Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/bG47aPH2Xj9LGzKJ61coXOxarew.roa
File: bG47aPH2Xj9LGzKJ61coXOxarew.roa (raw, json)
Hash identifier: SDlmDVLMHPUOX5XMrceoXV3Q9S/+D+gM6mPFFu1i064=
Subject key identifier: 6C:6E:3B:68:F1:F6:5E:3F:4B:1B:32:89:EB:57:28:5C:EC:5A:AD:EC
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 075D649D
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/bG47aPH2Xj9LGzKJ61coXOxarew.roa
Signing time: Sat 01 Jan 2022 04:57:18 +0000
ROA not before: Sat 01 Jan 2022 04:57:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211603
IP address blocks: 2a0f:6580:105::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123561117 (0x75d649d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 04:57:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c6e3b68f1f65e3f4b1b3289eb57285cec5aadec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:0b:53:b5:3e:e6:0d:de:5b:7c:51:d9:af:
d0:33:3c:32:df:32:5c:81:e1:12:d0:32:b9:3d:cc:
68:c2:19:a3:9f:76:e2:6e:50:ae:4d:65:fb:2a:da:
98:60:e7:37:94:84:fb:3c:e5:d2:e2:8b:4d:ab:8d:
44:a9:52:08:c2:0f:95:61:e3:4b:80:d9:52:9f:ba:
44:21:28:bd:d5:a7:27:ef:53:a7:01:95:b9:2f:34:
4c:b9:85:e8:95:8c:40:3b:ac:9c:df:f1:f4:d8:b9:
69:f4:10:f3:a8:94:4b:bb:a7:ba:29:0e:ae:70:30:
3a:fe:3b:da:35:a6:96:e1:03:2c:e6:9b:bb:f8:2b:
a3:e0:4a:18:59:13:d6:0e:03:23:73:01:78:ec:f2:
6a:b6:1e:8a:b5:2f:ba:e2:51:00:0b:43:32:2b:25:
9f:1e:7b:92:f2:f5:7f:ab:c2:2a:82:94:f8:e5:a9:
e5:16:c8:b9:5b:24:91:29:84:50:aa:d4:05:ee:0d:
cf:1f:34:97:ff:e6:9e:4a:c0:47:ca:76:4e:09:e8:
75:64:e0:5c:cb:d5:d7:4e:b6:5a:20:96:53:89:ff:
04:81:6e:88:0e:ff:ac:e0:5f:6f:d6:1f:d1:a0:ed:
ad:6a:ef:2f:12:8e:01:df:7d:7c:cf:ea:42:f7:e4:
7d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6E:3B:68:F1:F6:5E:3F:4B:1B:32:89:EB:57:28:5C:EC:5A:AD:EC
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/bG47aPH2Xj9LGzKJ61coXOxarew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:105::/48
Signature Algorithm: sha256WithRSAEncryption
5d:37:e9:d8:5d:d1:d0:b2:39:69:1a:79:f2:5f:a3:d1:5f:d8:
3c:0b:41:db:32:bd:03:e4:64:43:1d:37:7b:1c:16:6f:06:e8:
b9:9a:cb:2f:cd:17:cf:22:46:a3:93:da:5d:61:a5:37:e4:f8:
a6:44:12:8a:a7:25:37:98:4e:7c:c3:b3:2f:ed:78:51:a4:27:
5a:99:8c:f9:b0:68:cd:93:46:30:38:29:33:b0:07:9c:7e:52:
73:c1:5d:19:c9:76:4e:77:01:72:08:64:d3:ac:f5:5a:b9:63:
5b:6c:d9:30:cc:af:ac:af:b6:8c:d6:29:9a:0a:60:a7:e6:c2:
84:6d:60:91:7b:a1:37:01:6d:c0:95:1d:28:b9:fd:14:20:9a:
0f:57:f2:c0:9d:1f:1b:b1:37:70:75:de:91:43:fa:14:f2:31:
8a:0b:3e:73:1a:48:b6:a2:a9:b0:1a:3b:96:d6:70:e8:7b:2a:
b0:2f:c8:67:ec:a1:4c:80:61:c2:4d:58:7a:0e:f8:e6:a7:98:
63:3d:da:db:5c:1f:54:c3:79:e2:93:4e:1a:09:3c:84:f4:96:
79:26:96:12:34:23:17:ab:b1:f5:47:5d:b7:85:9b:fd:d7:88:
9b:72:87:58:bb:4b:4c:95:fb:ca:1f:34:1d:ad:7a:60:ad:33:
54:42:62:d7
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEB11knTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YTBiMDVmNDBhNjkxNjM5NDc4MjMwMmQxYjU2NjA3MzcyNTdhNDhiMB4XDTIyMDEw
MTA0NTcxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmM2ZTNiNjhmMWY2
NWUzZjRiMWIzMjg5ZWI1NzI4NWNlYzVhYWRlYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMumC1O1PuYN3lt8Udmv0DM8Mt8yXIHhEtAyuT3MaMIZo592
4m5Qrk1l+yramGDnN5SE+zzl0uKLTauNRKlSCMIPlWHjS4DZUp+6RCEovdWnJ+9T
pwGVuS80TLmF6JWMQDusnN/x9Ni5afQQ86iUS7unuikOrnAwOv472jWmluEDLOab
u/gro+BKGFkT1g4DI3MBeOzyarYeirUvuuJRAAtDMislnx57kvL1f6vCKoKU+OWp
5RbIuVskkSmEUKrUBe4Nzx80l//mnkrAR8p2TgnodWTgXMvV1062WiCWU4n/BIFu
iA7/rOBfb9Yf0aDtrWrvLxKOAd99fM/qQvfkfZ8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRsbjto8fZeP0sbMonrVyhc7Fqt7DAfBgNVHSMEGDAWgBQ6CwX0CmkWOUeC
MC0bVmBzclekizAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09nc0Y5QXBwRmpsSGdqQXRHMVpnYzNKWHBJcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGQvNzU4M2NiLWQzMWUtNGUwMy1iMTRiLWIyMGUyOGY1MTg4Zi8x
L2JHNDdhUEgyWGo5TEd6S0o2MWNvWE94YXJldy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQv
NzU4M2NiLWQzMWUtNGUwMy1iMTRiLWIyMGUyOGY1MTg4Zi8xL09nc0Y5QXBwRmps
SGdqQXRHMVpnYzNKWHBJcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPZYABBTANBgkqhkiG9w0BAQsF
AAOCAQEAXTfp2F3R0LI5aRp58l+j0V/YPAtB2zK9A+RkQx03exwWbwbouZrLL80X
zyJGo5PaXWGlN+T4pkQSiqclN5hOfMOzL+14UaQnWpmM+bBozZNGMDgpM7AHnH5S
c8FdGcl2TncBcghk06z1WrljW2zZMMyvrK+2jNYpmgpgp+bChG1gkXuhNwFtwJUd
KLn9FCCaD1fywJ0fG7E3cHXekUP6FPIxigs+cxpItqKpsBo7ltZw6HsqsC/IZ+yh
TIBhwk1Yeg745qeYYz3a21wfVMN54pNOGgk8hPSWeSaWEjQjF6ux9Uddt4Wb/deI
m3KHWLtLTJX7yh80Ha16YK0zVEJi1w==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:24 2025 by rpki-client