Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ScsDhX4v1y3MJg46lkhXBtsaJBk.roa
File: ScsDhX4v1y3MJg46lkhXBtsaJBk.roa (raw, json)
Hash identifier: i7zz6rZ/XnBv3nD11HxBDFT7B8Zmn5+rY8VXwPwuQF4=
Subject key identifier: 49:CB:03:85:7E:2F:D7:2D:CC:26:0E:3A:96:48:57:06:DB:1A:24:19
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01869349FF7CA6F4E7C5FBC5D80EC91EA438
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ScsDhX4v1y3MJg46lkhXBtsaJBk.roa
Signing time: Mon 27 Feb 2023 14:32:25 +0000
ROA not before: Mon 27 Feb 2023 14:32:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8772
IP address blocks: 2a12:d6c0::/29 maxlen: 29
2a0f:dd40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:49:ff:7c:a6:f4:e7:c5:fb:c5:d8:0e:c9:1e:a4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 27 14:32:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49cb03857e2fd72dcc260e3a96485706db1a2419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:29:da:61:b5:ac:77:59:78:d0:14:09:b7:d4:
9f:c4:28:a6:6d:43:b6:be:2d:9c:a6:85:e5:c5:ca:
40:24:2f:48:29:61:c8:78:6e:f2:7d:f9:c8:ba:50:
a7:3c:71:7e:82:a5:2b:0e:cb:6a:3e:51:4d:7d:be:
27:6f:4f:fd:be:19:b4:a0:03:07:9b:17:63:6f:34:
f7:bc:f1:27:88:39:b2:1b:1f:f8:f3:8f:de:9e:03:
3c:4b:a3:51:e4:1b:c7:c5:51:10:9e:06:74:59:1b:
22:7a:94:b5:d3:54:e8:a4:32:c3:4e:86:2e:04:a1:
75:ea:6e:3e:b9:87:9f:9d:27:e3:06:e3:70:50:7c:
16:f3:f3:5d:39:32:c1:89:49:3a:db:fe:46:5a:b0:
4f:a7:af:3e:26:4f:28:99:27:db:39:33:e8:51:f4:
2e:fb:37:54:1d:e2:19:a4:2d:64:52:fa:ff:40:88:
7d:94:be:20:e6:6b:fb:e4:fb:0e:ee:55:1b:73:18:
5f:5a:d2:d2:84:98:e4:21:b9:fe:b2:a0:8f:7e:b2:
b3:86:c4:ce:26:db:6e:ed:91:86:f7:92:e2:ee:d7:
fe:0d:f4:89:ea:06:83:17:f9:78:fb:07:c0:68:3a:
6c:35:3f:45:92:f5:a0:04:9b:cb:9d:52:d8:dd:58:
8c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CB:03:85:7E:2F:D7:2D:CC:26:0E:3A:96:48:57:06:DB:1A:24:19
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ScsDhX4v1y3MJg46lkhXBtsaJBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:dd40::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
8e:61:aa:94:fc:2c:75:e9:e4:22:1d:53:8d:6c:7d:e3:3d:ab:
91:40:05:68:3b:2d:ef:05:7a:e6:98:3e:10:25:9b:a0:59:4a:
90:7b:57:c8:eb:54:69:32:82:eb:88:6a:db:ee:44:d0:ad:cd:
23:81:9d:eb:69:99:72:6a:04:7e:fe:94:e9:b2:0a:21:70:64:
35:b4:1d:df:dd:34:41:13:d2:69:26:57:67:ca:24:67:d9:1e:
07:12:80:04:b9:54:27:34:5b:96:ef:fd:2e:2e:52:6e:e7:8e:
fd:49:5f:6f:06:35:3b:ab:54:82:4c:73:97:90:db:7d:98:f1:
00:03:d1:ee:d9:67:02:38:b0:bc:5e:16:24:d8:ef:75:84:8c:
d3:2f:c9:33:c1:54:95:cf:e6:4b:d1:0f:69:fc:6a:ff:b6:7f:
23:e1:58:4f:da:6d:e9:5f:15:09:62:de:ef:fd:50:24:50:5d:
2b:b1:95:77:b0:33:63:fc:a2:17:8f:04:10:c2:84:8b:e0:ae:
46:17:f3:38:36:b3:43:cb:c4:2e:d7:3f:ba:87:81:a6:71:d7:
14:45:f9:ea:3f:cd:31:4f:e4:2b:14:be:de:98:ae:c6:bf:a0:
69:1d:e8:48:cc:1f:e2:fb:48:76:e4:cd:db:ac:de:8d:c6:30:
e6:f5:a7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:35:32 2025 by rpki-client