Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/7FaZL0qw5_DlOzt_A9fFllaHrAY.roa
File: 7FaZL0qw5_DlOzt_A9fFllaHrAY.roa (raw, json)
Hash identifier: uFwPxkzthJ8iF08A4TDI886wQZ1o4mebeWSnQi7teJc=
Subject key identifier: EC:56:99:2F:4A:B0:E7:F0:E5:3B:3B:7F:03:D7:C5:96:56:87:AC:06
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01890352117A6D3FE48F43D8E6A8FCFDA5F7
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/7FaZL0qw5_DlOzt_A9fFllaHrAY.roa
Signing time: Wed 28 Jun 2023 18:44:17 +0000
ROA not before: Wed 28 Jun 2023 18:44:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198005
IP address blocks: 2a0c:9a40:83d0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:03:52:11:7a:6d:3f:e4:8f:43:d8:e6:a8:fc:fd:a5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jun 28 18:44:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec56992f4ab0e7f0e53b3b7f03d7c5965687ac06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:f7:11:b8:c3:a3:62:4c:ea:71:2b:89:8f:
37:25:c6:19:7d:e5:5e:37:03:b4:66:4e:55:41:46:
06:7b:c3:f7:12:dc:df:ca:b2:08:57:f7:58:85:86:
58:22:d3:23:c7:49:b6:b4:40:72:35:51:22:de:d2:
4f:1b:21:f1:f2:52:9f:6d:84:07:f7:f9:f3:86:0c:
0a:63:2c:81:75:2f:7d:d3:80:bb:20:da:fa:73:71:
fb:4e:e3:d9:15:28:7c:40:e7:36:ec:4b:cd:f1:ae:
ba:d1:0f:dc:6f:71:ce:36:24:37:42:94:2c:4e:dc:
44:d3:c6:95:ca:3f:0a:e9:b1:2d:b2:1c:56:e3:36:
f5:55:52:e1:46:2f:89:e5:59:8c:e3:3d:2f:92:55:
5b:3d:a7:03:42:0d:96:98:1f:45:c0:cc:48:58:59:
17:6c:95:d3:68:ef:f5:f4:10:4d:71:be:1a:55:35:
40:9e:af:0b:f6:15:5c:2e:b1:90:de:94:2c:c5:77:
ba:14:9a:3b:00:a3:14:6e:a3:f3:b7:c8:af:86:a9:
a7:ad:80:f1:61:84:33:bf:af:6a:76:dd:70:a2:8e:
1f:7a:7f:f1:d0:8c:1c:89:91:27:d5:99:3f:57:bf:
75:82:fa:55:f4:9e:31:90:fc:a4:2a:27:68:1c:4d:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:56:99:2F:4A:B0:E7:F0:E5:3B:3B:7F:03:D7:C5:96:56:87:AC:06
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/7FaZL0qw5_DlOzt_A9fFllaHrAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:83d0::/48
Signature Algorithm: sha256WithRSAEncryption
c6:90:44:81:80:de:be:2f:11:7f:bc:92:ff:e8:f3:f9:14:d9:
b6:ce:df:fe:fe:10:a4:66:18:7c:65:c0:01:da:6c:f6:df:c0:
cf:49:f6:c3:19:db:2b:64:1d:7d:53:7d:ae:c6:9a:98:94:c0:
6f:1b:f1:ab:a4:a9:f4:12:59:3c:c9:4b:bf:03:8e:7e:32:14:
04:92:65:30:9b:76:ae:4b:1d:66:3c:01:07:a9:35:02:4b:e8:
9f:a7:f0:ef:13:e6:0e:bc:34:bf:08:d9:a7:d9:cc:4e:92:26:
56:2c:79:c3:0d:17:50:e6:08:a2:a5:0b:5e:72:1a:c4:91:6d:
17:fb:a6:15:21:91:e0:c0:83:1a:84:6c:42:c8:6a:0c:65:1e:
ad:7f:06:8d:7c:17:26:2b:36:a0:da:62:b5:bf:01:46:23:42:
9a:88:d1:74:6e:25:71:e1:62:f8:21:f4:a0:5b:d3:c0:2e:6e:
5d:bb:98:ad:12:1f:e6:38:56:18:1d:10:21:cd:17:f7:3e:f2:
9e:5d:ee:ae:5c:f5:92:e1:8b:38:3b:e9:b4:c0:c5:1e:8f:d3:
b0:b2:a1:ea:d8:fa:df:5e:98:47:28:e1:49:da:8a:b4:0d:45:
75:02:25:d4:8e:1f:15:0c:c2:0e:3a:fc:9b:49:44:fd:de:73:
db:80:62:90
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYkDUhF6bT/kj0PY5qj8/aX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjMwNjI4MTg0NDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzU2OTkyZjRhYjBlN2YwZTUzYjNiN2YwM2Q3YzU5NjU2ODdhYzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa33EbjDo2JM6nEriY83JcYZfeVe
NwO0Zk5VQUYGe8P3EtzfyrIIV/dYhYZYItMjx0m2tEByNVEi3tJPGyHx8lKfbYQH
9/nzhgwKYyyBdS9904C7INr6c3H7TuPZFSh8QOc27EvN8a660Q/cb3HONiQ3QpQs
TtxE08aVyj8K6bEtshxW4zb1VVLhRi+J5VmM4z0vklVbPacDQg2WmB9FwMxIWFkX
bJXTaO/19BBNcb4aVTVAnq8L9hVcLrGQ3pQsxXe6FJo7AKMUbqPzt8ivhqmnrYDx
YYQzv69qdt1woo4fen/x0IwciZEn1Zk/V791gvpV9J4xkPykKidoHE2WBQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOxWmS9KsOfw5Ts7fwPXxZZWh6wGMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvN0ZhWkwwcXc1X0RsT3p0X0E5ZkZsbGFIckFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIPQ
MA0GCSqGSIb3DQEBCwUAA4IBAQDGkESBgN6+LxF/vJL/6PP5FNm2zt/+/hCkZhh8
ZcAB2mz238DPSfbDGdsrZB19U32uxpqYlMBvG/GrpKn0Elk8yUu/A45+MhQEkmUw
m3auSx1mPAEHqTUCS+ifp/DvE+YOvDS/CNmn2cxOkiZWLHnDDRdQ5giipQtechrE
kW0X+6YVIZHgwIMahGxCyGoMZR6tfwaNfBcmKzag2mK1vwFGI0KaiNF0biVx4WL4
IfSgW9PALm5du5itEh/mOFYYHRAhzRf3PvKeXe6uXPWS4Ys4O+m0wMUej9OwsqHq
2PrfXphHKOFJ2oq0DUV1AiXUjh8VDMIOOvybSUT93nPbgGKQ
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:46 2025 by rpki-client