Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/oZpzjFRYrAOvGvv-7Mn2_9vkEDE.roa
File: oZpzjFRYrAOvGvv-7Mn2_9vkEDE.roa (raw, json)
Hash identifier: n9qwSVhdXJc47WjHwRbB7VTWmctouRhjYM+rrwZEgrc=
Subject key identifier: A1:9A:73:8C:54:58:AC:03:AF:1A:FB:FE:EC:C9:F6:FF:DB:E4:10:31
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 01856D819B2336921416F3C82D695DFEC619
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/oZpzjFRYrAOvGvv-7Mn2_9vkEDE.roa
Signing time: Sun 01 Jan 2023 13:24:48 +0000
ROA not before: Sun 01 Jan 2023 13:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200334
IP address blocks: 2a0f:6580:104::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:9b:23:36:92:14:16:f3:c8:2d:69:5d:fe:c6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 13:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a19a738c5458ac03af1afbfeecc9f6ffdbe41031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ed:05:8b:f7:5d:a3:7d:12:36:14:6d:cc:ab:
a6:fd:fc:c7:cc:34:b3:88:16:f9:4e:d6:2b:38:f1:
9f:25:93:1e:45:98:b2:6e:63:ca:70:00:9d:07:84:
d1:c0:4e:7f:cc:f4:25:3e:dd:27:77:ee:3a:c6:ae:
49:ce:95:6e:a2:ef:9c:50:95:c5:e3:72:8e:bd:88:
e0:4e:a5:36:55:90:0d:2b:7e:b4:ad:14:47:29:a4:
76:14:97:97:65:74:46:ef:6a:36:17:d0:52:ba:bd:
fb:62:87:fc:37:e3:16:a4:ef:9d:9b:9d:45:ce:fa:
0f:f3:cb:e8:b5:03:6f:b2:d7:07:c6:18:a8:55:94:
a8:16:4f:a3:d6:d7:4f:95:45:60:ab:77:97:93:57:
4c:57:6e:d9:c7:64:53:17:da:4f:ee:cd:2f:b4:70:
d5:b5:e4:67:3b:bd:40:e2:51:43:00:84:96:88:70:
48:33:38:ed:c5:19:67:0c:50:3b:da:99:d1:5d:f3:
f1:6d:64:b2:f9:99:37:94:dc:16:ab:cf:ef:18:33:
6d:7e:ba:e9:6d:78:9f:a8:92:71:bf:38:b4:1b:81:
46:7a:47:2a:d6:13:37:1e:cc:c9:98:7b:b7:6c:1a:
55:e2:07:70:52:b0:38:88:30:a0:8e:93:2c:16:a6:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9A:73:8C:54:58:AC:03:AF:1A:FB:FE:EC:C9:F6:FF:DB:E4:10:31
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/oZpzjFRYrAOvGvv-7Mn2_9vkEDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:104::/48
Signature Algorithm: sha256WithRSAEncryption
7c:cb:4e:ee:bd:13:8e:9e:79:02:32:25:b3:01:db:d5:a7:a6:
f4:5c:24:59:ad:15:f7:e1:e8:55:16:28:2f:d3:e4:71:3e:18:
09:4f:8b:46:f9:55:5b:4f:f6:9f:dd:a0:7e:8d:0e:da:45:67:
2d:b9:e5:75:78:80:7d:1d:52:0e:d7:c1:e2:a2:f5:f9:21:f2:
4b:0d:3a:22:1b:06:52:d4:ff:8b:26:ac:5d:dc:9c:95:7c:64:
b5:52:fe:e1:57:b6:c7:6b:89:84:a1:0d:e9:8f:0f:a1:07:11:
b3:8b:07:a3:55:6f:3c:0c:cb:28:75:2a:e1:91:a0:45:98:56:
ec:86:2a:ab:57:db:52:c2:d3:82:c0:48:ca:33:a6:a7:df:f6:
b3:6f:e8:50:2b:e4:89:01:db:a6:f2:14:14:41:57:25:4c:95:
77:c0:9f:ee:2e:0f:b4:13:6d:0a:3d:06:c6:53:2f:8d:71:f8:
24:c8:3c:11:06:31:e1:be:b9:ed:4f:af:c7:05:a0:77:e9:c5:
fe:ca:7b:e1:a7:bf:f7:92:56:6d:f6:1c:3d:d5:5c:bb:ea:24:
3a:b7:eb:f9:b0:71:b6:e5:7e:2e:d8:26:75:9a:5f:82:0b:7b:
ab:99:84:44:e4:0a:29:eb:ab:00:b3:46:3e:b4:8f:3e:14:8e:
47:da:6a:2f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVtgZsjNpIUFvPILWld/sYZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1
N2E0OGIwHhcNMjMwMTAxMTMyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTlhNzM4YzU0NThhYzAzYWYxYWZiZmVlY2M5ZjZmZmRiZTQxMDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+0Fi/ddo30SNhRtzKum/fzHzDSz
iBb5TtYrOPGfJZMeRZiybmPKcACdB4TRwE5/zPQlPt0nd+46xq5JzpVuou+cUJXF
43KOvYjgTqU2VZANK360rRRHKaR2FJeXZXRG72o2F9BSur37Yof8N+MWpO+dm51F
zvoP88votQNvstcHxhioVZSoFk+j1tdPlUVgq3eXk1dMV27Zx2RTF9pP7s0vtHDV
teRnO71A4lFDAISWiHBIMzjtxRlnDFA72pnRXfPxbWSy+Zk3lNwWq8/vGDNtfrrp
bXifqJJxvzi0G4FGekcq1hM3HszJmHu3bBpV4gdwUrA4iDCgjpMsFqb+mwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKGac4xUWKwDrxr7/uzJ9v/b5BAxMB8GA1UdIwQY
MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt
YjIwZTI4ZjUxODhmLzEvb1pwempGUllyQU92R3Z2LTdNbjJfOXZrRURFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm
LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9lgAEE
MA0GCSqGSIb3DQEBCwUAA4IBAQB8y07uvROOnnkCMiWzAdvVp6b0XCRZrRX34ehV
Figv0+RxPhgJT4tG+VVbT/af3aB+jQ7aRWctueV1eIB9HVIO18HiovX5IfJLDToi
GwZS1P+LJqxd3JyVfGS1Uv7hV7bHa4mEoQ3pjw+hBxGziwejVW88DMsodSrhkaBF
mFbshiqrV9tSwtOCwEjKM6an3/azb+hQK+SJAdum8hQUQVclTJV3wJ/uLg+0E20K
PQbGUy+NcfgkyDwRBjHhvrntT6/HBaB36cX+ynvhp7/3klZt9hw91Vy76iQ6t+v5
sHG25X4u2CZ1ml+CC3urmYRE5Aop66sAs0Y+tI8+FI5H2mov
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:40 2025 by rpki-client