:c3:75:43:87:f8:12:4c:c5:ba:
a4:ad:83:20:92:fe:c0:e8:e5:fd:07:a4:0f:25:18:03:f4:fe:
2c:31:93:f6:06:c4:bd:f3:2c:c8:8e:e6:7c:3b:06:1c:cd:50:
49:18:dc:fc:d5:b2:84:6f:ea:3b:30:59:5b:ed:df:5c:8a:9b:
83:92:43:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:38:54 2025 by rpki-client