Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HmNkUOFGegWscjBUYZx4ZrcRqbo.roa
File: HmNkUOFGegWscjBUYZx4ZrcRqbo.roa (raw, json)
Hash identifier: c1dVhZkQIjQey0p4co95QT76va2fUZE/QzQEzLVjGkI=
Subject key identifier: 1E:63:64:50:E1:46:7A:05:AC:72:30:54:61:9C:78:66:B7:11:A9:BA
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01856DCAFA5A2F8C5BC9ACFC367255B14E83
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HmNkUOFGegWscjBUYZx4ZrcRqbo.roa
Signing time: Sun 01 Jan 2023 14:44:56 +0000
ROA not before: Sun 01 Jan 2023 14:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396362
IP address blocks: 2a0f:e841::/32 maxlen: 32
2a0c:4880::/29 maxlen: 29
2a0f:e843::/32 maxlen: 32
2a0e:1a82::/32 maxlen: 32
2a0f:1e80:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:fa:5a:2f:8c:5b:c9:ac:fc:36:72:55:b1:4e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 14:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e636450e1467a05ac723054619c7866b711a9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d8:a1:65:0c:fb:2f:21:3d:ae:9f:22:95:3b:
91:9a:2d:1b:80:5e:62:0d:27:5d:9e:51:14:7f:67:
8e:fb:f0:ae:bc:0a:11:d9:6d:41:ec:61:52:4d:41:
95:2d:93:2c:86:0d:a6:44:35:6d:9c:06:b1:be:8f:
22:2b:8d:0c:0e:dd:78:83:56:38:b5:ee:e0:4a:26:
fe:74:4b:9d:7e:49:90:22:71:0d:ab:27:14:61:af:
13:a7:ff:42:ee:d2:00:01:a1:c1:56:d3:7b:03:54:
b2:df:a2:49:87:fc:a8:5e:37:5b:d9:50:86:c8:11:
8d:f2:e7:37:8d:c6:d7:4e:00:4b:bc:c0:9f:6f:20:
ed:7e:9d:d6:e3:4d:68:62:3a:7d:57:34:fb:07:fa:
97:7a:d6:8f:10:db:1f:d8:9e:c6:a1:89:d5:b1:66:
d4:21:67:48:c1:e6:ed:30:aa:dd:0e:6f:6b:80:c8:
7c:f6:10:62:ce:7f:66:f6:7d:45:2c:de:52:29:85:
2a:74:27:5f:0d:44:b7:3d:ec:36:04:5b:44:1d:0b:
fa:48:71:f4:db:49:ea:10:c2:21:e7:cc:39:de:3e:
b2:3f:07:e5:a3:bf:ad:02:18:78:c9:0b:46:30:ac:
aa:4e:9f:46:2a:d7:48:6d:5a:bf:00:cb:28:69:26:
64:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:63:64:50:E1:46:7A:05:AC:72:30:54:61:9C:78:66:B7:11:A9:BA
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HmNkUOFGegWscjBUYZx4ZrcRqbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:4880::/29
2a0e:1a82::/32
2a0f:1e80:1::/48
2a0f:e841::/32
2a0f:e843::/32
Signature Algorithm: sha256WithRSAEncryption
1a:3c:99:d0:42:79:c0:af:93:5e:64:03:ed:20:d1:2f:ef:19:
be:4b:97:a6:93:bd:8a:2f:a7:2b:60:cb:12:be:bd:4f:5b:ce:
6d:57:f2:c4:3c:fd:98:b0:50:a7:63:d9:c0:2c:5c:c3:9a:24:
6f:5c:7f:14:87:e1:33:3b:fd:e4:50:dd:05:e5:e7:52:3b:1f:
8f:92:f9:2c:8a:96:91:93:89:fb:25:2f:e5:f4:8d:68:38:0e:
d5:b8:ff:dd:40:99:80:02:4a:6d:10:77:a1:71:60:93:73:4e:
b0:96:f0:00:fc:64:e3:3e:1d:fe:69:c8:44:bc:ff:ae:81:11:
a4:18:df:13:49:07:16:73:e2:23:d5:cb:d0:45:d7:ab:42:c9:
12:fe:95:8d:37:d2:a2:fe:f2:55:86:a9:b3:cd:94:e7:ae:ce:
62:f4:16:0e:b0:0c:22:6d:e3:31:d7:a1:4d:77:23:50:8e:6b:
3c:51:58:81:8d:48:ad:bb:3e:06:f4:02:b4:a4:5d:b5:0e:81:
97:21:22:e1:d4:07:de:e5:4a:82:12:7f:dc:5c:14:17:92:58:
72:7d:25:bd:dd:34:80:e4:f9:f0:52:f7:9c:ea:d4:c7:34:cc:
b9:72:97:ee:8c:6d:27:a0:81:6a:bb:7d:f2:90:46:89:0d:b2:
da:02:72:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:13:02 2025 by rpki-client