Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/dUUbI7BcIR__y8C_ynCU-H1iFZ8.roa
File: dUUbI7BcIR__y8C_ynCU-H1iFZ8.roa (raw, json)
Hash identifier: mpxurROd61cIblfYtLE5MZyGrWrO//ZlaQBJ9pRRAqQ=
Subject key identifier: 75:45:1B:23:B0:5C:21:1F:FF:CB:C0:BF:CA:70:94:F8:7D:62:15:9F
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 0935787F
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/dUUbI7BcIR__y8C_ynCU-H1iFZ8.roa
Signing time: Sat 01 Jan 2022 12:58:51 +0000
ROA not before: Sat 01 Jan 2022 12:58:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42116
IP address blocks: 2a02:2698:4400::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154499199 (0x935787f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75451b23b05c211fffcbc0bfca7094f87d62159f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:25:51:be:ad:86:92:c7:8d:57:dd:13:ad:
cc:9a:64:ec:44:46:7c:95:94:31:34:3e:e8:fa:12:
e6:a0:8e:67:20:9e:dc:e0:c0:19:ea:fc:24:98:48:
7f:c9:aa:cb:e5:ed:aa:e0:56:5a:6e:49:f9:3c:00:
fa:01:47:b7:12:50:42:03:96:ac:ad:e0:ce:d3:87:
9e:16:67:c7:ba:03:ef:d4:99:5a:1e:f1:52:3b:a6:
1a:64:9a:f8:3a:f5:34:39:bb:0f:99:af:61:6d:3c:
9f:bd:ca:dd:1b:08:36:2c:6f:db:bb:f3:cf:48:31:
49:12:a9:3c:6c:16:16:d6:17:31:8e:f1:78:08:23:
04:5c:7c:6b:75:1e:7b:c9:cb:5f:63:7e:de:b0:26:
69:5e:40:12:f0:c1:ce:12:40:59:f9:d2:f0:a0:9f:
52:0c:af:07:73:86:bb:27:4d:67:0b:63:f7:80:fc:
df:9b:df:e7:24:4e:ea:9c:17:f5:a1:72:c7:7f:f4:
fe:11:21:62:aa:47:40:be:cf:b4:29:fb:71:95:55:
be:75:9e:f6:84:09:f4:92:8a:9b:56:a7:56:f2:f3:
17:24:51:fc:1b:dd:63:4d:c9:a4:72:45:66:d7:8d:
ff:bb:e4:81:5b:17:55:cd:e1:93:fd:f7:8a:14:bb:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:45:1B:23:B0:5C:21:1F:FF:CB:C0:BF:CA:70:94:F8:7D:62:15:9F
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/dUUbI7BcIR__y8C_ynCU-H1iFZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:4400::/38
Signature Algorithm: sha256WithRSAEncryption
95:e8:38:79:e5:ec:26:60:a9:fa:f2:c7:c0:cb:b9:fe:88:9f:
92:7c:9d:1e:36:51:7c:9d:27:e7:85:8f:b4:75:8e:ce:d4:25:
98:59:9a:81:e8:6c:ab:7c:86:1f:ee:9a:eb:e9:35:a7:b3:06:
9f:93:be:a6:b2:ba:24:5d:f6:41:d6:79:5b:ca:4d:ca:a3:05:
af:ca:27:c6:72:0d:44:19:23:9d:ec:a3:ec:02:fa:a3:54:a5:
49:9b:82:0e:04:a4:dd:80:f3:76:83:e9:e1:90:2d:0a:56:5b:
d0:cc:b0:ee:41:44:b2:f0:16:fe:54:f2:ed:56:81:c4:2c:a2:
04:d2:95:21:47:b2:08:41:56:6e:f4:fc:52:fa:84:5b:14:9a:
cb:9f:2c:64:82:83:0e:8e:c2:bd:eb:4b:1b:16:85:e4:ac:91:
81:a0:b4:8b:64:ec:19:d4:58:f4:6a:55:2c:de:c6:d4:e9:25:
97:a3:94:54:aa:eb:01:6a:39:f2:6c:bf:de:ca:df:cc:7b:dc:
3b:06:a9:d5:1d:b0:fa:b3:e4:85:75:a4:e3:31:2e:94:c8:53:
82:39:4d:83:37:91:76:c7:a5:39:ac:54:00:ef:2a:50:e9:e9:
9c:0d:18:66:60:05:fc:46:7c:83:d7:ca:cf:31:03:93:99:52:
fa:1b:2f:a9
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIECTV4fzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ODAyYjk1Y2U2MjM5ZDUyNmMzNWFlN2E4ZTJjZWI0OGFlYjgyYjVmMB4XDTIyMDEw
MTEyNTg1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzU0NTFiMjNiMDVj
MjExZmZmY2JjMGJmY2E3MDk0Zjg3ZDYyMTU5ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL3qJVG+rYaSx41X3ROtzJpk7ERGfJWUMTQ+6PoS5qCOZyCe
3ODAGer8JJhIf8mqy+XtquBWWm5J+TwA+gFHtxJQQgOWrK3gztOHnhZnx7oD79SZ
Wh7xUjumGmSa+Dr1NDm7D5mvYW08n73K3RsINixv27vzz0gxSRKpPGwWFtYXMY7x
eAgjBFx8a3Uee8nLX2N+3rAmaV5AEvDBzhJAWfnS8KCfUgyvB3OGuydNZwtj94D8
35vf5yRO6pwX9aFyx3/0/hEhYqpHQL7PtCn7cZVVvnWe9oQJ9JKKm1anVvLzFyRR
/BvdY03JpHJFZteN/7vkgVsXVc3hk/33ihS7lPMCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBR1RRsjsFwhH//LwL/KcJT4fWIVnzAfBgNVHSMEGDAWgBQIArlc5iOdUmw1
rnqOLOtIrrgrXzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NBSzVYT1lqblZKc05hNTZqaXpyU0s2NEsxOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTQvMTBlOTY1LTc0MDktNDRkOC05NTAyLWNmMGFhM2VjYWQyOC8x
L2RVVWJJN0JjSVJfX3k4Q195bkNVLUgxaUZaOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQv
MTBlOTY1LTc0MDktNDRkOC05NTAyLWNmMGFhM2VjYWQyOC8xL0NBSzVYT1lqblZK
c05hNTZqaXpyU0s2NEsxOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAioCJphEMA0GCSqGSIb3DQEBCwUA
A4IBAQCV6Dh55ewmYKn68sfAy7n+iJ+SfJ0eNlF8nSfnhY+0dY7O1CWYWZqB6Gyr
fIYf7prr6TWnswafk76msrokXfZB1nlbyk3KowWvyifGcg1EGSOd7KPsAvqjVKVJ
m4IOBKTdgPN2g+nhkC0KVlvQzLDuQUSy8Bb+VPLtVoHELKIE0pUhR7IIQVZu9PxS
+oRbFJrLnyxkgoMOjsK960sbFoXkrJGBoLSLZOwZ1Fj0alUs3sbU6SWXo5RUqusB
ajnybL/eyt/Me9w7BqnVHbD6s+SFdaTjMS6UyFOCOU2DN5F2x6U5rFQA7ypQ6emc
DRhmYAX8RnyD18rPMQOTmVL6Gy+p
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:59 2025 by rpki-client