Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AxJMY5VfgzSkmU6eETuDfhknQno.roa
File: AxJMY5VfgzSkmU6eETuDfhknQno.roa (raw, json)
Hash identifier: pdmcxcXj3oXpze4se2u0biWKSTxJX0b8PfvVKifOC5M=
Subject key identifier: 03:12:4C:63:95:5F:83:34:A4:99:4E:9E:11:3B:83:7E:19:27:42:7A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 038E9222
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AxJMY5VfgzSkmU6eETuDfhknQno.roa
Signing time: Thu 16 Jun 2022 12:04:46 +0000
ROA not before: Thu 16 Jun 2022 12:04:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 2a07:7885::/32 maxlen: 32
2a07:7881::/32 maxlen: 32
2a07:7882::/32 maxlen: 32
2a0f:39c1::/32 maxlen: 32
2a0f:39c2::/32 maxlen: 32
2a0f:39c5::/32 maxlen: 32
2a07:7884::/32 maxlen: 32
2a0f:39c4::/32 maxlen: 32
2a07:7887::/32 maxlen: 32
2a0f:39c7::/32 maxlen: 32
2a0f:e840::/32 maxlen: 32
2a07:7886::/32 maxlen: 32
2a0f:39c6::/32 maxlen: 32
2a0f:39c3::/32 maxlen: 32
2a0f:39c0::/32 maxlen: 32
2a07:7883::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59675170 (0x38e9222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 16 12:04:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03124c63955f8334a4994e9e113b837e1927427a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:bc:1e:e5:6d:5c:58:a1:ad:b8:1c:35:c5:
d6:66:48:1e:e0:23:2f:d8:16:97:8f:82:39:73:1e:
aa:de:c4:5f:55:2a:7c:bb:f4:67:af:c1:1b:4f:94:
cc:40:3d:a8:a4:eb:b0:9e:5f:19:25:05:4e:b4:ba:
8f:34:9a:d1:3d:cf:8f:68:59:0d:12:88:83:94:d9:
57:15:c5:9d:bd:cc:55:b5:9d:d2:c6:4e:78:18:5e:
64:da:29:7f:77:a9:d1:7a:00:73:25:66:c3:57:50:
70:d4:33:91:c8:b9:59:9d:fb:e5:44:17:84:1f:42:
73:f2:2f:cd:11:eb:22:4c:ca:a7:7f:07:58:c8:aa:
2b:08:54:d1:8d:09:2c:ed:01:3c:b1:29:04:08:80:
7f:07:dd:f2:32:98:7b:4b:b7:67:72:50:02:9c:7d:
0c:df:ae:bd:c3:23:3f:03:cf:f0:cc:5c:7e:cb:2f:
0b:88:f3:25:7d:5f:60:61:a5:ba:e1:d9:ec:25:fc:
f7:8f:9f:2b:34:99:60:30:3a:76:77:ab:52:b2:35:
9c:9a:05:d5:6a:79:42:ab:0b:5b:71:32:0e:29:4d:
4e:20:1b:a0:c1:75:11:21:53:81:54:f9:62:fa:02:
b1:1e:dd:1c:ae:d0:0b:f2:b4:f3:8a:3a:e7:d2:71:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:12:4C:63:95:5F:83:34:A4:99:4E:9E:11:3B:83:7E:19:27:42:7A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AxJMY5VfgzSkmU6eETuDfhknQno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:7881::-2a07:7887:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:39c0::/29
2a0f:e840::/32
Signature Algorithm: sha256WithRSAEncryption
5e:de:c5:97:84:10:71:94:57:81:4d:bd:b0:6b:d6:f8:ae:e9:
27:4b:36:a5:ea:93:10:b5:cd:64:ce:ce:98:45:f2:fc:e8:31:
7c:af:a3:c0:d6:f8:6e:cb:d3:60:45:ae:83:34:d1:bd:c6:71:
51:1d:22:fc:95:ed:21:c7:e9:71:48:fc:cd:c9:8d:bf:8b:d1:
c7:b2:8c:72:ac:c0:6b:08:75:8b:1d:4f:5b:72:15:a1:d1:d9:
70:c4:80:c6:51:46:d6:0b:ef:95:2d:dc:1d:da:1b:15:ee:41:
a1:82:c0:79:89:de:18:d2:bd:8a:c7:1b:35:99:6a:2d:98:a7:
84:45:ee:b6:08:d0:9e:a0:18:ed:b6:bc:f4:88:1e:47:97:c0:
cb:c5:0a:44:b3:0c:cf:31:03:d1:88:6a:36:61:2e:39:a6:46:
35:32:c5:a3:64:17:56:18:80:49:48:02:00:f7:fc:aa:f7:59:
6e:65:96:5b:02:08:26:7b:80:c6:c2:1c:2d:c2:d3:bd:d7:8d:
2e:0a:b9:62:f7:1e:f4:b0:63:05:8b:84:a1:54:1d:8b:96:d4:
8e:64:ee:2b:a1:b2:e1:f4:5d:40:7b:b0:eb:6b:a8:da:73:64:
19:f8:ff:7b:4b:b0:b1:78:5d:ec:94:50:5a:78:45:76:b9:51:
db:22:f1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:27:44 2025 by rpki-client