Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dm7wMocuzKd6RM-tVlmQKo_etb0.roa
File: dm7wMocuzKd6RM-tVlmQKo_etb0.roa (raw, json)
Hash identifier: gpk4AyHUhvEtV+HrQ6yE1BR73CCoT6ZhpZV03sSQADk=
Subject key identifier: 76:6E:F0:32:87:2E:CC:A7:7A:44:CF:AD:56:59:90:2A:8F:DE:B5:BD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01865B9A71667649861D8B387A93FA35FB37
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dm7wMocuzKd6RM-tVlmQKo_etb0.roa
Signing time: Thu 16 Feb 2023 19:01:33 +0000
ROA not before: Thu 16 Feb 2023 19:01:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8772
IP address blocks: 2a0a:1400::/29 maxlen: 29
2a0c:9240::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5b:9a:71:66:76:49:86:1d:8b:38:7a:93:fa:35:fb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 16 19:01:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=766ef032872ecca77a44cfad5659902a8fdeb5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1e:6e:3a:e6:38:a3:54:70:6d:b3:d5:fb:9f:
57:d6:c0:a7:5f:71:33:e6:06:6c:84:00:99:50:5c:
9f:73:c4:b8:66:a0:63:a1:ab:0f:ba:13:3f:30:da:
a2:13:d2:1a:bc:d0:60:4b:f5:b5:5f:de:85:a9:3c:
ed:e7:51:d4:0b:bf:98:56:d3:de:77:12:42:e4:6f:
90:11:bb:1f:12:eb:5d:51:df:85:60:b3:1c:28:01:
12:b8:a9:1a:b1:8a:77:d6:f1:6e:e1:92:81:ea:e5:
af:49:1a:db:ac:75:f5:cd:a6:37:e9:53:7f:7f:e6:
e0:55:9e:e2:7c:85:fe:2d:8c:67:8b:d6:58:8a:00:
ac:a6:40:0e:f1:74:e5:04:b8:f6:02:a9:88:20:12:
7e:5f:3f:d6:9b:31:91:e5:73:e7:82:10:26:ac:38:
fe:12:a9:a3:b7:01:a2:e9:06:af:c4:a3:24:26:0b:
4e:94:0f:21:18:65:32:00:29:9b:d0:e8:de:d7:fd:
70:69:57:ca:55:6d:ed:1b:f0:ee:0f:70:1a:5b:be:
e0:28:b9:8b:ce:38:c1:f0:4c:e7:c7:a7:d5:03:46:
48:82:a0:63:13:96:48:e0:bc:ac:a9:c2:c6:17:7e:
7c:75:38:f4:91:01:9e:71:2f:eb:58:97:11:8d:18:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6E:F0:32:87:2E:CC:A7:7A:44:CF:AD:56:59:90:2A:8F:DE:B5:BD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dm7wMocuzKd6RM-tVlmQKo_etb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:1400::/29
2a0c:9240::/29
Signature Algorithm: sha256WithRSAEncryption
39:64:99:5b:79:bb:d2:59:fc:d4:dc:6e:63:24:a2:05:b5:4a:
ba:f3:a6:01:04:59:aa:26:77:7b:e8:ee:5b:51:20:58:35:48:
23:7a:68:63:b4:ff:d1:25:56:84:8d:e8:c8:2e:70:84:85:db:
67:cf:ff:1f:9b:9e:8a:97:35:e5:14:ec:78:9e:a1:3c:16:4a:
62:a9:18:f8:ba:c0:bb:c1:bb:e5:d8:d0:5b:9b:99:9d:25:b5:
f1:c9:4d:b8:ac:09:6b:6f:5f:37:ac:df:d4:32:9e:57:42:83:
a6:15:48:7b:92:dc:da:8d:5e:3d:4e:a9:84:e2:bd:7d:22:d5:
07:a1:c5:c8:6c:91:8a:4e:37:ff:a3:6a:4b:5e:99:57:c8:d1:
6e:41:67:51:6b:0a:46:fc:20:89:81:29:01:c9:e5:3a:89:21:
fa:04:3f:41:9d:83:0b:7c:96:26:43:bc:30:6f:85:ba:da:70:
4f:8b:d7:cd:cb:06:52:8d:2b:ce:55:11:40:2e:13:ae:33:03:
05:c8:ec:76:d1:79:3d:29:56:da:15:c0:94:9d:e3:a5:aa:7d:
eb:c7:5d:f8:f2:d4:4d:38:6a:37:cb:9a:93:d1:39:c7:a7:51:
7a:39:ea:a0:c7:c4:18:d6:9d:9e:4d:13:61:2c:a1:27:71:d5:
49:41:9e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:31:33 2025 by rpki-client