Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/z_Te_7MOMGjIFwoOB9h8uwBu9t4.roa
File: z_Te_7MOMGjIFwoOB9h8uwBu9t4.roa (raw, json)
Hash identifier: 0giRp6KTBUHS8TP7gpVZQwRWiR1jnpJ20zppcWSbrq8=
Subject key identifier: CF:F4:DE:FF:B3:0E:30:68:C8:17:0A:0E:07:D8:7C:BB:00:6E:F6:DE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01876A3FDA8A00A3B3397A66F5A471F6942B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/z_Te_7MOMGjIFwoOB9h8uwBu9t4.roa
Signing time: Mon 10 Apr 2023 08:19:42 +0000
ROA not before: Mon 10 Apr 2023 08:19:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a0f:7d00:1::/48 maxlen: 48
2a12:d6c1::/32 maxlen: 32
2a0a:2d00:1::/48 maxlen: 48
2a0c:7884::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:3f:da:8a:00:a3:b3:39:7a:66:f5:a4:71:f6:94:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 10 08:19:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cff4deffb30e3068c8170a0e07d87cbb006ef6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:93:5f:0e:d3:e7:f7:05:57:ea:a9:44:0f:f5:
86:3b:57:ba:62:3d:f4:a6:8c:a2:6a:c6:c8:d8:6d:
e5:4f:00:fe:3e:43:2a:aa:7f:1b:c6:86:b5:f0:9f:
aa:b5:67:91:18:2f:53:00:d2:e0:f8:16:59:a9:c7:
63:df:e5:4c:3c:d3:24:cf:ab:1c:73:d4:26:8f:dc:
77:2f:bc:e0:6f:1b:be:ee:d4:6c:17:9c:b3:e9:27:
03:ef:12:b5:ec:9f:21:7a:e3:df:00:f8:32:d9:66:
89:d0:88:44:5c:39:0d:0f:a5:6e:d0:26:6d:e0:20:
19:c0:38:95:66:62:ba:af:35:8c:11:23:57:a0:e1:
69:79:26:e4:1e:7a:58:7a:3f:f4:b3:3b:60:0f:8f:
a3:ed:29:d1:8d:4a:57:6c:70:a3:5c:0b:fd:c9:79:
80:e9:ad:00:a4:ef:f6:80:2f:fb:a7:03:e3:2b:02:
3f:60:ae:aa:f0:f1:4a:d1:84:43:1d:3d:5f:12:cb:
7b:90:66:ba:9a:28:51:63:75:20:dd:26:d9:1e:f0:
01:f7:6e:80:39:24:d5:bf:45:bb:c4:2d:10:60:5b:
2f:33:2c:19:80:87:15:19:d4:ff:70:98:ec:26:69:
ea:6a:20:1f:e7:c3:61:de:3f:e0:3e:80:d6:43:ad:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F4:DE:FF:B3:0E:30:68:C8:17:0A:0E:07:D8:7C:BB:00:6E:F6:DE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/z_Te_7MOMGjIFwoOB9h8uwBu9t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d00:1::/48
2a0c:7884::/32
2a0f:7d00:1::/48
2a12:d6c1::/32
Signature Algorithm: sha256WithRSAEncryption
a3:9d:89:99:8f:e1:8a:9e:df:0b:88:0c:92:90:52:69:be:d8:
be:b9:39:07:7f:ee:81:c0:7d:8a:18:dc:8e:f6:01:0c:56:43:
83:95:2c:e2:40:7e:d4:8f:c9:ea:83:91:6d:96:85:81:01:a6:
88:56:8f:7b:e3:4f:b1:ca:9d:c7:a8:6d:0d:7e:04:e3:b6:93:
5e:1a:28:ee:60:89:aa:fc:7b:53:f3:0a:5b:aa:cb:0c:4c:a4:
fc:bf:19:30:8d:6d:ee:86:b1:78:aa:8e:61:32:50:f1:bc:64:
1a:b8:99:81:9d:19:f4:9e:14:eb:96:bc:4d:6c:00:37:6f:35:
45:22:ee:e5:4a:9b:00:63:e5:f3:a7:a9:8d:6e:ab:a2:82:0b:
f7:b9:97:2b:fc:e5:a2:72:66:0f:ca:79:ee:ff:23:d9:72:62:
91:e7:a7:1e:15:36:d3:73:a3:12:89:c7:01:ed:d0:e2:67:4e:
ab:9b:db:42:19:25:c7:e5:66:10:4d:b2:3d:01:bb:b6:76:0d:
43:1b:91:d5:6a:92:75:ad:49:30:14:d5:ea:d8:b8:aa:38:f9:
fe:99:a4:24:d7:27:db:64:75:57:b0:47:97:4c:5b:38:13:84:
4b:35:ba:9f:0b:8d:44:8b:d9:2f:ed:42:89:06:41:4c:07:92:
b0:dc:fb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:54:23 2025 by rpki-client