Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/wrUKLyEHWEK6fg6gC-o6rygG-Uk.roa
File: wrUKLyEHWEK6fg6gC-o6rygG-Uk.roa (raw, json)
Hash identifier: 5j4Mr4V+2jVykP4zYnITTadjBvwwzOkpGpbRxLudjnc=
Subject key identifier: C2:B5:0A:2F:21:07:58:42:BA:7E:0E:A0:0B:EA:3A:AF:28:06:F9:49
Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial: 025166C5
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/wrUKLyEHWEK6fg6gC-o6rygG-Uk.roa
Signing time: Sat 01 Jan 2022 13:57:12 +0000
ROA not before: Sat 01 Jan 2022 13:57:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14616
IP address blocks: 2a02:e38:8100::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38889157 (0x25166c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
Validity
Not Before: Jan 1 13:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2b50a2f21075842ba7e0ea00bea3aaf2806f949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e1:52:ef:13:54:47:ca:4c:fa:e5:fc:91:dd:
c7:aa:9d:d8:36:2a:77:7f:8c:e6:b3:1a:be:70:5d:
b4:c8:a4:6b:72:6a:aa:d5:06:af:ba:39:48:dc:1f:
08:20:14:16:cb:0a:74:89:71:f9:f0:97:73:14:5a:
db:48:5b:9e:17:48:e3:a0:c3:6f:89:0c:da:ac:50:
b5:44:01:11:58:69:e6:b1:13:ae:9b:67:71:31:3e:
85:26:e8:5f:b1:d6:28:bd:47:39:45:4b:50:09:a0:
51:5f:af:2e:bb:c4:34:93:85:6c:ed:2b:a3:dc:b4:
3e:40:19:2e:b9:0e:da:0b:f5:76:e0:68:85:b0:f8:
60:58:e2:67:9d:a4:05:6d:8b:e9:0e:37:8e:cc:01:
90:41:b5:25:1d:4e:8b:aa:21:54:06:c6:bf:54:27:
9a:9d:66:9e:31:27:27:fb:98:af:ee:4b:7b:12:16:
76:5b:3c:7d:f9:59:42:a1:d4:a2:7c:69:7a:a9:bd:
98:3a:80:39:36:4b:83:6a:c1:60:d8:df:b1:c2:4a:
4f:43:ba:27:f1:5b:b7:c5:14:23:ea:8b:0a:39:ac:
78:43:5d:17:21:f0:a5:10:51:3b:2b:3c:0f:c4:0f:
eb:f6:fc:1a:23:d3:1a:d7:66:44:93:77:02:18:42:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B5:0A:2F:21:07:58:42:BA:7E:0E:A0:0B:EA:3A:AF:28:06:F9:49
X509v3 Authority Key Identifier:
keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/wrUKLyEHWEK6fg6gC-o6rygG-Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:e38:8100::/40
Signature Algorithm: sha256WithRSAEncryption
6a:01:21:cf:e9:d2:11:29:c0:0e:9b:f5:14:a1:4f:80:29:75:
de:d0:46:e1:73:a2:05:ae:66:c9:9b:7e:b6:46:a7:af:28:2b:
97:e9:a7:53:bd:dd:ee:c3:b8:c4:29:31:40:dc:83:a9:ab:df:
81:9e:06:9b:ca:c0:1a:20:b1:c4:3a:4e:84:84:f0:8d:48:70:
32:c6:25:3f:ac:f3:43:e4:44:62:97:b4:53:1f:ae:5e:b6:e5:
70:3e:e4:d3:c3:d7:d5:e2:74:2c:dc:98:d6:e7:f1:f7:07:17:
fe:03:5a:3d:7b:a6:8e:68:a0:01:75:45:f9:7f:34:5c:23:3f:
be:a6:1a:a6:2f:7a:02:cd:57:f3:28:37:6d:0f:12:5e:e1:62:
40:78:b4:56:71:1b:84:5d:a4:d6:cc:11:6b:75:ee:c5:33:15:
52:d7:cf:a2:56:15:89:54:5e:25:93:d3:2c:85:9c:58:46:34:
48:6d:a1:60:e7:cc:b3:5a:20:da:c6:e2:73:cf:02:ee:ce:00:
49:0f:c5:11:3e:21:15:ce:52:cb:54:ac:bc:1b:8f:d1:31:c9:
d4:fa:22:02:fd:17:40:94:23:24:cf:32:e4:97:ae:5c:25:9e:
05:b9:4f:49:d6:5f:88:b7:a6:77:01:f2:03:60:27:a9:03:77:
f9:3b:29:3a
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEAlFmxTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MjgwN2YyODBkYTk5NTY5ZWNhMjQzNDZiYWJlOWRjODVhYzEzMjQwMB4XDTIyMDEw
MTEzNTcxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzJiNTBhMmYyMTA3
NTg0MmJhN2UwZWEwMGJlYTNhYWYyODA2Zjk0OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANDhUu8TVEfKTPrl/JHdx6qd2DYqd3+M5rMavnBdtMika3Jq
qtUGr7o5SNwfCCAUFssKdIlx+fCXcxRa20hbnhdI46DDb4kM2qxQtUQBEVhp5rET
rptncTE+hSboX7HWKL1HOUVLUAmgUV+vLrvENJOFbO0ro9y0PkAZLrkO2gv1duBo
hbD4YFjiZ52kBW2L6Q43jswBkEG1JR1Oi6ohVAbGv1Qnmp1mnjEnJ/uYr+5LexIW
dls8fflZQqHUonxpeqm9mDqAOTZLg2rBYNjfscJKT0O6J/Fbt8UUI+qLCjmseENd
FyHwpRBROys8D8QP6/b8GiPTGtdmRJN3AhhCuA8CAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBTCtQovIQdYQrp+DqAL6jqvKAb5STAfBgNVHSMEGDAWgBTygH8oDamVaeyi
Q0a6vp3IWsEyQDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhvQl9LQTJwbFduc29rTkd1cjZkeUZyQk1rQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvN2IwYTg1LTk2NzctNGQwMy1hZmI2LWE5ZmFmNmEyNjQyNi8x
L3dyVUtMeUVIV0VLNmZnNmdDLW82cnlnRy1Vay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
N2IwYTg1LTk2NzctNGQwMy1hZmI2LWE5ZmFmNmEyNjQyNi8xLzhvQl9LQTJwbFdu
c29rTkd1cjZkeUZyQk1rQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoCDjiBMA0GCSqGSIb3DQEBCwUA
A4IBAQBqASHP6dIRKcAOm/UUoU+AKXXe0Ebhc6IFrmbJm362RqevKCuX6adTvd3u
w7jEKTFA3IOpq9+BngabysAaILHEOk6EhPCNSHAyxiU/rPND5ERil7RTH65etuVw
PuTTw9fV4nQs3JjW5/H3Bxf+A1o9e6aOaKABdUX5fzRcIz++phqmL3oCzVfzKDdt
DxJe4WJAeLRWcRuEXaTWzBFrde7FMxVS18+iVhWJVF4lk9MshZxYRjRIbaFg58yz
WiDaxuJzzwLuzgBJD8URPiEVzlLLVKy8G4/RMcnU+iIC/RdAlCMkzzLkl65cJZ4F
uU9J1l+It6Z3AfIDYCepA3f5Oyk6
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:41 2025 by rpki-client