Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/qA15iIO2JiAMd0y2U8c3oKvq0nE.roa
File: qA15iIO2JiAMd0y2U8c3oKvq0nE.roa (raw, json)
Hash identifier: A9ER4bNUfVG2N8SOVUaxyACL9xu7LdpqmZNMK/7d5L4=
Subject key identifier: A8:0D:79:88:83:B6:26:20:0C:77:4C:B6:53:C7:37:A0:AB:EA:D2:71
Certificate issuer: /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial: 018572033C50CF6A5D6C2E838DBBE6A6AE1D
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/qA15iIO2JiAMd0y2U8c3oKvq0nE.roa
Signing time: Mon 02 Jan 2023 10:24:52 +0000
ROA not before: Mon 02 Jan 2023 10:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39834
IP address blocks: 79.173.0.0/18 maxlen: 18
2a02:f740::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:3c:50:cf:6a:5d:6c:2e:83:8d:bb:e6:a6:ae:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
Validity
Not Before: Jan 2 10:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a80d798883b626200c774cb653c737a0abead271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:fd:5c:24:47:58:aa:5d:4c:90:86:21:3b:
b1:78:41:b3:dd:3a:08:29:85:dd:13:f2:1b:e7:b1:
cf:24:1a:f6:a8:8e:06:25:dd:a9:80:6c:20:a2:69:
81:d4:3e:a3:23:13:cc:6c:ba:12:d1:3f:be:2c:a9:
d1:b1:b7:0f:df:24:20:61:c3:05:15:1d:c1:a6:ad:
f9:09:a1:a5:e8:41:7a:6a:50:b6:16:bb:ec:ea:b7:
99:bf:fe:9b:7f:b8:70:07:7b:49:90:be:5d:d9:3c:
bc:22:3e:80:6c:c4:5c:9a:af:b9:16:9a:33:ab:fc:
4c:9f:29:9b:8e:98:ed:e7:1d:a3:2f:27:20:3a:b7:
21:43:6e:52:76:8f:9e:80:41:30:36:d1:96:62:01:
18:b7:1f:00:a9:f5:bd:ef:dd:3f:2e:ab:ab:67:01:
70:a2:ba:b9:cf:0e:19:cc:39:6d:e0:b2:36:bd:b2:
66:ea:3d:1a:25:2e:c9:e3:35:92:b8:5d:dd:f4:e8:
42:09:9c:22:1d:18:ff:91:53:95:6f:d1:6c:fe:90:
3f:01:95:69:28:8d:2a:75:5e:ad:bc:1e:06:f3:3f:
84:68:e8:14:1c:2d:b9:c0:34:6c:bb:25:09:52:57:
96:c4:03:27:f9:00:bc:f7:d6:2b:2d:96:ca:8e:02:
78:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0D:79:88:83:B6:26:20:0C:77:4C:B6:53:C7:37:A0:AB:EA:D2:71
X509v3 Authority Key Identifier:
keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/qA15iIO2JiAMd0y2U8c3oKvq0nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.0.0/18
IPv6:
2a02:f740::/29
Signature Algorithm: sha256WithRSAEncryption
85:6d:bb:72:6b:9c:95:a9:12:d4:83:dc:ed:f6:1a:82:a8:c3:
b2:d3:8c:84:fc:f9:6e:c1:19:7e:6d:69:b4:65:6b:3b:75:09:
74:b2:83:ab:46:15:fd:8f:13:37:76:3e:15:8f:11:bf:e8:1a:
81:94:82:1a:e3:36:ea:6e:96:13:3b:58:04:7f:4f:ad:2e:2c:
7a:00:f5:73:e9:23:c1:82:4a:7e:c0:a2:05:68:d7:80:54:ff:
2d:42:dd:1b:bb:7c:ec:0c:39:d4:09:44:5c:d6:3e:ac:ad:67:
f8:71:98:cf:0d:8d:6d:ec:2d:6a:79:d9:da:19:54:04:52:01:
1e:75:f2:c7:30:80:23:71:49:12:f6:43:ae:af:c6:e7:91:cf:
f3:9f:ff:05:d0:74:d6:d5:ff:a8:d0:3d:58:c9:e0:11:a3:54:
b1:79:1b:d9:97:7e:ea:1f:fc:4f:20:f3:fc:9d:af:67:54:4a:
d9:07:fe:6d:85:96:bd:1a:41:c6:46:7b:c3:8c:42:75:3b:9a:
22:53:22:33:d4:bc:ff:88:15:dd:09:b6:b9:a6:91:63:b9:a8:
0c:0a:3c:0f:ca:91:39:0e:76:81:59:2c:55:ae:1d:21:eb:37:
d6:b6:67:54:49:47:09:4b:45:1e:5e:d6:8a:e1:71:59:f6:dd:
93:8d:71:4c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVyAzxQz2pdbC6Djbvmpq4dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NDEyNjJhY2Q2MmM5MGU2ODA4MWE2Zjc3NzM3NWRmMmMz
NzEzYzIwHhcNMjMwMTAyMTAyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODBkNzk4ODgzYjYyNjIwMGM3NzRjYjY1M2M3MzdhMGFiZWFkMjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylD9XCRHWKpdTJCGITuxeEGz3ToI
KYXdE/Ib57HPJBr2qI4GJd2pgGwgommB1D6jIxPMbLoS0T++LKnRsbcP3yQgYcMF
FR3Bpq35CaGl6EF6alC2Frvs6reZv/6bf7hwB3tJkL5d2Ty8Ij6AbMRcmq+5Fpoz
q/xMnymbjpjt5x2jLycgOrchQ25Sdo+egEEwNtGWYgEYtx8AqfW9790/LqurZwFw
orq5zw4ZzDlt4LI2vbJm6j0aJS7J4zWSuF3d9OhCCZwiHRj/kVOVb9Fs/pA/AZVp
KI0qdV6tvB4G8z+EaOgUHC25wDRsuyUJUleWxAMn+QC899YrLZbKjgJ4MQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKgNeYiDtiYgDHdMtlPHN6Cr6tJxMB8GA1UdIwQY
MBaAFChBJirNYskOaAgab3dzdd8sNxPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMzIyNzYtMjVkYy00YzMwLThhN2It
OTVhMzNlMTJhM2FkLzEvcUExNWlJTzJKaUFNZDB5MlU4YzNvS3ZxMG5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMzIyNzYtMjVkYy00YzMwLThhN2ItOTVhMzNlMTJhM2Fk
LzEvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQGT60AMA0E
AgACMAcDBQMqAvdAMA0GCSqGSIb3DQEBCwUAA4IBAQCFbbtya5yVqRLUg9zt9hqC
qMOy04yE/PluwRl+bWm0ZWs7dQl0soOrRhX9jxM3dj4VjxG/6BqBlIIa4zbqbpYT
O1gEf0+tLix6APVz6SPBgkp+wKIFaNeAVP8tQt0bu3zsDDnUCURc1j6srWf4cZjP
DY1t7C1qednaGVQEUgEedfLHMIAjcUkS9kOur8bnkc/zn/8F0HTW1f+o0D1YyeAR
o1SxeRvZl37qH/xPIPP8na9nVErZB/5thZa9GkHGRnvDjEJ1O5oiUyIz1Lz/iBXd
Cba5ppFjuagMCjwPypE5DnaBWSxVrh0h6zfWtmdUSUcJS0UeXtaK4XFZ9t2TjXFM
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:28 2025 by rpki-client