Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ndjGAj7Od1P4zYaZOmlwkMDABWI.roa
File: ndjGAj7Od1P4zYaZOmlwkMDABWI.roa (raw, json)
Hash identifier: dXGfFZVI0nPdorHtQIQbzQIIFmwVk5nK+HePF+kkI5c=
Subject key identifier: 9D:D8:C6:02:3E:CE:77:53:F8:CD:86:99:3A:69:70:90:C0:C0:05:62
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018A896F0A1F153EF9E505CB5053309778C5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ndjGAj7Od1P4zYaZOmlwkMDABWI.roa
Signing time: Tue 12 Sep 2023 12:47:50 +0000
ROA not before: Tue 12 Sep 2023 12:47:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53667
IP address blocks: 2a12:ecc3::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:89:6f:0a:1f:15:3e:f9:e5:05:cb:50:53:30:97:78:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 12 12:47:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dd8c6023ece7753f8cd86993a697090c0c00562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:c1:60:1e:3d:21:6d:e9:9b:ba:30:3a:53:
6c:42:14:cd:0d:f2:5e:5a:ae:68:3c:a3:2d:a8:92:
a5:cd:ad:33:65:17:ac:ac:af:b2:27:1a:33:00:28:
e1:d6:b8:20:e8:9b:95:84:a3:63:0c:c6:1f:19:f1:
2e:8e:7c:e1:f4:2a:9c:ff:ab:39:c7:3e:b4:10:3b:
a8:c6:99:34:e6:08:d9:3f:81:d4:38:05:54:57:ca:
b4:85:30:12:8f:4e:6b:0a:23:7d:c9:65:fa:84:c3:
dc:eb:52:75:5c:3a:2b:2b:1c:58:ea:94:82:ad:f7:
a4:b3:b6:98:63:37:34:e6:bd:f2:22:3a:13:ae:88:
36:a3:ce:cc:4a:a4:a2:09:fa:61:0c:f5:57:ba:e7:
28:f2:25:19:7a:97:31:48:6b:2c:1d:68:c8:0d:f6:
4f:04:fd:d7:0d:3b:4a:8f:b7:8c:a9:7a:76:e7:b3:
bc:08:a7:2b:14:12:17:f7:de:48:04:6e:e8:e1:0a:
d7:18:23:70:4f:64:97:db:ad:0f:05:0a:52:f4:0b:
76:62:2e:f7:d2:ab:4b:0f:d6:4a:e0:d1:b4:4f:24:
8c:00:ab:98:b7:95:0b:94:60:75:1c:bd:3f:ba:f6:
62:7d:70:5f:4a:5f:c7:47:72:9f:bf:04:03:8d:86:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D8:C6:02:3E:CE:77:53:F8:CD:86:99:3A:69:70:90:C0:C0:05:62
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ndjGAj7Od1P4zYaZOmlwkMDABWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:ecc3::/32
Signature Algorithm: sha256WithRSAEncryption
b7:8c:15:06:bd:30:77:60:4f:d0:79:85:8c:32:8e:64:84:6c:
2d:b9:07:0a:3f:67:8c:41:fe:c4:6f:23:da:b4:1c:88:d0:09:
2d:75:4d:5e:2b:5f:99:0f:55:c4:ee:97:76:b0:29:b1:9f:0f:
e5:38:d2:e7:60:ef:c6:97:76:d5:df:ab:61:a6:38:ac:96:3b:
ff:8d:3d:52:b5:8e:81:55:bd:c1:b5:f3:7b:f3:94:08:63:fd:
f0:b6:1d:90:91:99:39:c1:1e:46:55:12:60:98:06:d3:63:37:
8a:dd:6d:f9:24:b2:80:61:45:06:30:aa:6a:6c:96:2d:a7:f7:
53:17:9c:9d:7c:e0:40:09:ed:e1:98:8e:fe:9c:f3:80:0f:05:
68:c5:6e:38:e5:a7:c3:0b:f6:ad:35:f5:4e:a6:b0:72:b3:18:
c7:be:66:43:ce:46:a0:8b:32:1d:4c:79:4a:81:e0:ec:be:18:
8a:81:32:21:0a:e6:29:c5:f3:a0:32:60:0c:f0:03:62:e4:0c:
0f:3f:72:c8:97:92:72:98:4f:59:13:f4:c9:ef:7e:11:54:ee:
75:7c:12:84:3c:ff:e7:16:86:59:6e:ba:29:4c:0b:71:f8:31:
a4:e8:f1:ed:19:a4:4d:75:df:8c:dc:04:40:a2:72:95:83:27:
e3:f9:0c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:15:01 2025 by rpki-client