Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GaTMxR0ceuXwxWEWaCCRIYmDCoY.roa
File: GaTMxR0ceuXwxWEWaCCRIYmDCoY.roa (raw, json)
Hash identifier: lPWVvOZ7Ycu8oV+45SiLyUbWXU7/zE5mBR57WkpT67s=
Subject key identifier: 19:A4:CC:C5:1D:1C:7A:E5:F0:C5:61:16:68:20:91:21:89:83:0A:86
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01827CB3A95F2394D8AAFC1270D65B9DAB2B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GaTMxR0ceuXwxWEWaCCRIYmDCoY.roa
Signing time: Mon 08 Aug 2022 09:05:25 +0000
ROA not before: Mon 08 Aug 2022 09:05:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203629
IP address blocks: 2a0e:9b00::/29 maxlen: 29
2a0f:1380::/29 maxlen: 29
2a0f:1480::/29 maxlen: 29
2a0f:1580::/29 maxlen: 29
2a0f:3f80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:b3:a9:5f:23:94:d8:aa:fc:12:70:d6:5b:9d:ab:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 8 09:05:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19a4ccc51d1c7ae5f0c561166820912189830a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:7e:75:86:45:36:dc:d6:f3:23:53:53:09:
86:8a:e9:f5:d1:cb:60:86:fd:51:8e:9d:8e:e2:50:
94:dd:4b:65:d0:77:86:11:f5:38:46:27:f8:92:67:
52:fd:24:bd:37:36:e1:db:14:19:7b:bb:f7:26:d3:
74:3c:ad:73:82:33:a1:dc:67:20:74:3e:00:16:e6:
5c:f7:03:5e:ff:62:d9:00:1a:53:28:f1:1b:02:75:
4a:39:04:c1:6b:e7:92:02:e6:34:76:34:8e:0b:d7:
77:3a:1e:8e:91:2a:64:86:11:34:0a:e8:4d:96:e7:
70:a6:de:ad:66:72:2e:7e:0e:c4:b5:a8:e5:52:8a:
46:6e:15:4d:2c:10:db:b6:de:11:02:fb:87:2c:e4:
78:53:b2:40:8f:bf:e8:87:d6:38:9e:4a:c0:1e:62:
ca:d7:55:bc:cc:b7:b0:81:63:84:fc:ca:52:41:ba:
4e:11:9b:13:58:f0:f5:77:58:c4:ca:66:64:88:81:
87:0b:0c:80:4d:16:5c:99:e4:22:db:2b:c6:a2:cd:
6b:1b:24:57:22:25:7d:a9:bd:6e:bd:1e:9b:72:ff:
af:1b:f0:f3:f3:41:99:3e:1d:9a:14:74:f3:29:ab:
f6:20:4b:96:d6:09:5d:85:13:7a:c1:49:a2:e0:1d:
1c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A4:CC:C5:1D:1C:7A:E5:F0:C5:61:16:68:20:91:21:89:83:0A:86
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GaTMxR0ceuXwxWEWaCCRIYmDCoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:9b00::/29
2a0f:1380::/29
2a0f:1480::/29
2a0f:1580::/29
2a0f:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
36:c3:09:62:47:45:a6:a2:e1:21:b9:11:a0:39:e4:29:ba:7e:
4a:42:35:cf:c2:ee:3c:20:f5:7e:4c:2b:5e:5e:7b:d4:25:b8:
01:fe:45:58:33:93:a7:0b:41:16:11:2e:ea:27:40:da:ed:39:
97:43:19:90:0c:6d:a3:7c:bb:70:63:6d:45:45:56:14:f8:30:
80:93:2a:16:ed:2b:87:ae:34:ab:d7:af:c2:82:c8:ab:18:7e:
d4:91:fa:7a:a7:58:fb:22:d7:c6:c8:2f:e3:c0:b4:57:db:09:
82:9d:ac:47:1b:48:20:67:82:54:26:23:cd:98:aa:8d:d8:b4:
4a:a9:8e:9d:fa:61:b4:e4:de:96:cd:73:9e:3a:1c:8b:6c:21:
74:dd:98:b4:aa:02:fc:4b:b0:28:7c:a6:76:49:e2:f6:c2:4f:
7e:fa:cf:82:f9:c6:a0:7f:b2:bf:a4:77:30:de:d5:24:d1:0b:
b8:e1:55:81:45:5c:60:06:4f:55:d8:aa:cb:63:8d:c6:65:1f:
5e:df:64:39:ea:df:26:61:a0:7b:17:32:ce:52:8c:b2:58:48:
d3:3e:b9:15:6e:9b:b8:03:14:34:dd:d7:21:9a:44:ad:19:29:
ef:97:5f:58:f7:c2:ca:03:87:e4:ab:e6:f5:14:27:a6:f6:b1:
cf:a5:9d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:42:23 2025 by rpki-client