Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/9sOD2wFS0Z0MWFg1A4DVOWK11GQ.roa
File: 9sOD2wFS0Z0MWFg1A4DVOWK11GQ.roa (raw, json)
Hash identifier: Odp7uCTqBFwx0U9zkbr3SPeKq6ltDth+1uLHuEb0ztg=
Subject key identifier: F6:C3:83:DB:01:52:D1:9D:0C:58:58:35:03:80:D5:39:62:B5:D4:64
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 01CB2059
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/9sOD2wFS0Z0MWFg1A4DVOWK11GQ.roa
Signing time: Sat 01 Jan 2022 15:57:34 +0000
ROA not before: Sat 01 Jan 2022 15:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35062
IP address blocks: 2a02:8205:480b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30089305 (0x1cb2059)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Jan 1 15:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6c383db0152d19d0c5858350380d53962b5d464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:f8:cc:20:13:70:89:d8:6e:0d:1f:e0:88:
1d:f6:40:18:d6:3a:4f:6c:f9:48:67:a8:2a:ff:07:
4c:40:2b:da:92:a9:a8:11:58:8b:f0:98:1b:b7:7a:
fd:33:28:d9:9a:47:31:d2:4b:d1:92:2d:97:3e:23:
dc:a5:8b:37:27:59:df:f5:58:20:2a:5c:fd:e6:49:
d4:5a:aa:15:46:a4:e8:e1:0a:d0:9b:2e:f5:0b:ad:
d5:9a:04:58:aa:09:be:94:b2:2a:fd:b3:31:35:c1:
2b:c0:38:82:fa:38:f7:d2:17:44:db:59:ad:b1:b8:
7e:4c:97:ef:7d:d9:e3:10:ee:9a:66:d3:99:a2:5f:
73:8f:6e:e7:07:93:82:cb:0c:f2:e2:03:d1:eb:81:
56:f7:72:63:a8:76:32:e0:35:f8:41:4f:63:96:44:
a5:a6:da:bc:2d:cf:2e:03:d4:bb:8c:12:6c:ed:e1:
7d:59:f1:49:0a:0d:8c:8e:fd:54:26:e7:de:5a:44:
f4:17:61:df:40:12:58:ab:e7:b1:27:2f:d4:d4:65:
44:44:4a:08:fc:fa:3a:83:ff:79:52:ca:18:4b:9f:
7b:3a:9a:4f:7b:ba:23:75:92:57:91:84:84:7e:d1:
a1:8e:d0:87:7e:5f:dc:f8:b9:4d:b4:c4:09:21:26:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C3:83:DB:01:52:D1:9D:0C:58:58:35:03:80:D5:39:62:B5:D4:64
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/9sOD2wFS0Z0MWFg1A4DVOWK11GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:8205:480b::/48
Signature Algorithm: sha256WithRSAEncryption
6b:60:5a:d2:43:5c:16:fa:e0:47:d7:0b:35:98:9d:c1:2f:2d:
07:f2:c6:fc:90:c0:e6:98:c6:5b:f4:db:5c:2b:7c:85:55:b3:
c2:51:72:5d:35:eb:7d:f3:1e:45:28:27:71:56:d4:81:f6:74:
58:49:98:d8:4a:39:79:f7:08:d5:02:c3:2e:2e:2e:46:63:19:
c5:15:4c:3c:4e:5a:56:71:bc:45:17:0f:0d:27:7c:08:63:ab:
e7:5c:ca:59:38:d4:f7:c8:d0:a5:ad:e0:29:18:9b:f2:6e:3b:
6e:50:38:fe:b7:ec:89:6f:3f:c2:9c:70:36:1d:18:38:80:56:
8d:54:5e:59:68:ea:b2:f7:49:86:d7:ed:ae:ed:71:07:1e:74:
47:c1:e7:0d:75:0c:a0:c6:8e:83:eb:da:c0:9e:07:ac:1e:06:
62:bf:ca:de:a9:5e:f7:c1:f0:93:4e:69:50:96:45:6d:15:8b:
94:c6:3f:87:15:f3:3d:25:c9:3f:3d:df:68:5b:3d:b7:04:39:
c3:4f:9b:fb:2d:d3:11:5b:85:28:2c:d6:74:e4:f4:3d:d9:d0:
28:e3:c4:0f:4c:03:02:0a:a3:9f:35:a6:bc:2f:68:79:84:2f:
59:c6:00:f9:a2:97:ed:27:18:3d:8b:49:b6:b0:1f:26:aa:3c:
8e:00:ef:32
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEAcsgWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MTU1ZGFkZGI4NzFiOWQ2YTUzY2Q2YjQ3Zjc3NjI1MDgzN2Y3Nzc0MB4XDTIyMDEw
MTE1NTczNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjZjMzgzZGIwMTUy
ZDE5ZDBjNTg1ODM1MDM4MGQ1Mzk2MmI1ZDQ2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJpv+MwgE3CJ2G4NH+CIHfZAGNY6T2z5SGeoKv8HTEAr2pKp
qBFYi/CYG7d6/TMo2ZpHMdJL0ZItlz4j3KWLNydZ3/VYICpc/eZJ1FqqFUak6OEK
0Jsu9Qut1ZoEWKoJvpSyKv2zMTXBK8A4gvo499IXRNtZrbG4fkyX733Z4xDummbT
maJfc49u5weTgssM8uID0euBVvdyY6h2MuA1+EFPY5ZEpabavC3PLgPUu4wSbO3h
fVnxSQoNjI79VCbn3lpE9Bdh30ASWKvnsScv1NRlRERKCPz6OoP/eVLKGEufezqa
T3u6I3WSV5GEhH7RoY7Qh35f3Pi5TbTECSEmkRkCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBT2w4PbAVLRnQxYWDUDgNU5YrXUZDAfBgNVHSMEGDAWgBSxVdrduHG51qU8
1rR/d2JQg393dDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NWWGEzYmh4dWRhbFBOYTBmM2RpVUlOX2QzUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGUvOGZkNmU3LTQ5NmYtNDdjZi04MGZiLTU0NjhiMmNmMGE3Ny8x
LzlzT0Qyd0ZTMFowTVdGZzFBNERWT1dLMTFHUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUv
OGZkNmU3LTQ5NmYtNDdjZi04MGZiLTU0NjhiMmNmMGE3Ny8xL3NWWGEzYmh4dWRh
bFBOYTBmM2RpVUlOX2QzUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoCggVICzANBgkqhkiG9w0BAQsF
AAOCAQEAa2Ba0kNcFvrgR9cLNZidwS8tB/LG/JDA5pjGW/TbXCt8hVWzwlFyXTXr
ffMeRSgncVbUgfZ0WEmY2Eo5efcI1QLDLi4uRmMZxRVMPE5aVnG8RRcPDSd8CGOr
51zKWTjU98jQpa3gKRib8m47blA4/rfsiW8/wpxwNh0YOIBWjVReWWjqsvdJhtft
ru1xBx50R8HnDXUMoMaOg+vawJ4HrB4GYr/K3qle98Hwk05pUJZFbRWLlMY/hxXz
PSXJPz3faFs9twQ5w0+b+y3TEVuFKCzWdOT0PdnQKOPED0wDAgqjnzWmvC9oeYQv
WcYA+aKX7ScYPYtJtrAfJqo8jgDvMg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:58 2025 by rpki-client