Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/esoY4aLMyWwQUK4b2dgRZmJPo4E.roa
File: esoY4aLMyWwQUK4b2dgRZmJPo4E.roa (raw, json)
Hash identifier: y6/q54s8VGkAmf/ZG+2XyVY/RkqGIzqCrXxAoxQ/Nz4=
Subject key identifier: 7A:CA:18:E1:A2:CC:C9:6C:10:50:AE:1B:D9:D8:11:66:62:4F:A3:81
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018BBE26372E031E5ABF372C93783B2975A7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/esoY4aLMyWwQUK4b2dgRZmJPo4E.roa
Signing time: Sat 11 Nov 2023 11:30:57 +0000
ROA not before: Sat 11 Nov 2023 11:30:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a0f:7d00:1::/48 maxlen: 48
2a0c:7884::/32 maxlen: 32
2a0f:ea00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:be:26:37:2e:03:1e:5a:bf:37:2c:93:78:3b:29:75:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 11 11:30:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7aca18e1a2ccc96c1050ae1bd9d81166624fa381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e0:6e:27:f0:fe:10:e3:fe:86:44:38:7b:dd:
9c:1d:60:0d:96:3c:0c:78:c5:41:7d:80:b9:13:31:
5e:3a:2c:96:e7:b2:56:d6:8b:9c:ee:f8:09:0b:d6:
e2:bb:6a:5f:35:b3:ee:cb:fc:02:e6:de:c7:89:c4:
90:ec:3e:8d:eb:84:21:44:66:fd:75:e7:a6:bd:8c:
c4:e9:b0:3f:34:19:93:40:92:04:0a:64:c7:97:26:
2d:fd:96:72:10:f3:89:00:dd:16:51:45:4e:f6:2d:
2d:f1:74:18:c9:b2:e6:ee:d1:28:d9:be:8c:33:f9:
ba:76:f3:72:8d:9e:a2:00:7a:c8:21:36:21:58:89:
a4:03:66:49:0d:6f:7f:52:21:4d:04:51:6e:28:42:
20:13:61:64:98:f1:b6:a5:de:8f:02:a4:d8:5d:b0:
29:a8:17:04:33:cc:87:ab:5f:a5:77:a5:05:21:9f:
29:0a:42:af:c0:64:a5:41:00:b9:f4:2d:87:a6:14:
32:13:a4:32:aa:59:d0:77:55:5a:ac:61:6d:d4:67:
33:69:7c:ed:85:74:78:57:55:10:59:25:55:0f:91:
99:a7:f0:1b:13:e2:71:a0:4a:65:17:58:78:8b:a3:
f7:4f:8d:ea:1c:4b:e5:46:5d:09:6d:8f:3e:f2:46:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CA:18:E1:A2:CC:C9:6C:10:50:AE:1B:D9:D8:11:66:62:4F:A3:81
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/esoY4aLMyWwQUK4b2dgRZmJPo4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7884::/32
2a0f:7d00:1::/48
2a0f:ea00::/29
Signature Algorithm: sha256WithRSAEncryption
aa:a5:af:82:ba:b3:77:a4:fb:de:f5:3f:a9:fd:ec:e6:8d:3c:
c0:07:ff:2c:c2:b8:71:e0:b4:ff:74:e8:23:62:d9:0f:8a:fa:
1d:2d:db:1b:ac:7f:77:c1:23:23:6e:aa:92:c9:f5:23:ca:61:
f8:13:5f:37:95:3d:43:59:e7:a5:85:e8:eb:10:a9:28:90:26:
00:95:67:11:0e:f1:39:dd:79:72:0b:7f:ce:17:c6:23:38:04:
d0:2d:22:74:7a:51:9b:82:ca:e5:06:7a:44:7d:5f:ac:b7:fe:
79:6a:1a:c8:02:2e:53:31:11:ef:b5:40:e7:73:d2:63:52:0b:
96:b7:9d:c8:ae:6c:e3:0f:f8:5f:b1:3d:d8:95:b2:f4:5c:78:
3e:47:d8:23:00:c3:fe:c4:c4:86:2f:e1:65:7b:9f:46:a0:56:
12:8b:97:96:d8:99:06:a7:34:41:5d:1d:3d:12:0a:ce:3b:b9:
97:91:cc:aa:5a:e0:5c:f1:e0:36:8f:e8:ef:2e:fc:8b:9e:bd:
61:ce:c6:86:8c:ec:dc:a0:a3:26:94:45:cf:0a:ac:6a:0c:ec:
c4:8e:b6:1d:a1:49:ca:8f:4e:9d:58:b8:9b:d0:85:6b:c4:5e:
52:0f:60:10:92:98:55:39:25:c8:b5:c2:f3:95:b9:22:82:a8:
ff:60:e2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:15:38 2025 by rpki-client