Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/W6ohJrmzTHStRDHgCBXW60mTbpQ.roa
File: W6ohJrmzTHStRDHgCBXW60mTbpQ.roa (raw, json)
Hash identifier: p/c6Gkznd4oKSHkO9XmNiAkDwTxlpJgLhaHSOcjbwiY=
Subject key identifier: 5B:AA:21:26:B9:B3:4C:74:AD:44:31:E0:08:15:D6:EB:49:93:6E:94
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01821FA6862C25576A7EB4D10616DD5C6438
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/W6ohJrmzTHStRDHgCBXW60mTbpQ.roa
Signing time: Thu 21 Jul 2022 07:26:23 +0000
ROA not before: Thu 21 Jul 2022 07:26:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204084
IP address blocks: 2a0f:e740::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1f:a6:86:2c:25:57:6a:7e:b4:d1:06:16:dd:5c:64:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 21 07:26:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5baa2126b9b34c74ad4431e00815d6eb49936e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:2a:6c:a3:1f:db:a3:52:a3:29:a0:aa:80:
b3:d1:8c:22:84:ee:94:51:c8:19:a8:35:da:9d:b5:
80:7d:56:c7:98:28:f9:ca:04:aa:56:9f:aa:7d:0f:
98:d9:90:70:92:9e:43:9d:7c:de:ea:24:25:fc:d4:
65:2a:24:05:af:44:dc:f2:b8:1b:34:d9:b8:1b:a3:
1c:9d:74:e3:f2:24:fe:30:52:a7:c6:28:d2:1d:02:
1e:f9:87:a7:4a:16:48:69:95:f3:a7:71:1b:07:b7:
74:5a:12:c8:78:47:65:0a:89:25:ca:23:b3:75:fe:
d4:d1:ce:38:4b:4d:14:07:c9:18:77:ef:79:5e:fe:
2a:4f:91:14:a3:00:dd:93:2d:f1:14:51:9c:b2:49:
2d:ff:fe:f5:72:cd:de:a2:e2:a5:4c:78:47:12:42:
da:2a:1a:37:3b:22:bc:83:9c:eb:3b:9a:7c:09:66:
68:b0:cd:46:15:c0:c0:06:e7:54:53:ee:93:8b:df:
04:2c:98:2a:1c:65:cf:13:77:c0:6a:b5:6a:15:53:
1b:b9:d9:6f:9d:de:fb:20:c5:c5:62:27:ea:07:26:
f2:8e:a8:6f:d4:5f:bf:00:a4:88:8d:1b:bf:e6:80:
9f:aa:0c:3c:cf:95:23:14:46:60:fe:a3:79:19:bc:
09:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AA:21:26:B9:B3:4C:74:AD:44:31:E0:08:15:D6:EB:49:93:6E:94
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/W6ohJrmzTHStRDHgCBXW60mTbpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e740::/29
Signature Algorithm: sha256WithRSAEncryption
bf:a8:9d:c2:48:7a:a8:df:7e:ed:c7:79:79:01:8b:8e:7e:91:
2a:ba:d7:bf:7c:9f:27:3e:f4:8f:36:1b:67:15:40:1a:0b:2e:
70:0e:1a:8a:5b:96:04:3e:2f:eb:35:50:59:ae:bc:a2:e1:61:
44:1d:59:4d:6a:86:d6:d1:e0:70:39:d4:bb:61:e1:75:1b:98:
2a:38:9b:9d:5f:18:cc:22:71:07:73:e9:ce:ff:aa:9c:f2:19:
c1:b2:1c:da:31:83:cd:0c:c7:11:fb:ca:89:1b:26:46:67:6e:
77:b4:04:36:2d:95:85:d5:e4:42:2a:4d:63:df:8a:10:8e:36:
8b:9a:2d:e1:7f:6b:1d:8c:62:46:de:b6:55:2d:24:00:71:c8:
6c:9c:05:65:61:79:a2:a4:b0:08:90:23:f4:c7:4b:fc:0a:15:
e3:62:ac:6e:57:59:b5:b5:4a:96:86:ae:1c:f6:68:12:d3:b0:
5a:7e:c5:98:ca:db:4a:62:11:12:5a:9a:92:60:2a:8d:f9:8d:
f3:4f:a3:78:5e:da:5c:bd:b5:a4:2a:86:f2:dd:38:45:e8:a0:
33:27:5a:87:b8:e7:c7:97:8b:53:e5:81:e0:5b:2c:65:22:5c:
f4:dd:70:61:c0:63:71:a8:ff:da:16:36:c8:ec:f1:34:40:3d:
cc:4b:0e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:42:03 2025 by rpki-client