Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zV2kVY6lCVMtk6951Qeu6v6v6aY.roa
File: zV2kVY6lCVMtk6951Qeu6v6v6aY.roa (raw, json)
Hash identifier: 7L9L+LWg1EUw7n5tpYIhBLSRptnmq+if1lODOCy5n9Y=
Subject key identifier: CD:5D:A4:55:8E:A5:09:53:2D:93:AF:79:D5:07:AE:EA:FE:AF:E9:A6
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246BCEA662CA8AAB7B444B4053765FE
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zV2kVY6lCVMtk6951Qeu6v6v6aY.roa
Signing time: Mon 02 Jan 2023 11:38:36 +0000
ROA not before: Mon 02 Jan 2023 11:38:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7489
IP address blocks: 2a0c:9a40:8085::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:bc:ea:66:2c:a8:aa:b7:b4:44:b4:05:37:65:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd5da4558ea509532d93af79d507aeeafeafe9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d8:51:80:9b:84:e0:3f:8e:e7:a7:bd:0b:8a:
f2:d6:81:97:fe:19:ad:97:a5:5e:33:b0:23:5c:ba:
92:19:3a:d4:63:38:8d:0a:22:4d:e8:53:2b:ad:e4:
22:35:e2:f1:86:90:1b:39:ac:07:d5:46:dc:5c:64:
3f:a0:73:dc:9f:4f:81:6a:14:6c:e6:1e:58:01:56:
b9:33:3b:42:94:8c:41:1a:2c:b0:77:23:bf:d3:ca:
26:bb:b7:79:64:3c:a3:ae:b2:83:c4:ee:d7:f4:42:
2e:a1:0b:a0:83:18:51:59:d8:96:69:c0:e4:7d:e1:
a5:09:07:52:3a:63:38:a5:05:32:79:11:de:18:ec:
33:91:f0:3a:12:d3:fe:54:aa:a6:b7:be:af:7d:81:
a8:ad:2f:29:18:87:e5:6f:fd:93:95:0c:bc:66:30:
b3:cb:40:32:74:38:c2:e1:dd:c7:c3:82:bf:c7:ae:
4a:ca:59:88:84:10:e0:13:15:26:42:0e:c1:5b:70:
3b:e4:ac:23:c5:e7:04:07:85:41:82:77:53:77:b7:
54:3b:a0:d2:c3:39:45:70:35:13:fb:34:18:46:15:
9a:dc:56:3a:75:30:df:20:f1:c7:57:3d:bc:d5:8a:
a1:73:07:db:c9:0c:42:d3:b1:c7:4d:27:62:40:45:
5d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5D:A4:55:8E:A5:09:53:2D:93:AF:79:D5:07:AE:EA:FE:AF:E9:A6
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/zV2kVY6lCVMtk6951Qeu6v6v6aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8085::/48
Signature Algorithm: sha256WithRSAEncryption
ad:d7:00:d5:1e:cf:a8:cc:93:a3:69:ce:17:f3:4d:75:37:22:
15:4e:2e:36:ed:a8:1a:fa:8c:41:b2:23:d4:9f:b3:28:c6:74:
4d:ae:dd:6c:4f:85:ce:2d:f7:4f:7a:f3:6f:51:26:3b:9c:37:
86:84:7f:71:e7:61:53:4c:56:04:fb:77:aa:48:55:c7:92:38:
fa:f8:53:64:6d:63:4a:c0:96:e5:74:a2:2b:59:8c:e5:12:b9:
bf:54:84:29:10:ac:31:84:e7:29:33:80:54:c0:78:0c:0f:ae:
fb:bb:df:bb:33:d4:5d:d8:5d:4b:8c:a2:47:9b:ce:84:37:6d:
f5:6f:da:39:fd:20:48:a6:bd:94:3d:b0:32:52:e2:ad:55:19:
a5:e1:c8:24:f0:40:a3:11:c9:1f:b1:c2:00:8a:f1:14:ff:8e:
2d:a4:b8:fc:ab:32:c0:fc:d9:93:28:d7:4d:17:f3:73:3e:f7:
f9:d4:70:5b:40:16:f4:d4:ba:6c:07:3d:3c:8a:34:4a:1f:9f:
1d:1c:f5:fc:6a:71:88:fd:1e:23:47:22:4d:99:58:48:49:b0:
26:6a:35:93:b8:52:d1:d1:bc:91:83:e0:d3:68:61:5e:69:c5:
81:06:27:86:5b:e5:fe:e1:d8:28:ac:3d:2b:d8:26:1e:8a:6e:
ef:82:ce:4e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVyRrzqZiyoqre0RLQFN2X+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjMwMTAyMTEzODM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDVkYTQ1NThlYTUwOTUzMmQ5M2FmNzlkNTA3YWVlYWZlYWZlOWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNhRgJuE4D+O56e9C4ry1oGX/hmt
l6VeM7AjXLqSGTrUYziNCiJN6FMrreQiNeLxhpAbOawH1UbcXGQ/oHPcn0+BahRs
5h5YAVa5MztClIxBGiywdyO/08omu7d5ZDyjrrKDxO7X9EIuoQuggxhRWdiWacDk
feGlCQdSOmM4pQUyeRHeGOwzkfA6EtP+VKqmt76vfYGorS8pGIflb/2TlQy8ZjCz
y0AydDjC4d3Hw4K/x65KylmIhBDgExUmQg7BW3A75KwjxecEB4VBgndTd7dUO6DS
wzlFcDUT+zQYRhWa3FY6dTDfIPHHVz281YqhcwfbyQxC07HHTSdiQEVdrQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFM1dpFWOpQlTLZOvedUHrur+r+mmMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvelYya1ZZNmxDVk10azY5NTFRZXU2djZ2NmFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQICF
MA0GCSqGSIb3DQEBCwUAA4IBAQCt1wDVHs+ozJOjac4X8011NyIVTi427aga+oxB
siPUn7MoxnRNrt1sT4XOLfdPevNvUSY7nDeGhH9x52FTTFYE+3eqSFXHkjj6+FNk
bWNKwJbldKIrWYzlErm/VIQpEKwxhOcpM4BUwHgMD677u9+7M9Rd2F1LjKJHm86E
N231b9o5/SBIpr2UPbAyUuKtVRml4cgk8ECjEckfscIAivEU/44tpLj8qzLA/NmT
KNdNF/NzPvf51HBbQBb01LpsBz08ijRKH58dHPX8anGI/R4jRyJNmVhISbAmajWT
uFLR0byRg+DTaGFeacWBBieGW+X+4dgorD0r2CYeim7vgs5O
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:29 2025 by rpki-client