Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MbQ9nR7XgVTswffH2d2LUpE8Amg.roa
File: MbQ9nR7XgVTswffH2d2LUpE8Amg.roa (raw, json)
Hash identifier: qoBqZRHkXAOxc+8UyMn2Ovc/+6vAbZ5yNuCU4tKl47I=
Subject key identifier: 31:B4:3D:9D:1E:D7:81:54:EC:C1:F7:C7:D9:DD:8B:52:91:3C:02:68
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018825C9B9A06B39BB2A458919D5DDFFA40E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MbQ9nR7XgVTswffH2d2LUpE8Amg.roa
Signing time: Tue 16 May 2023 18:19:17 +0000
ROA not before: Tue 16 May 2023 18:19:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399587
IP address blocks: 2a13:c500::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:25:c9:b9:a0:6b:39:bb:2a:45:89:19:d5:dd:ff:a4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 16 18:19:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31b43d9d1ed78154ecc1f7c7d9dd8b52913c0268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:ce:9a:f3:d4:33:ec:be:4e:c9:91:76:e0:
56:b3:bf:74:b9:2d:30:4d:86:dd:02:da:c5:67:1a:
03:e8:ba:a2:f7:6e:ea:c6:7c:95:bc:d5:34:a5:4a:
64:05:29:39:19:9b:9a:0c:c6:00:72:f0:d5:f0:39:
fc:68:20:7d:46:67:3a:a5:91:8c:f3:5c:fb:89:5b:
fb:ab:0f:66:96:4e:4b:cb:e9:52:60:50:b3:5f:aa:
2d:eb:cd:83:0c:0b:f4:cd:13:b6:1e:4b:8d:ac:c3:
31:e8:1f:ed:b0:a9:1c:b6:44:c3:81:27:52:91:ec:
b8:3d:d8:ce:7a:e1:59:5b:77:88:d9:7b:56:ef:98:
d3:d5:57:78:6a:13:31:7b:d0:68:16:59:24:37:1e:
02:7b:f0:0c:8c:e5:09:bd:a3:c6:b3:00:36:78:a1:
96:76:2f:cd:a6:da:ea:5e:b5:ab:de:db:79:d4:86:
14:68:cc:c3:9b:fc:17:13:c6:c8:12:03:bc:f8:97:
bd:fb:6f:13:ff:e9:f0:7d:b2:be:bd:b5:dc:41:9a:
84:fb:e9:74:6a:b0:ed:b6:aa:07:26:f7:a3:e4:d6:
05:ba:e8:e0:e1:7f:80:2c:15:87:7a:6f:9c:3a:d1:
c1:8e:56:4a:2c:2e:65:c4:04:15:73:b0:6d:05:9d:
88:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B4:3D:9D:1E:D7:81:54:EC:C1:F7:C7:D9:DD:8B:52:91:3C:02:68
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MbQ9nR7XgVTswffH2d2LUpE8Amg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c500::/29
Signature Algorithm: sha256WithRSAEncryption
9b:c5:d2:f9:be:c2:2c:a6:4e:d4:39:8a:8e:13:6a:31:7e:35:
ed:a6:83:ba:be:b9:33:15:03:0f:ed:0e:95:ad:22:e8:9a:db:
d6:c0:fd:e9:13:2c:07:92:e6:9e:5b:af:77:ce:d2:3e:3f:26:
75:27:13:c0:91:77:d7:d1:8a:27:f1:07:90:f3:53:3f:35:24:
d2:10:d1:bf:4c:e3:0f:60:71:ee:21:3c:2b:d8:9f:83:58:8f:
d3:25:cf:a7:a0:a5:1b:38:76:bf:af:c6:d9:3b:44:c5:34:b2:
4c:d7:01:94:78:fb:f6:2d:84:bd:61:f0:14:42:cb:82:e3:84:
8b:ea:e5:a3:d8:ef:8d:6f:14:60:4c:47:83:e2:c8:fd:d3:30:
ba:ab:39:d2:7e:b9:0b:ff:96:b7:ad:0e:b0:c0:ee:58:dc:ee:
90:96:ef:ef:89:da:9b:8b:5b:85:70:40:5a:a2:78:79:5c:7e:
50:2d:ec:99:6d:64:7f:62:76:96:3a:17:35:f3:81:66:9e:c4:
53:9a:76:01:d3:6a:24:59:94:e1:4c:97:c7:d1:89:7b:6f:58:
b4:9c:f1:3f:c0:04:23:d5:36:88:f5:29:da:f3:00:a1:ff:fc:
7c:e1:e8:fe:76:c7:bc:f1:1d:78:50:99:be:03:bf:10:4a:e1:
35:6d:f7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:51:15 2025 by rpki-client