Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VjKREIhEs7ayR04BXSrCxEkeDlU.roa
File: VjKREIhEs7ayR04BXSrCxEkeDlU.roa (raw, json)
Hash identifier: Lq4Ax/U5+sNBPlj4HakSuVTF6NeKciS/zRjRJ1ojZhA=
Subject key identifier: 56:32:91:10:88:44:B3:B6:B2:47:4E:01:5D:2A:C2:C4:49:1E:0E:55
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018BA8463825076E2E4CC0E5530DFCF98939
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VjKREIhEs7ayR04BXSrCxEkeDlU.roa
Signing time: Tue 07 Nov 2023 05:34:15 +0000
ROA not before: Tue 07 Nov 2023 05:34:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a0f:7d00:1::/48 maxlen: 48
2a0f:7d00:5::/48 maxlen: 48
2a0c:7884::/32 maxlen: 32
2a0f:ea00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a8:46:38:25:07:6e:2e:4c:c0:e5:53:0d:fc:f9:89:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 7 05:34:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=563291108844b3b6b2474e015d2ac2c4491e0e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2d:b7:6d:bd:1a:97:fb:96:9c:02:e7:b5:0f:
de:38:c5:a6:f7:38:93:fb:a9:2f:a6:52:34:67:25:
86:1c:5e:7d:f3:a9:61:61:db:f6:89:4e:c4:93:fc:
a2:a8:fc:4c:1f:df:6d:45:1c:2e:87:a3:c3:e3:fe:
7a:f1:4f:a0:be:21:b1:2b:a3:1b:bc:1b:79:09:6e:
30:95:18:c9:13:db:2c:e2:7e:4b:0f:53:18:2d:4b:
1a:f7:bd:70:fb:e1:eb:15:51:82:6e:5d:b2:90:8e:
ce:25:85:82:33:b1:a0:ed:cc:d3:39:50:32:98:d4:
aa:6e:35:c2:4f:cb:45:8e:20:a5:0e:28:c3:b7:fa:
08:bb:48:0f:3d:d5:00:74:6f:4c:e7:e8:99:08:e5:
73:99:df:cf:0f:4a:40:d0:20:70:d6:71:17:88:ad:
16:9e:fd:41:9a:ec:e5:fb:ee:25:c7:23:6d:e4:2b:
f0:c9:8e:23:eb:72:20:b9:1f:9f:cb:c2:1a:f0:bd:
91:39:db:30:53:e9:ab:cb:df:2e:a3:63:46:1a:14:
43:59:bc:79:c4:df:65:59:0b:a2:b8:dc:8f:2a:2a:
de:80:64:5b:1e:0c:63:81:d5:a8:08:a7:e2:dd:ae:
29:8f:e1:f7:94:1b:95:63:2d:67:a2:48:f8:ab:8f:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:32:91:10:88:44:B3:B6:B2:47:4E:01:5D:2A:C2:C4:49:1E:0E:55
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VjKREIhEs7ayR04BXSrCxEkeDlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7884::/32
2a0f:7d00:1::/48
2a0f:7d00:5::/48
2a0f:ea00::/29
Signature Algorithm: sha256WithRSAEncryption
0f:60:02:7a:3b:58:00:44:4f:c1:64:bf:ac:33:29:24:8b:97:
6d:fa:21:2c:68:4c:d1:54:02:73:b2:de:9f:16:47:97:68:7f:
5d:50:71:61:63:be:26:a9:ca:86:54:1e:8e:85:53:6b:82:dc:
03:e5:ec:e1:83:62:bb:b4:85:f5:5d:ae:ad:f3:97:71:c9:72:
ee:aa:83:f4:1a:80:85:5a:54:64:d0:ef:a9:e5:a0:f3:66:4b:
32:1a:56:3a:e1:4f:c7:1c:10:a0:39:a6:fc:a7:1a:ac:74:cc:
fc:0a:4b:e5:70:6c:12:a8:ab:b1:a0:65:f9:fe:d8:68:9d:b9:
c1:e9:37:fb:bf:be:28:56:4f:22:f7:b1:97:b4:c6:13:ca:5f:
09:ef:cb:34:b7:12:9d:11:77:df:62:4f:f6:a2:b7:fe:4c:c9:
ff:cc:18:dd:8b:3e:a8:f4:97:61:4d:74:70:04:56:f0:4d:1a:
d5:b7:33:5c:67:bd:9c:08:29:10:5f:09:db:0a:47:c4:8c:f3:
a0:03:b0:dc:ba:b1:ab:4e:b3:51:67:ee:08:21:ea:4c:b6:b1:
e9:00:6e:10:06:23:ea:73:ba:b9:fc:63:6c:93:4f:6e:d9:59:
bc:6c:eb:58:04:7c:74:80:c8:19:10:6c:0b:c0:08:8b:26:52:
77:f9:6b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:56:47 2025 by rpki-client