Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/9gyCYboXRxf0wh5i8P2KIGc69p8.roa
File: 9gyCYboXRxf0wh5i8P2KIGc69p8.roa (raw, json)
Hash identifier: iE2Z+05OIU4kuNqGV6VDuwuqVEt+0eLMh6odvyJCnRk=
Subject key identifier: F6:0C:82:61:BA:17:47:17:F4:C2:1E:62:F0:FD:8A:20:67:3A:F6:9F
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246BF4AFAD84A254DFF2FA3C90B0D99
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/9gyCYboXRxf0wh5i8P2KIGc69p8.roa
Signing time: Mon 02 Jan 2023 11:38:37 +0000
ROA not before: Mon 02 Jan 2023 11:38:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41108
IP address blocks: 2a0c:9a40:8081::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:bf:4a:fa:d8:4a:25:4d:ff:2f:a3:c9:0b:0d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f60c8261ba174717f4c21e62f0fd8a20673af69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:ca:3e:12:99:6d:90:c1:5b:5d:ed:b1:7a:
ea:33:ea:39:ba:b5:15:fb:d5:88:58:12:b4:5f:b7:
c9:11:2c:4b:ee:af:2f:20:01:76:3e:05:62:ff:69:
cc:9d:01:ef:92:31:01:d5:2e:8b:4f:a0:0e:6c:22:
15:08:99:d9:57:0e:4a:11:bd:d8:14:70:65:3a:84:
ca:18:7f:c6:97:ab:fe:0f:4b:09:af:0b:85:94:54:
97:c2:c6:57:60:ed:82:a4:eb:f6:71:11:5d:83:c4:
c4:ae:f8:dd:c7:c2:91:bc:2c:96:b8:77:4f:2a:00:
4b:ac:55:70:a4:88:82:d8:97:83:a2:e4:e9:de:8a:
40:d1:ca:e9:c9:66:9e:ef:db:a0:d3:94:17:6b:55:
1a:61:f7:b1:a5:37:d8:1e:83:36:7a:cb:80:17:6e:
5f:9b:5e:fb:db:75:45:fb:8f:63:50:26:f5:7c:bd:
50:d3:58:96:63:8e:59:df:2c:91:66:7d:48:37:8a:
78:6b:81:e7:b2:0e:07:fa:28:d4:36:26:97:b2:a4:
d0:cd:6a:2c:8b:8c:74:93:86:7f:0c:53:46:ef:7d:
a0:71:ea:2b:d3:4a:85:d9:fb:1d:4a:b0:7e:05:97:
04:08:b3:62:95:86:37:34:6c:b6:5f:73:92:94:ed:
6e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0C:82:61:BA:17:47:17:F4:C2:1E:62:F0:FD:8A:20:67:3A:F6:9F
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/9gyCYboXRxf0wh5i8P2KIGc69p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8081::/48
Signature Algorithm: sha256WithRSAEncryption
c3:ea:ae:0f:ca:30:ca:25:64:2c:4c:ed:5a:c6:22:12:53:28:
7c:55:3f:52:24:73:1a:9a:aa:86:87:e7:cd:96:a1:0d:31:f9:
7b:6e:6d:da:22:6a:0b:1f:e6:89:12:f6:d0:cd:5d:1e:c0:29:
4d:64:77:61:6f:0f:cb:20:2e:71:86:fe:dc:cd:37:94:17:d1:
bd:6a:d9:21:ca:be:fe:2e:c0:89:13:d9:05:68:b2:1c:84:6d:
c6:de:d7:7f:57:b3:52:d4:8a:48:07:4c:f5:7f:f7:ed:3f:4a:
14:b9:04:13:59:ec:c8:57:b1:88:81:78:50:60:d0:fe:13:1c:
1d:83:f3:c1:07:a1:72:f4:45:98:3b:82:fb:47:93:55:95:a1:
69:77:85:5f:04:2e:78:2d:64:c7:3d:55:6a:6a:da:72:f4:d7:
96:9f:cb:84:28:fd:fa:7a:55:fe:36:80:ca:98:05:1c:06:b6:
6f:cf:44:67:93:ed:d2:97:74:12:60:58:b2:72:cb:a0:50:58:
5a:32:e8:d2:fb:92:01:a9:3d:59:a4:55:1f:42:0c:4a:1a:36:
a6:0d:e7:5f:45:d4:17:9a:f2:cf:81:b6:f5:c1:e2:b6:f6:e8:
16:43:8a:a5:d9:4e:19:f4:68:69:2f:01:a3:71:27:18:1c:6a:
47:36:42:a8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVyRr9K+thKJU3/L6PJCw2ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjMwMTAyMTEzODM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjBjODI2MWJhMTc0NzE3ZjRjMjFlNjJmMGZkOGEyMDY3M2FmNjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuHKPhKZbZDBW13tsXrqM+o5urUV
+9WIWBK0X7fJESxL7q8vIAF2PgVi/2nMnQHvkjEB1S6LT6AObCIVCJnZVw5KEb3Y
FHBlOoTKGH/Gl6v+D0sJrwuFlFSXwsZXYO2CpOv2cRFdg8TErvjdx8KRvCyWuHdP
KgBLrFVwpIiC2JeDouTp3opA0crpyWae79ug05QXa1UaYfexpTfYHoM2esuAF25f
m17723VF+49jUCb1fL1Q01iWY45Z3yyRZn1IN4p4a4Hnsg4H+ijUNiaXsqTQzWos
i4x0k4Z/DFNG732gceor00qF2fsdSrB+BZcECLNilYY3NGy2X3OSlO1uEwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPYMgmG6F0cX9MIeYvD9iiBnOvafMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvOWd5Q1lib1hSeGYwd2g1aThQMktJR2M2OXA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQICB
MA0GCSqGSIb3DQEBCwUAA4IBAQDD6q4PyjDKJWQsTO1axiISUyh8VT9SJHMamqqG
h+fNlqENMfl7bm3aImoLH+aJEvbQzV0ewClNZHdhbw/LIC5xhv7czTeUF9G9atkh
yr7+LsCJE9kFaLIchG3G3td/V7NS1IpIB0z1f/ftP0oUuQQTWezIV7GIgXhQYND+
Exwdg/PBB6Fy9EWYO4L7R5NVlaFpd4VfBC54LWTHPVVqatpy9NeWn8uEKP36elX+
NoDKmAUcBrZvz0Rnk+3Sl3QSYFiycsugUFhaMujS+5IBqT1ZpFUfQgxKGjamDedf
RdQXmvLPgbb1weK29ugWQ4ql2U4Z9GhpLwGjcScYHGpHNkKo
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:30:41 2025 by rpki-client