Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lmaBmXcrsotJgmQiEIqSKzlQO-E.roa
File: lmaBmXcrsotJgmQiEIqSKzlQO-E.roa (raw, json)
Hash identifier: 8zDgujtpkkcda9TufKoK6zRpwTLZQO7I1rARYy11Szw=
Subject key identifier: 96:66:81:99:77:2B:B2:8B:49:82:64:22:10:8A:92:2B:39:50:3B:E1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0187A3F6F009F020106F5E17B917AD5310E9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lmaBmXcrsotJgmQiEIqSKzlQO-E.roa
Signing time: Fri 21 Apr 2023 13:18:02 +0000
ROA not before: Fri 21 Apr 2023 13:18:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399587
IP address blocks: 2a13:c500::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:f6:f0:09:f0:20:10:6f:5e:17:b9:17:ad:53:10:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 21 13:18:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96668199772bb28b49826422108a922b39503be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:13:a5:fd:74:35:6a:5d:9f:1e:8b:a9:1a:
d3:c0:ad:bc:d2:df:0e:f8:17:65:c3:58:85:fd:3d:
81:5c:69:dc:98:93:c5:13:b6:9d:b9:a5:8a:56:d9:
ed:9a:54:7c:9a:f7:22:39:9a:e6:6c:d5:67:a9:b4:
86:d0:36:d9:a6:2d:fc:7d:0a:98:66:dc:b2:f9:76:
b9:47:a5:6d:b1:75:30:7a:11:3b:ec:f9:13:d3:f3:
80:fb:06:ae:72:49:da:d3:23:1d:2e:75:75:1c:4d:
92:21:93:a5:d8:c6:c8:83:ca:ae:00:c7:3f:ca:f6:
cf:c7:fd:86:06:e7:c3:8b:98:f7:d4:ac:96:1a:b3:
5a:dc:07:08:ed:e1:17:53:e0:50:07:69:ec:38:57:
e4:2c:17:01:3d:de:27:ff:5f:65:31:c8:20:2b:15:
4c:bf:d5:e9:0d:d1:92:f0:7c:0c:e4:ec:f3:41:e1:
28:af:e8:e9:62:24:3c:32:e1:92:e9:8a:8f:b1:cf:
e3:65:ba:16:3d:9d:92:7b:61:42:14:ba:59:9a:77:
e3:83:bd:df:9c:91:18:c8:c4:42:59:e6:64:27:f8:
13:89:9b:6c:92:cb:17:a7:b6:4e:1a:7b:8f:40:5c:
4a:ee:06:2b:74:43:92:7a:14:56:c8:e4:aa:ff:7a:
73:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:66:81:99:77:2B:B2:8B:49:82:64:22:10:8A:92:2B:39:50:3B:E1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lmaBmXcrsotJgmQiEIqSKzlQO-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c500::/29
Signature Algorithm: sha256WithRSAEncryption
1d:35:9d:33:2c:40:1c:8d:9c:a3:9b:89:c2:f8:c4:35:db:2e:
c4:9b:e5:9e:3c:2d:e4:67:d6:dc:27:8a:6a:47:7d:22:be:eb:
fe:ec:c9:67:38:bf:1a:35:37:ee:a0:dd:7b:df:61:10:05:36:
aa:f4:b3:ec:bf:39:6d:3c:92:99:91:2d:0e:4f:a6:4a:e4:ba:
c3:6f:b9:aa:ee:08:e2:31:d0:15:86:64:d7:29:75:42:e3:c5:
ab:3d:85:90:7d:94:3b:7f:4b:d0:e5:a9:3d:cd:e4:a6:5a:26:
a7:ef:4f:6c:d3:21:4f:38:79:35:d3:5e:ef:08:5c:7e:ab:e7:
ef:56:a2:2d:a3:b8:e5:b4:61:b5:56:bb:f9:59:43:6f:d9:ea:
74:d4:bc:c7:5b:af:a4:45:b0:2e:ff:82:68:69:0d:f0:7c:fa:
53:2b:82:2a:0c:c5:c3:7e:02:b3:11:d3:87:59:d5:f8:69:ca:
b3:fc:f1:ea:52:a1:cf:13:c8:a8:f5:94:e2:9d:1c:2b:0f:32:
30:be:2e:6d:a6:9b:b7:6d:a0:30:23:4e:d5:6a:7a:22:6a:b4:
ac:c2:e9:d2:8e:d8:01:7c:6f:af:3e:e1:e8:c1:a2:2b:dc:08:
62:07:73:07:db:31:be:00:c7:51:65:7b:ae:49:73:18:e2:df:
eb:2d:3f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 00:37:41 2025 by rpki-client