Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_aZK-6IxG2vIdeAl1fFAr8eHL7E.roa
File: _aZK-6IxG2vIdeAl1fFAr8eHL7E.roa (raw, json)
Hash identifier: 1GJl4b2Mjruni8EV/xE7x/beL3AUxKw2GwvLk2aU0lM=
Subject key identifier: FD:A6:4A:FB:A2:31:1B:6B:C8:75:E0:25:D5:F1:40:AF:C7:87:2F:B1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018A8861DF5A7CFCD3231FFD5D0981D8B341
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_aZK-6IxG2vIdeAl1fFAr8eHL7E.roa
Signing time: Tue 12 Sep 2023 07:53:50 +0000
ROA not before: Tue 12 Sep 2023 07:53:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198231
IP address blocks: 2a13:d902::/32 maxlen: 32
2a13:2d41::/32 maxlen: 32
2a13:2d45::/32 maxlen: 32
2a13:d906::/32 maxlen: 32
2a13:2d44::/32 maxlen: 32
2a13:2d42::/32 maxlen: 32
2a13:d901::/32 maxlen: 32
2a13:d907::/32 maxlen: 32
2a13:c700::/29 maxlen: 29
2a13:d904::/32 maxlen: 32
2a13:2d43::/32 maxlen: 32
2a13:d700::/29 maxlen: 29
2a13:d900::/32 maxlen: 32
2a13:2d47::/32 maxlen: 32
2a13:d903::/32 maxlen: 32
2a13:d905::/32 maxlen: 32
2a13:2d40::/32 maxlen: 32
2a13:2d46::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:88:61:df:5a:7c:fc:d3:23:1f:fd:5d:09:81:d8:b3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 12 07:53:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fda64afba2311b6bc875e025d5f140afc7872fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a9:f3:ef:60:42:59:97:43:ae:45:e8:48:cd:
01:57:d8:6a:e6:af:4f:6f:d2:ca:31:66:6d:45:94:
37:ba:a0:ee:b3:90:65:39:cf:a1:7f:b5:3a:8c:e2:
ca:33:a9:e6:a6:ef:dd:77:41:5b:e6:8f:6f:a7:57:
90:23:c2:23:00:0e:7a:fa:76:b4:3a:f2:5a:ec:f0:
4e:b7:21:91:95:97:61:95:64:18:e2:52:a4:9d:a0:
c3:5e:18:6f:34:e5:45:b6:38:7e:54:e9:9e:1d:8c:
b2:c5:ba:b3:47:1a:79:93:07:12:af:7f:ec:9e:14:
0c:16:48:56:2d:83:5b:c2:33:fa:da:5e:f5:2a:46:
ee:81:42:2a:62:b0:c3:50:67:21:27:eb:60:26:2c:
a1:ff:e7:60:01:a5:67:c8:f6:c0:bf:9c:7f:d4:df:
ba:da:3d:ed:06:24:49:80:c8:eb:e8:92:3e:8e:e2:
41:0f:df:3b:c4:6d:28:56:0f:58:54:3f:8a:45:af:
4c:67:49:a9:a2:4a:88:73:5f:04:5b:7c:b4:f9:84:
f3:a7:30:50:d4:68:17:71:4b:ee:17:ba:4c:1a:75:
d2:71:51:53:b9:13:2c:86:bd:29:5e:39:fd:bc:3d:
e7:3d:67:2d:99:f6:60:14:a9:83:53:68:7c:1d:30:
0a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A6:4A:FB:A2:31:1B:6B:C8:75:E0:25:D5:F1:40:AF:C7:87:2F:B1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_aZK-6IxG2vIdeAl1fFAr8eHL7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2d40::/29
2a13:c700::/29
2a13:d700::/29
2a13:d900::/29
Signature Algorithm: sha256WithRSAEncryption
6c:4a:96:4e:67:dc:50:19:05:27:96:c7:44:e2:f9:b8:be:79:
55:5b:f7:2f:85:5a:63:7a:80:72:92:47:a5:cd:35:fd:17:70:
33:ed:84:50:3c:0d:52:4a:92:91:c7:61:a9:81:67:fe:3f:ed:
37:da:07:11:d1:54:b3:3a:81:ee:15:59:17:32:f0:9a:13:99:
d5:1f:1a:a8:fa:c6:7d:fb:64:ff:d7:e9:50:fd:b8:50:93:ab:
0c:41:e0:49:62:90:a4:db:53:72:3b:21:da:90:d7:0f:75:52:
f7:00:cb:f1:62:ff:73:aa:96:73:d5:7d:bd:77:ff:d4:69:a1:
4b:38:98:29:a6:f3:9a:60:6b:f8:9d:5d:5e:2d:4a:01:d9:9d:
f4:51:7e:c7:39:5a:05:a2:16:d2:ac:00:01:a4:91:64:57:c4:
61:72:25:3e:04:5f:ea:91:1f:93:e7:cb:ad:2f:79:18:0a:e2:
dc:99:51:81:9f:3b:99:aa:29:9a:c6:dd:65:2d:ff:af:2f:8f:
d8:88:36:9c:b5:a7:4a:28:1b:a2:05:1e:9d:2c:ef:aa:8b:79:
6b:49:da:e9:1e:b3:c8:87:ae:78:b3:21:59:4f:89:50:3b:2e:
72:dc:4a:f5:94:f3:f2:fa:6d:9c:90:c9:73:2a:1f:33:d3:62:
8b:c2:09:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:43:13 2025 by rpki-client