Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zweL92FrhGhcw6Qb2mwpPg7uhJc.roa
File: zweL92FrhGhcw6Qb2mwpPg7uhJc.roa (raw, json)
Hash identifier: D5p+7CTrHp2BMgmoJlr1DuE3YVfXXhFU4ZxrPcRRIzs=
Subject key identifier: CF:07:8B:F7:61:6B:84:68:5C:C3:A4:1B:DA:6C:29:3E:0E:EE:84:97
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0189BAF8DB47D1D5B7429473C7D6B77EA9F2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zweL92FrhGhcw6Qb2mwpPg7uhJc.roa
Signing time: Thu 03 Aug 2023 10:36:58 +0000
ROA not before: Thu 03 Aug 2023 10:36:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a0f:7d00:1::/48 maxlen: 48
2a0a:2d00:1::/48 maxlen: 48
2a0c:7884::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:f8:db:47:d1:d5:b7:42:94:73:c7:d6:b7:7e:a9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 3 10:36:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf078bf7616b84685cc3a41bda6c293e0eee8497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:49:88:09:bc:da:2a:b9:9e:40:3d:7f:21:
8c:6b:ca:f6:60:46:2d:99:09:b4:c8:24:31:01:cb:
32:dc:9a:0c:dd:7c:d1:3d:d1:a4:5d:44:dd:78:7d:
34:3b:9b:d5:aa:d8:01:a1:79:88:ea:63:1b:73:4e:
a4:f0:33:8b:d0:4d:38:22:27:f6:b0:cc:92:01:c8:
0d:3f:e1:79:55:88:7d:02:e8:0c:7f:6c:c1:02:aa:
53:49:3c:60:82:02:98:87:35:3c:dd:a5:7c:ff:65:
c3:6d:90:af:86:75:bf:07:dd:30:e3:9d:ae:9f:17:
d7:ca:b6:f3:98:ac:88:47:59:b4:d3:71:41:f4:bd:
90:90:71:ca:e5:15:b4:a0:a4:ec:be:77:50:93:a0:
74:6d:10:22:3e:35:3c:4b:b4:8c:a7:57:95:4c:64:
7e:e6:f2:0b:28:69:b4:9b:75:33:4f:27:01:9b:b5:
be:18:ff:2c:d2:77:67:f0:1f:ae:9c:1d:0f:dc:23:
2b:3f:e2:5b:86:ed:7b:fb:aa:c5:5c:6f:ee:67:e2:
68:40:cd:50:cd:ee:1a:9e:d1:58:dd:e6:eb:4a:6c:
97:57:34:22:e8:ca:2d:ba:b6:14:92:2f:57:08:67:
73:38:7c:9c:97:eb:df:b9:8c:f0:4c:5d:74:b5:20:
e2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:07:8B:F7:61:6B:84:68:5C:C3:A4:1B:DA:6C:29:3E:0E:EE:84:97
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zweL92FrhGhcw6Qb2mwpPg7uhJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d00:1::/48
2a0c:7884::/32
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:ea00::/29
Signature Algorithm: sha256WithRSAEncryption
7b:3f:4b:d2:8b:ea:22:f0:ff:46:62:38:80:ab:93:88:6a:ab:
f0:0a:3e:43:64:86:de:d0:aa:9e:d9:79:3b:66:39:c6:4e:3b:
1f:15:1f:74:41:9f:21:9c:e8:2b:41:3f:47:21:b0:89:74:f0:
c9:ab:59:f8:e4:1c:8f:75:21:6e:ad:b9:9a:58:d1:6d:58:36:
78:f9:ca:81:84:91:3c:bd:c9:02:90:7d:e6:0b:6e:64:75:57:
bc:f5:96:3a:2e:2d:9d:bd:b7:4b:e3:cf:1d:7e:59:b3:9e:46:
c4:86:5f:80:a6:45:ab:79:de:3f:20:47:14:75:84:3f:ee:a4:
f6:c9:10:df:aa:e1:d8:1f:4b:12:4e:1e:e6:0f:a0:ec:b0:41:
db:2b:56:e5:da:59:ff:40:c5:a6:71:4f:65:ad:56:ba:3f:32:
72:1f:c6:ed:10:70:51:79:4e:d3:ff:5e:ed:12:9f:ce:52:67:
b3:37:d0:60:80:4a:47:d5:e3:a1:91:5f:dc:21:d5:8c:be:08:
db:b2:ab:9a:6e:95:ef:66:72:65:9f:fc:43:a4:61:75:4a:01:
b2:18:8a:68:0d:54:1c:28:b1:9a:15:5b:a3:76:1e:9d:60:71:
70:50:83:d7:79:3e:a0:b3:3e:10:8d:34:3d:aa:5d:72:00:c7:
21:d1:e9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:19:06 2025 by rpki-client