Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/I26eRg_Jx5UbWflLIy52ITC5oDY.roa
File: I26eRg_Jx5UbWflLIy52ITC5oDY.roa (raw, json)
Hash identifier: vIUNdOyYp9i3fc2yRTa+47VwNBO9i7kdBFGh4erAE+M=
Subject key identifier: 23:6E:9E:46:0F:C9:C7:95:1B:59:F9:4B:23:2E:76:21:30:B9:A0:36
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01894030DCC751019B6C06B04C674C853D4E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/I26eRg_Jx5UbWflLIy52ITC5oDY.roa
Signing time: Mon 10 Jul 2023 14:24:51 +0000
ROA not before: Mon 10 Jul 2023 14:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 2a13:18c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:30:dc:c7:51:01:9b:6c:06:b0:4c:67:4c:85:3d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 10 14:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=236e9e460fc9c7951b59f94b232e762130b9a036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:4c:30:e0:fd:53:cc:35:21:6a:9a:1b:a3:
95:f1:2a:43:f2:dc:24:6d:c8:f5:2e:cd:b7:11:76:
12:e3:95:41:23:f6:4e:fb:45:c2:b8:4f:73:f3:b1:
97:70:0d:09:34:d9:7c:a2:d7:9f:4c:74:ad:81:27:
6e:33:9d:b7:a8:a2:d8:e8:23:2a:a3:0f:82:2b:f2:
f7:42:41:2d:86:03:d4:66:5f:f8:20:41:8e:2f:7f:
89:0c:a2:78:27:53:ef:de:3c:9e:08:b2:87:af:df:
1d:3a:06:95:15:2c:b4:cb:25:fc:24:56:56:a0:a6:
8f:fa:1f:0c:9d:84:12:6d:3f:a6:1d:eb:50:db:15:
2f:8c:91:0a:53:fe:db:91:f3:74:bc:52:60:40:86:
41:40:54:18:24:96:7c:a5:ac:58:91:89:4d:93:51:
95:93:00:13:a6:68:3f:1d:b0:0f:30:da:39:fe:ee:
fa:04:d9:30:ce:54:ad:ae:78:8c:f5:93:58:b2:aa:
7b:73:ef:1c:d8:30:92:0a:69:72:07:69:cf:e7:0c:
34:23:bc:ce:d6:99:44:95:d4:bb:f4:69:9f:a6:87:
20:db:4b:4d:d9:c3:64:e1:87:ac:7c:64:bd:4b:c2:
1e:50:75:6f:5f:78:3b:15:2e:a1:58:11:93:a2:70:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6E:9E:46:0F:C9:C7:95:1B:59:F9:4B:23:2E:76:21:30:B9:A0:36
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/I26eRg_Jx5UbWflLIy52ITC5oDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:18c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
45:1c:8c:3b:34:2f:45:1b:e2:f3:8d:de:8f:6d:90:50:89:47:
f6:6b:10:d2:63:0e:60:f7:9f:8f:38:b7:8e:66:2b:7c:d6:6a:
c5:d0:28:05:37:75:a4:b0:8d:2a:6f:5a:c4:73:d2:cc:1f:69:
09:23:91:d0:63:c3:2e:25:5c:c6:0b:44:04:99:66:de:8e:99:
df:1f:13:ab:f4:bf:1e:d4:f9:1f:dd:23:c8:6a:9f:04:e7:50:
ce:79:d2:b3:ec:b4:2d:7c:13:89:7a:c2:47:be:f5:c1:72:5c:
09:75:bf:6e:02:41:b8:85:03:34:1b:a2:e2:f2:3a:6c:ea:cb:
29:bd:7d:d2:af:b0:cf:56:b4:5a:bc:aa:8b:d1:3c:da:bb:da:
ae:92:6f:2c:1f:6f:fb:dd:7e:d5:dd:6e:b1:a1:7d:b6:f2:6c:
80:75:22:44:c7:9d:77:79:b2:83:99:17:d1:51:7f:8d:9c:26:
1c:36:bc:89:93:c0:1a:7d:64:bf:0f:b9:e8:91:81:3c:92:9c:
6e:d2:c4:87:a3:36:09:7e:8c:ef:5c:d3:4c:69:f9:a8:cc:5b:
f5:9e:fd:a8:e8:6e:46:a9:95:da:4c:79:08:f1:f0:52:a8:86:
69:f5:9b:37:b8:bf:45:2d:cd:89:68:cc:fc:f5:86:0a:b9:38:
03:f3:a5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:12:39 2025 by rpki-client