Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6vWiqmDOOxq9smTCee6rWSk9Za0.roa
File: 6vWiqmDOOxq9smTCee6rWSk9Za0.roa (raw, json)
Hash identifier: fx/yed2pAlwi9eyqUMXFSvJXhQ9x2602AX+b8fasBHk=
Subject key identifier: EA:F5:A2:AA:60:CE:3B:1A:BD:B2:64:C2:79:EE:AB:59:29:3D:65:AD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0185DE7AF1E8837B0D99E634828464D7491A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6vWiqmDOOxq9smTCee6rWSk9Za0.roa
Signing time: Mon 23 Jan 2023 11:54:37 +0000
ROA not before: Mon 23 Jan 2023 11:54:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8772
IP address blocks: 2a0a:1400::/29 maxlen: 29
2a0f:e040::/29 maxlen: 29
2a0f:2100::/29 maxlen: 29
2a0c:9240::/29 maxlen: 29
2a0f:e6c0::/29 maxlen: 29
2a0f:8100::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:7a:f1:e8:83:7b:0d:99:e6:34:82:84:64:d7:49:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 23 11:54:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaf5a2aa60ce3b1abdb264c279eeab59293d65ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4f:b3:6d:83:d5:fb:9e:1a:04:0d:af:37:2a:
b7:57:53:42:43:c3:90:cb:e8:30:2b:ac:97:5a:20:
1b:03:21:5b:52:04:e4:88:2a:48:e4:83:14:84:2d:
6c:45:8c:34:0f:e3:e1:c4:fe:e5:66:13:98:00:06:
8a:b2:e6:85:5b:e7:69:58:82:78:96:21:e5:62:7f:
da:6a:fc:29:73:ea:0c:c8:48:4b:5b:84:d5:24:21:
1d:0f:61:06:fa:e6:bb:31:b5:89:c3:ba:55:8b:bf:
f1:00:95:2f:b3:1b:5f:1a:2a:f1:3b:4a:2d:c5:c0:
08:79:a9:72:31:a3:49:8f:26:de:e7:49:2a:5d:39:
75:5d:f7:f9:14:27:f5:c1:5c:9c:69:6f:a5:01:83:
01:7b:3d:df:77:74:b0:0e:9b:42:96:48:7d:3d:23:
3d:7d:9d:2d:eb:83:19:6a:f4:a4:e7:98:d7:54:e1:
91:68:c3:0b:4f:40:e2:0a:d3:d0:f6:24:39:8c:04:
94:19:97:f3:5d:91:84:9c:cf:96:ad:2d:c6:39:53:
c4:4f:a3:78:17:4f:e2:22:31:fa:7d:55:68:a1:79:
ce:25:7f:c7:5f:e8:45:63:52:0d:a0:83:41:4f:59:
62:d9:32:1b:6f:8d:81:f0:51:c2:4b:51:d5:f1:e3:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F5:A2:AA:60:CE:3B:1A:BD:B2:64:C2:79:EE:AB:59:29:3D:65:AD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6vWiqmDOOxq9smTCee6rWSk9Za0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:1400::/29
2a0c:9240::/29
2a0f:2100::/29
2a0f:8100::/29
2a0f:e040::/29
2a0f:e6c0::/29
Signature Algorithm: sha256WithRSAEncryption
c1:52:5d:4b:a9:73:ff:79:24:72:2f:14:a3:07:ff:6c:2c:e8:
25:c1:21:03:c2:b2:14:b0:a7:a1:0b:63:2f:54:d0:81:1d:ea:
b0:4f:67:74:fb:09:32:07:e8:a6:45:18:7f:c0:2e:bf:f2:4f:
97:ac:b8:c6:46:32:c6:55:90:9d:fd:f2:17:ef:2b:c2:11:22:
0c:62:2d:d9:e7:b4:d8:a8:f1:d9:d9:d5:87:82:da:f6:88:f8:
0d:f8:60:dc:df:f6:12:28:41:4e:ca:74:3f:6a:6f:12:29:17:
18:06:cd:f2:2b:1f:15:bb:79:78:f1:3b:2c:c8:4a:a7:3e:c4:
cc:bb:d3:29:f1:a1:a2:bf:91:b4:ff:52:8c:ff:fb:3a:52:4b:
eb:1f:62:1c:3d:32:1b:aa:9a:4d:e1:27:7b:3f:49:2f:58:be:
48:d5:3b:9c:ee:64:35:2a:8d:4c:be:97:b5:ae:be:bd:df:08:
0e:5b:56:2b:a3:16:72:16:0b:90:41:2b:69:72:4b:af:a8:e1:
08:af:80:73:69:de:cc:83:86:94:72:23:35:d2:6a:8c:c0:a3:
be:1a:92:0a:2a:62:28:b4:d1:47:8a:3e:40:92:fa:94:58:c7:
2f:1d:3c:73:11:df:a0:b4:a1:33:06:d0:02:62:a3:60:de:57:
85:fe:17:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:35:22 2025 by rpki-client