Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lhEqdxKA9IiRAVmdpnanT3TcscQ.roa
File: lhEqdxKA9IiRAVmdpnanT3TcscQ.roa (raw, json)
Hash identifier: pxbo0j2JnXMGR0i2DcY89w3WK4Yk8u8dEE1JWRXcZCc=
Subject key identifier: 96:11:2A:77:12:80:F4:88:91:01:59:9D:A6:76:A7:4F:74:DC:B1:C4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 02B39BC0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lhEqdxKA9IiRAVmdpnanT3TcscQ.roa
Signing time: Mon 11 Apr 2022 17:32:31 +0000
ROA not before: Mon 11 Apr 2022 17:32:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 2a0e:c780::/29 maxlen: 29
2a0f:39c7::/32 maxlen: 32
2a0f:39c1::/32 maxlen: 32
2a0f:39c2::/32 maxlen: 32
2a0f:39c5::/32 maxlen: 32
2a0f:e840::/32 maxlen: 32
2a0f:39c6::/32 maxlen: 32
2a0f:39c4::/32 maxlen: 32
2a0f:39c3::/32 maxlen: 32
2a0f:39c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45325248 (0x2b39bc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 11 17:32:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96112a771280f4889101599da676a74f74dcb1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:ba:30:18:55:84:05:a8:e8:6a:f3:c8:80:
cb:0e:58:55:ea:ed:a5:04:01:7d:23:d9:70:ba:20:
02:ec:6b:28:e2:33:f3:ab:58:b5:ce:4e:b2:6f:e4:
8d:3a:df:57:56:79:7c:51:34:d6:ef:d9:cb:51:7d:
de:1e:da:3e:38:7f:5e:e8:fc:1b:db:c2:98:e7:06:
7f:3a:15:a5:a7:9e:b5:4b:3a:33:d3:72:58:80:e7:
49:55:b1:6c:ef:02:45:20:25:2d:7d:a9:f0:57:ae:
91:b7:0b:98:95:6b:17:75:75:93:28:d1:2c:50:69:
f3:60:56:25:11:39:31:b6:ce:28:55:9c:dc:a0:f7:
ae:57:05:01:74:35:33:8c:3f:b0:ca:af:75:13:6f:
3d:36:25:12:2a:7f:0c:b6:53:21:c5:65:95:bd:83:
62:cf:65:ad:e6:31:a0:18:96:4f:a9:35:c1:5e:4b:
b8:0e:4f:81:7e:d6:83:cd:f2:50:d4:59:69:24:e3:
f8:b9:4e:b6:24:53:75:de:06:c3:bf:89:b5:88:1c:
cc:d4:0d:b0:d2:90:56:f6:28:45:75:c0:92:0b:eb:
64:65:25:b0:09:a7:ba:96:1e:0f:28:8e:59:99:e0:
ae:31:ac:da:99:4f:8f:e8:2f:14:64:22:4a:96:a1:
3c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:11:2A:77:12:80:F4:88:91:01:59:9D:A6:76:A7:4F:74:DC:B1:C4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lhEqdxKA9IiRAVmdpnanT3TcscQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:c780::/29
2a0f:39c0::/29
2a0f:e840::/32
Signature Algorithm: sha256WithRSAEncryption
cd:2f:d4:15:b0:d3:91:4f:f6:cd:85:fa:22:c8:4f:5e:2b:48:
fe:e7:ae:27:1c:02:95:3d:47:d5:e6:74:be:17:11:80:ec:60:
c8:e6:29:83:7f:6e:53:31:42:c2:a7:35:8a:d3:22:75:e5:f7:
32:27:13:8b:29:5f:9d:57:b9:d2:4c:91:e2:21:d9:96:67:bc:
ce:7a:77:64:d8:de:da:5f:a5:2a:05:64:2e:77:04:7d:80:4c:
b7:7f:a7:f6:50:a9:db:9f:ad:1f:ca:2c:5d:20:17:9a:52:28:
28:cc:81:e7:bc:2e:20:32:5d:44:27:39:da:1c:02:11:e5:f7:
05:b1:54:c5:ee:3c:33:d0:2f:ee:47:c3:31:94:1f:c6:cd:f6:
51:5e:02:a4:73:4b:7e:6b:05:ed:f3:b1:7c:f1:95:5d:2d:5d:
55:9a:a4:70:b6:bd:8e:10:02:ed:8e:ac:a1:5e:a0:b2:65:75:
69:5b:b8:d9:52:61:6f:02:6a:3f:1e:1c:b9:ed:11:a2:0c:65:
19:97:ad:3c:1a:3f:d6:1e:cb:d2:28:5a:4a:84:fc:cb:9d:6b:
c2:1f:b2:c3:65:f8:4c:16:36:40:0b:3a:aa:8d:2d:57:6a:d4:
01:4e:40:79:ee:a1:4a:1b:3c:c1:cf:e7:25:20:21:25:bd:d7:
73:ac:b4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:47:07 2025 by rpki-client