Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qLYdqkrkzX4KOZlKcz-ohtUNxIo.roa
File: qLYdqkrkzX4KOZlKcz-ohtUNxIo.roa (raw, json)
Hash identifier: atKicmJoOyPIX4BAXbClRlC+T7yCUMck+A861P1WvyU=
Subject key identifier: A8:B6:1D:AA:4A:E4:CD:7E:0A:39:99:4A:73:3F:A8:86:D5:0D:C4:8A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0185B9AD1CC2CB85E8B8503CF557C7895719
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qLYdqkrkzX4KOZlKcz-ohtUNxIo.roa
Signing time: Mon 16 Jan 2023 08:23:28 +0000
ROA not before: Mon 16 Jan 2023 08:23:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 2a12:eb40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:ad:1c:c2:cb:85:e8:b8:50:3c:f5:57:c7:89:57:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 16 08:23:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8b61daa4ae4cd7e0a39994a733fa886d50dc48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:94:85:69:36:18:32:45:3c:cb:26:52:b8:
ea:6f:e2:65:ae:e3:e5:13:a0:d0:69:31:36:f5:dd:
a5:ae:5e:9a:0b:a8:75:08:41:c1:63:29:a5:4a:a5:
58:3e:39:05:a0:14:4c:53:6e:72:35:48:db:b7:4c:
0d:22:be:4f:c9:83:c0:9a:05:7c:cd:ef:e5:99:83:
49:80:e0:4d:6b:ba:03:50:27:8b:d7:a0:14:4d:df:
86:9e:26:ea:05:9a:fd:8a:fc:c5:c8:56:60:53:85:
40:ae:5a:bb:33:e1:5e:fc:70:e9:ed:8e:1d:41:d9:
83:79:63:ca:49:e7:ad:2c:6d:9d:a5:a1:bd:a1:b7:
41:5f:30:a9:95:30:bb:78:92:e2:6e:e1:cf:69:2d:
62:aa:b7:db:55:93:35:9c:81:8f:74:95:da:d1:f2:
44:c6:bd:d8:1d:25:7a:b6:d6:ff:d7:ca:f6:5f:d9:
41:ea:ab:9e:94:5e:d1:34:07:00:bd:1e:f8:82:87:
20:69:58:63:a7:9a:d7:a1:0a:5e:9c:38:e7:0d:f5:
e1:9d:61:ee:c6:58:34:4c:44:14:26:19:3e:8d:0d:
56:cf:13:3c:c7:12:73:c0:09:ed:b5:11:60:8b:56:
23:d5:81:f1:84:3d:81:20:e0:11:ac:da:4b:36:5f:
5e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B6:1D:AA:4A:E4:CD:7E:0A:39:99:4A:73:3F:A8:86:D5:0D:C4:8A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qLYdqkrkzX4KOZlKcz-ohtUNxIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:eb40::/29
Signature Algorithm: sha256WithRSAEncryption
cf:fb:0c:85:ae:be:20:f8:e7:e6:9e:c7:7f:0b:ed:34:93:cc:
e8:89:61:93:fd:8b:0f:87:da:47:27:42:81:1d:c5:55:91:36:
e8:e8:8f:5c:91:f4:bb:ef:f1:39:65:71:2f:07:ba:ce:9b:2d:
ab:23:ed:7c:81:10:e8:41:51:a9:da:2e:32:d2:f4:09:bf:fc:
94:36:ce:eb:71:89:e8:fe:00:5a:e1:38:51:a7:fc:bd:88:2d:
ce:67:95:f8:df:2b:e2:65:a3:5a:47:fb:ec:c8:5d:41:ce:1a:
52:8b:18:2f:5b:12:a9:34:c2:88:fa:70:d9:3b:3a:db:f1:a0:
06:f3:97:d5:81:00:3f:da:15:52:33:14:1b:bc:5b:38:bd:7a:
4f:7d:76:ed:12:8e:79:ad:61:26:42:ea:4d:c5:6d:1e:ee:6b:
ba:55:9e:ca:de:9f:4f:42:9b:74:3a:94:5d:d5:fc:bc:18:86:
78:f4:0e:31:37:b7:d1:ea:07:a8:0a:8c:eb:b2:9e:5c:4c:5e:
62:22:87:87:c3:fe:cb:1d:c0:9d:6a:8d:cf:3a:c6:5f:f5:f3:
0f:68:ec:c5:4d:c1:96:9a:35:91:06:bf:19:b2:7d:2f:df:cd:
65:1f:67:91:c2:ca:0a:a7:1d:b2:a1:19:a2:0a:a0:98:b1:96:
24:37:e3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 14:43:47 2025 by rpki-client