Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bE8fvzkAhtgQ7yZwrijlPUGj3r4.roa
File: bE8fvzkAhtgQ7yZwrijlPUGj3r4.roa (raw, json)
Hash identifier: Dunco2zqtxV5RTjcS3VEItMJDCCB5+axXD5qA4p30dU=
Subject key identifier: 6C:4F:1F:BF:39:00:86:D8:10:EF:26:70:AE:28:E5:3D:41:A3:DE:BE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018595EF8B9A9BDA533C66F34D82AFA63767
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bE8fvzkAhtgQ7yZwrijlPUGj3r4.roa
Signing time: Mon 09 Jan 2023 09:49:41 +0000
ROA not before: Mon 09 Jan 2023 09:49:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8772
IP address blocks: 2a0f:e040::/29 maxlen: 29
2a0f:2100::/29 maxlen: 29
2a0c:9240::/29 maxlen: 29
2a0f:e6c0::/29 maxlen: 29
2a0f:e7c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:ef:8b:9a:9b:da:53:3c:66:f3:4d:82:af:a6:37:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 9 09:49:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c4f1fbf390086d810ef2670ae28e53d41a3debe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f4:54:7e:7d:83:37:28:14:29:57:0b:51:e5:
a7:9c:fd:87:1b:0c:ab:21:ef:fc:70:23:9a:03:a8:
05:bf:63:80:ca:34:02:a3:b9:30:51:6b:cb:ea:d8:
4c:b5:17:99:13:3a:5c:78:f0:2a:64:de:cd:5a:b5:
a6:ae:5d:ad:33:0a:06:3e:98:eb:a0:cd:ce:b3:7a:
b8:ca:55:fd:76:f4:e5:2b:b6:c6:88:23:bc:89:06:
0f:7a:96:b7:07:69:a9:8b:1d:1e:d2:49:6f:f1:c9:
5e:f7:05:01:f9:2e:40:fa:99:a7:59:7b:2e:b2:81:
80:92:c1:ef:a1:51:50:67:81:4a:47:f9:44:3f:20:
0a:a8:57:7a:85:f9:28:e3:9f:16:6d:9a:a4:5a:27:
60:33:44:bd:b9:de:f8:99:a3:be:87:af:6a:1d:8e:
c2:3e:2f:2f:33:8b:74:a5:11:ef:ce:35:76:db:08:
c3:32:51:19:a0:6c:a7:f3:78:2b:7b:f3:98:33:06:
da:ad:66:c3:aa:3c:28:45:b3:0b:71:b8:5d:50:47:
59:7b:23:e9:7b:85:df:7e:e7:44:63:76:e1:24:37:
04:ba:fd:8d:81:73:26:e9:3b:7b:48:2c:46:e1:0f:
13:fa:f7:52:ea:12:c3:2c:e0:3a:2a:14:57:25:be:
aa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4F:1F:BF:39:00:86:D8:10:EF:26:70:AE:28:E5:3D:41:A3:DE:BE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bE8fvzkAhtgQ7yZwrijlPUGj3r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9240::/29
2a0f:2100::/29
2a0f:e040::/29
2a0f:e6c0::/29
2a0f:e7c0::/29
Signature Algorithm: sha256WithRSAEncryption
6e:56:14:fc:17:d1:9b:41:e1:ff:d6:97:a9:0e:d2:10:bb:24:
ef:a6:b7:d7:cf:87:94:87:e9:c4:83:6c:63:be:2e:28:01:5e:
90:57:0d:df:62:7e:2b:6e:64:c6:fe:82:f9:e5:96:78:66:de:
d1:f5:25:e8:f3:98:31:05:d9:04:4d:50:1f:e8:d4:41:97:48:
46:6a:69:6a:b9:ad:bd:1c:df:1e:db:98:aa:02:06:a4:58:d2:
ca:51:c1:be:96:f0:8a:bb:9f:bb:86:26:9c:17:7d:cd:ba:f1:
a5:3a:63:21:a7:6d:df:71:4d:9c:f3:b3:fa:05:18:17:06:36:
80:53:6e:cc:32:51:93:ff:ae:a6:76:7d:4b:3f:f3:0a:f2:58:
89:a5:79:db:79:53:5c:29:c1:ba:c8:c2:1f:0d:23:48:3d:de:
66:79:6a:d7:36:2d:9c:cb:0b:63:ef:52:d1:49:d8:65:26:f8:
b6:dd:36:5e:49:67:8b:c5:ea:df:07:d7:80:b7:f3:3b:72:ca:
a8:cc:25:d0:d3:00:7e:6a:65:07:c7:46:27:c5:8d:ec:a9:d8:
a0:83:7e:67:57:18:67:12:e4:5d:bb:5c:16:3c:6f:98:2d:4c:
78:b5:bf:31:79:51:2a:fa:d1:f8:ca:dd:95:a5:8a:8f:54:ac:
07:21:ce:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:07:32 2025 by rpki-client