Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/arqGUVnH-LDJl9RCDsQtGQnu-B8.roa
File: arqGUVnH-LDJl9RCDsQtGQnu-B8.roa (raw, json)
Hash identifier: MkEQJ1VRurhEZrTVgIhi1mzuXc725qDmDUJ36I0HJ7U=
Subject key identifier: 6A:BA:86:51:59:C7:F8:B0:C9:97:D4:42:0E:C4:2D:19:09:EE:F8:1F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01856DCAF4FB290B974940EC82FDECCF3D8C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/arqGUVnH-LDJl9RCDsQtGQnu-B8.roa
Signing time: Sun 01 Jan 2023 14:44:55 +0000
ROA not before: Sun 01 Jan 2023 14:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 2a0f:bc01::/32 maxlen: 32
2a0f:bc03::/32 maxlen: 32
2a0f:bc07::/32 maxlen: 32
2a0f:bc04::/32 maxlen: 32
2a0f:bc06::/32 maxlen: 32
2a0f:bc05::/32 maxlen: 32
2a0f:bc02::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:f4:fb:29:0b:97:49:40:ec:82:fd:ec:cf:3d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 14:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6aba865159c7f8b0c997d4420ec42d1909eef81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0b:ea:86:1c:6f:07:e9:9a:a8:e7:72:b0:c7:
93:23:ad:91:71:d7:c2:c0:f9:55:3c:3d:f4:65:e0:
1e:04:9b:56:4e:4b:6c:46:31:f8:a8:30:51:42:6c:
47:4b:cb:dc:34:4a:57:8e:7c:12:d3:55:3e:da:a0:
ca:41:0b:13:bb:8f:ca:67:a5:f4:75:0e:f8:ee:61:
41:81:8c:28:58:88:1d:f0:36:df:8f:7e:4f:2a:ea:
31:25:5f:57:30:9c:a7:1a:e5:3a:ee:32:93:8d:4f:
17:6b:2d:7c:1d:74:ac:5a:55:0b:08:92:c0:36:06:
9b:c2:65:fc:2e:8a:07:4f:33:a2:5b:00:93:60:ef:
b3:4b:b2:f1:4d:cb:21:7c:0a:a2:02:13:60:be:88:
41:0c:c1:db:91:53:26:10:3b:68:12:54:76:66:aa:
18:2c:b4:86:1f:e0:86:18:15:c0:9d:40:28:18:aa:
bb:0b:c9:97:d9:7c:fd:9e:39:78:34:d4:8a:e5:13:
b2:84:da:f4:24:dc:82:5e:b7:a6:a4:87:21:c8:8e:
31:d8:df:79:ce:58:30:53:d5:ee:9b:36:09:a8:d9:
a1:f4:eb:6e:b1:77:e6:1e:42:43:0a:8a:20:63:62:
b0:68:80:da:2e:51:89:f7:ef:1e:0a:cc:db:86:f3:
47:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BA:86:51:59:C7:F8:B0:C9:97:D4:42:0E:C4:2D:19:09:EE:F8:1F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/arqGUVnH-LDJl9RCDsQtGQnu-B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:bc01::-2a0f:bc07:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5a:e5:b7:1d:6d:01:b1:da:b2:bd:72:09:cb:43:33:53:44:ca:
3b:a5:89:83:08:23:4b:d2:1c:2b:42:09:e2:e3:80:01:f2:be:
b4:f4:fb:b9:aa:33:dd:b9:ac:4d:01:96:4c:df:cc:95:31:84:
14:65:7e:a8:6b:00:d4:68:0e:cc:e3:4d:4e:da:8d:89:14:da:
bc:eb:85:0e:34:4d:14:ab:6b:16:43:75:02:d8:d7:84:1e:f0:
ce:9f:11:c9:b3:9e:1d:fa:ec:c4:62:d1:3c:f6:0c:77:dd:bb:
26:d0:9c:1f:ce:a9:b1:ae:48:7a:78:0e:44:0c:dc:94:26:3e:
de:a9:84:f6:51:84:4f:87:24:ef:c7:64:24:2d:7c:c8:1f:d7:
74:48:10:17:09:8e:c0:04:e9:d2:4c:bb:2b:27:99:75:b6:35:
67:7f:c9:22:53:b4:3a:0d:9b:1f:c0:0c:8e:f9:80:d1:bd:66:
e0:2e:84:07:7d:07:50:77:15:c7:1d:87:98:73:8e:e6:ba:c4:
97:5d:a9:6a:f5:bc:46:52:79:c5:6c:a4:42:e4:6d:08:b2:36:
1d:c6:9a:da:c4:99:84:ac:51:84:38:14:31:67:8d:25:0a:b3:
9b:66:8f:87:55:3c:c4:68:f1:d0:cd:5a:87:bf:e6:b0:10:34:
6e:b2:5f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:34:56 2025 by rpki-client