Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XkiuQGSbk9-MbaNAV4vsCWXXmeE.roa
File: XkiuQGSbk9-MbaNAV4vsCWXXmeE.roa (raw, json)
Hash identifier: SPpMB/RGMRQniY03RzzGTs0DU8J0/zXVb/kr/dvEEeM=
Subject key identifier: 5E:48:AE:40:64:9B:93:DF:8C:6D:A3:40:57:8B:EC:09:65:D7:99:E1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0186BC6CEE5E7C730BDBD29F7033201E13F7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XkiuQGSbk9-MbaNAV4vsCWXXmeE.roa
Signing time: Tue 07 Mar 2023 14:15:00 +0000
ROA not before: Tue 07 Mar 2023 14:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 2a0f:dec0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:6c:ee:5e:7c:73:0b:db:d2:9f:70:33:20:1e:13:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 7 14:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e48ae40649b93df8c6da340578bec0965d799e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b4:79:a0:dc:1b:93:7c:99:66:11:86:c4:ea:
6d:4b:13:65:12:9e:4a:34:3c:e5:0a:b0:20:1c:78:
a3:95:9a:8f:ff:a7:99:c5:e8:b1:dd:7c:d9:5f:a3:
26:b6:dc:98:30:ca:21:a7:b6:fa:bc:97:7f:83:61:
28:cf:ec:fd:db:d1:d8:a8:40:65:a0:24:ae:33:45:
ce:57:bf:67:a6:56:6e:5b:96:e9:87:52:05:68:f8:
33:4c:d0:b9:28:e0:44:9a:43:fb:8b:6c:53:4f:6d:
77:30:e4:24:58:44:4a:34:77:50:e4:10:63:ca:59:
e4:83:30:38:5b:a0:7d:17:aa:7c:e8:f8:52:a2:dd:
9f:13:d4:db:59:92:26:37:6f:a8:56:dd:0d:fd:8c:
4b:50:4d:15:03:a5:23:f9:62:d3:2d:40:89:62:53:
f7:cc:6c:0e:93:4c:e1:b6:1c:45:77:5b:f0:79:89:
8f:f4:e6:3f:2b:40:e4:db:72:a2:94:03:0b:c7:d3:
cf:a4:df:19:84:15:2a:3a:28:b7:79:b2:66:40:31:
41:75:3c:35:18:18:85:68:0c:68:01:ac:9e:ab:b9:
85:c2:00:34:52:09:e4:89:73:16:4e:6a:03:c1:45:
55:46:0e:5b:c6:da:d5:a6:70:00:a1:8f:e9:8f:6c:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:48:AE:40:64:9B:93:DF:8C:6D:A3:40:57:8B:EC:09:65:D7:99:E1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XkiuQGSbk9-MbaNAV4vsCWXXmeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:dec0::/29
Signature Algorithm: sha256WithRSAEncryption
65:8e:6d:54:7a:ac:a7:d2:78:5b:42:7c:64:6a:7e:5c:b0:ca:
9e:ad:a3:c5:92:b0:49:66:8a:8e:bb:71:1d:db:9b:66:f8:37:
64:3f:44:a1:d0:75:c6:93:30:d1:7c:d7:84:29:54:e5:aa:23:
4c:a2:c6:df:8c:71:7c:a9:16:54:28:fd:f3:71:c4:fe:fa:18:
a4:5f:1b:b3:4b:19:a5:fc:14:fc:ad:30:52:e2:2a:4b:2d:f9:
ef:5f:a8:65:0c:b2:d6:01:0c:50:f2:4a:c2:81:f5:6b:9b:af:
61:2a:20:25:fc:4b:b1:16:98:b5:5f:2a:db:23:06:2b:39:59:
13:12:75:7a:f1:5b:9e:25:c0:f0:aa:2e:0b:27:67:ed:5e:50:
46:9d:b1:f7:06:b1:22:13:5e:75:66:f5:71:7e:b0:4d:ff:85:
f6:37:2d:0e:32:ad:39:65:23:7f:3f:6f:c2:08:d6:fd:bb:59:
e3:45:54:74:26:08:65:c2:7e:0a:86:9b:26:5f:cc:4e:62:1c:
9f:92:32:d3:0d:3c:12:30:41:7c:68:9b:c9:fc:8f:df:cc:21:
09:6e:bf:89:2d:a2:6d:6b:29:86:41:ba:23:5f:76:5a:8d:a4:
da:bc:8f:d0:49:ab:91:06:7b:13:88:20:57:08:2f:a2:ef:0d:
d2:e3:27:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:05:51 2025 by rpki-client