Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v5MkM0MMPLyu0MDN-uqYSNN_xzo.roa
File: v5MkM0MMPLyu0MDN-uqYSNN_xzo.roa (raw, json)
Hash identifier: nGc/K6DDzAmuj59tZWi6T+AzqUScXLLA9S108p/irOg=
Subject key identifier: BF:93:24:33:43:0C:3C:BC:AE:D0:C0:CD:FA:EA:98:48:D3:7F:C7:3A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01875B02CBFB8F23213829CB4F7846654425
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v5MkM0MMPLyu0MDN-uqYSNN_xzo.roa
Signing time: Fri 07 Apr 2023 09:18:42 +0000
ROA not before: Fri 07 Apr 2023 09:18:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 2a0f:3d86::/32 maxlen: 32
2a0e:2240:5::/48 maxlen: 48
2a0e:2240:3::/48 maxlen: 48
2a0f:3d85::/32 maxlen: 32
2a0f:a200::/32 maxlen: 32
2a0f:3d81::/32 maxlen: 32
2a0e:2240:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5b:02:cb:fb:8f:23:21:38:29:cb:4f:78:46:65:44:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 7 09:18:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf932433430c3cbcaed0c0cdfaea9848d37fc73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:1f:08:6f:7b:f7:fe:a0:75:e8:83:fe:f6:
4a:d3:81:38:10:19:b2:40:46:68:3f:85:b6:b0:24:
4d:69:8f:68:c3:5e:3a:f0:44:82:87:ae:24:99:53:
cd:27:a1:ed:90:c5:67:bb:c9:21:00:78:92:80:53:
6d:80:6c:18:ee:aa:2e:f1:e6:6c:59:0b:3b:94:e7:
b4:09:14:be:c2:e0:9b:a5:62:32:59:6b:10:10:94:
40:c6:ce:87:55:b9:e5:d8:c0:90:4e:d6:61:76:c5:
b4:81:75:fc:18:34:1c:95:25:03:de:1d:d5:7c:d2:
35:d7:0a:61:67:70:3b:02:9b:f8:19:21:88:b6:6f:
43:78:c2:b1:00:de:af:d1:e5:98:8a:4b:1b:bd:5d:
7b:5f:c4:8b:e4:6a:a7:3c:34:d2:aa:f6:63:32:54:
96:86:47:cd:1b:3f:31:fa:b2:f2:1f:96:f3:bc:a4:
c5:bb:b4:9b:37:87:f8:91:4c:0f:ba:f4:6b:44:68:
2e:ae:fa:b9:e2:e7:2f:4f:d7:06:66:66:4d:29:54:
bf:6d:25:75:b5:e1:85:69:fc:19:7b:7d:85:ad:11:
f0:04:6c:6e:9f:f0:5b:a8:17:72:64:fc:59:04:14:
72:f7:a4:7d:53:15:b4:e3:1f:5e:95:d4:30:c8:63:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:93:24:33:43:0C:3C:BC:AE:D0:C0:CD:FA:EA:98:48:D3:7F:C7:3A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v5MkM0MMPLyu0MDN-uqYSNN_xzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:2240:3::-2a0e:2240:5:ffff:ffff:ffff:ffff:ffff
2a0f:3d81::/32
2a0f:3d85::-2a0f:3d86:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:a200::/32
Signature Algorithm: sha256WithRSAEncryption
8b:ee:a6:6e:7b:a7:76:29:e0:66:bc:9e:8e:c9:04:bd:e8:8c:
a5:c2:f2:1b:99:ed:6a:af:32:8f:70:cf:cc:c7:13:ee:aa:b8:
7b:89:4d:7d:c2:60:26:fd:de:27:51:e2:89:8c:ae:e6:9a:1e:
e7:54:12:53:f8:16:a7:09:2f:10:e6:97:5f:7a:60:4f:52:c5:
46:a0:6c:8c:d2:bb:79:37:fa:4e:a8:13:7c:25:65:51:37:99:
d0:d8:f5:a7:61:81:2c:a3:82:cd:53:e3:c6:5d:29:22:a8:a5:
40:66:0f:f0:c0:71:28:39:19:af:27:5b:72:7f:13:45:20:5c:
aa:95:20:1a:be:76:9a:5b:20:bc:ba:ab:3f:77:12:34:9a:15:
13:23:5b:2a:55:d7:de:08:61:d1:0d:70:17:8e:a7:cc:03:d2:
7d:c5:ee:65:3d:46:af:c9:7c:06:da:ee:cc:c1:fb:d4:7c:d4:
b0:48:4d:c0:4c:bc:16:7a:79:eb:cb:52:b3:df:81:8b:c2:8f:
bc:66:0c:6d:70:4d:33:c9:54:ec:ae:64:fe:2f:b0:ab:0d:05:
53:da:1c:15:3a:9f:6e:0a:4d:ff:8b:e0:ef:ac:94:32:77:c3:
0c:2b:e6:64:81:52:b3:1b:7d:2f:72:d7:e5:b9:ca:39:dd:c1:
62:7f:a7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:19:40 2025 by rpki-client