Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YlJhMquABVZn0LmLjOxDcKaxbWg.roa
File: YlJhMquABVZn0LmLjOxDcKaxbWg.roa (raw, json)
Hash identifier: LAskAduVJh4xUxqqqdfnoZB+pDKyl/WlouHx7E+Z9vM=
Subject key identifier: 62:52:61:32:AB:80:05:56:67:D0:B9:8B:8C:EC:43:70:A6:B1:6D:68
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 02893984
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YlJhMquABVZn0LmLjOxDcKaxbWg.roa
Signing time: Tue 29 Mar 2022 13:41:17 +0000
ROA not before: Tue 29 Mar 2022 13:41:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30633
IP address blocks: 2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:e841::/32 maxlen: 32
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:a01::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42547588 (0x2893984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 29 13:41:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62526132ab80055667d0b98b8cec4370a6b16d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:7d:99:c0:ac:df:f0:02:a0:98:18:33:d6:
65:80:7f:87:ed:25:79:2d:06:9d:20:90:60:4b:9f:
c6:ae:9a:30:6c:1c:be:8f:c0:14:b1:78:aa:6f:77:
dd:03:cb:f3:88:09:7e:b4:20:63:20:61:cf:2b:8d:
7e:d4:35:f6:b4:c0:a8:a9:18:ff:04:fe:fe:85:ba:
d5:17:04:92:39:60:a0:fd:9d:ce:4e:ab:e5:39:94:
db:11:44:12:84:b1:19:ce:72:46:1f:e0:23:44:0c:
9b:c2:54:00:21:1f:92:11:da:34:08:0a:df:e4:58:
ca:fb:da:79:a8:c2:47:ba:55:fd:fe:1d:54:36:bd:
1d:cd:11:20:7b:0b:dc:db:92:30:52:02:33:20:24:
ab:74:86:39:ec:ab:27:11:d6:ac:1f:90:54:8f:4a:
37:38:37:d8:42:90:25:67:5d:52:64:6f:2a:7d:10:
fe:78:fc:b3:00:13:76:72:57:a4:d7:93:b9:98:e3:
5f:83:14:c6:bc:e1:5d:9b:ea:61:f5:b6:09:0b:8d:
65:eb:03:3a:80:ca:e7:d4:1c:d0:60:5a:6e:e4:f6:
77:6c:0d:af:ea:a3:e5:ca:a0:0f:cb:c0:49:56:e7:
14:fa:37:37:61:c5:37:8c:9d:01:54:b3:fa:7b:a0:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:52:61:32:AB:80:05:56:67:D0:B9:8B:8C:EC:43:70:A6:B1:6D:68
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YlJhMquABVZn0LmLjOxDcKaxbWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:a01::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:e841::/32
Signature Algorithm: sha256WithRSAEncryption
af:57:04:25:01:3f:65:bc:ee:51:d2:15:a9:4b:d4:4f:de:2f:
b4:29:9e:9f:f6:90:1e:d6:ff:dd:40:4c:af:d3:77:2c:cd:1d:
86:d1:f1:1b:a9:a0:c1:15:5f:ad:24:b5:e4:e1:69:2c:01:d8:
44:99:37:6b:45:b4:1e:a9:a7:02:31:72:e8:98:29:8d:25:8c:
60:97:70:14:9d:4f:45:2d:f5:59:8f:e6:2d:74:b2:f0:b8:40:
cc:6f:7d:cc:52:cb:9a:e7:d0:7c:ea:61:7c:db:1f:bc:68:f4:
59:0e:26:cc:b5:e8:4c:55:53:20:22:80:c6:dc:09:36:69:77:
00:7f:26:d7:69:d0:29:0b:86:15:72:23:77:73:b5:7b:da:eb:
b7:b3:2f:67:d8:06:49:93:42:93:4b:ea:6e:6b:c9:59:c1:14:
9e:06:7f:85:50:ef:cc:5c:77:54:23:0c:b4:44:9b:24:e7:e7:
00:08:8d:c7:9e:26:10:27:1c:49:3b:d7:11:0c:2f:b1:79:1e:
99:c9:e1:8e:6a:80:37:5b:db:e1:61:1e:d1:e0:19:5f:e8:15:
c3:15:52:ea:66:65:cb:90:e0:e5:73:3f:7f:f2:f2:fd:a9:6e:
2d:8f:0f:ac:b9:17:3a:d1:e8:22:bc:1e:51:0b:32:d9:6d:5b:
50:a4:70:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:30:14 2025 by rpki-client