Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/ZQERw-YIz8MKK2O07CbFYawV7vY.roa
File: ZQERw-YIz8MKK2O07CbFYawV7vY.roa (raw, json)
Hash identifier: horlqCqQjEqHjCJ8K08G+O2/1MvnOiAydyFUNgPMtuY=
Subject key identifier: 65:01:11:C3:E6:08:CF:C3:0A:2B:63:B4:EC:26:C5:61:AC:15:EE:F6
Certificate issuer: /CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25
Certificate serial: 01857067291F9CEFEC16CBD039F15E060A1F
Authority key identifier: 88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/ZQERw-YIz8MKK2O07CbFYawV7vY.roa
Signing time: Mon 02 Jan 2023 02:54:46 +0000
ROA not before: Mon 02 Jan 2023 02:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209431
IP address blocks: 2a06:a7c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:29:1f:9c:ef:ec:16:cb:d0:39:f1:5e:06:0a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25
Validity
Not Before: Jan 2 02:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=650111c3e608cfc30a2b63b4ec26c561ac15eef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:87:83:11:c7:b8:e2:31:8f:75:bf:0d:03:5d:
e4:23:9a:7f:31:e4:3a:4e:69:fb:34:88:9e:f4:4f:
20:6e:5a:0b:77:9a:3c:1d:48:78:2c:e9:e1:b3:0b:
e6:db:36:65:11:a4:b9:b7:53:73:fe:7f:64:5e:16:
0d:60:e5:ac:66:9e:73:05:fd:f4:4d:f4:20:57:8c:
aa:2e:7c:5b:23:57:1b:68:fa:31:f2:42:b8:e9:e1:
aa:6e:c3:c0:44:23:84:8b:aa:9a:67:10:12:ea:c3:
d5:7c:d3:dc:f1:87:24:4c:bc:58:e2:a6:2d:87:b8:
ca:01:72:1c:65:12:17:5f:6d:c0:57:10:5e:ab:5b:
a2:b4:d0:64:40:46:f0:a8:3d:1d:3b:c2:fe:69:13:
0b:d5:d9:cf:40:28:00:d9:f7:7b:ea:11:5c:fd:7c:
ee:54:03:b5:04:6e:6f:75:49:73:dd:ed:06:8f:77:
f1:84:b4:82:a7:5e:df:82:08:1d:6d:49:e9:7e:22:
a7:97:32:c5:92:5f:69:2f:d8:8b:71:07:56:31:4c:
cd:c5:85:e5:73:83:0e:44:51:55:eb:80:16:23:7e:
2d:2b:3d:cc:20:eb:6d:28:bf:9a:f5:09:0e:05:9f:
ca:a5:b9:b2:a7:61:c4:88:19:09:0b:e0:aa:aa:10:
6f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:01:11:C3:E6:08:CF:C3:0A:2B:63:B4:EC:26:C5:61:AC:15:EE:F6
X509v3 Authority Key Identifier:
keyid:88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/ZQERw-YIz8MKK2O07CbFYawV7vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a7c0::/29
Signature Algorithm: sha256WithRSAEncryption
3b:14:d1:d8:f0:c2:37:05:2e:d0:0c:36:85:ce:8a:d8:e4:ac:
9e:c4:df:68:45:19:ae:78:c0:fe:58:5f:fd:f9:36:2d:b2:ce:
42:e4:ec:f8:de:52:d1:2b:c2:18:39:bf:92:30:1c:d8:f3:0f:
73:e7:6c:53:60:1e:d9:ce:0f:17:49:52:ba:e6:80:03:22:04:
88:2d:5f:f3:3e:90:e5:f4:eb:83:23:b6:ae:94:aa:2e:72:b9:
a0:7d:7a:5b:02:79:5a:37:93:b7:b3:4e:c4:29:bc:c3:79:f1:
49:c2:0b:5e:08:5b:a2:72:34:23:74:27:6c:bf:5d:3e:cd:99:
8e:9c:4d:86:49:0b:c4:0f:fd:65:57:b6:1f:7a:6c:3d:2b:8a:
f8:7a:33:86:6d:9a:fd:c5:05:c1:13:3c:9b:47:ac:4d:8a:14:
f1:d5:72:66:a5:7d:ee:58:29:a6:e9:fa:3a:47:52:d7:71:f5:
bb:65:9f:e7:fb:62:43:be:16:6a:6e:49:cb:af:7d:93:96:9f:
68:c7:e6:1e:0e:13:be:8a:67:c2:db:12:e3:f8:af:8d:8d:66:
ae:57:5d:eb:64:a3:cc:40:8d:88:da:de:4b:83:9f:0f:e5:9c:
2e:b9:a8:e0:26:3a:4d:32:3c:05:73:7d:d7:ab:5c:f9:91:c3:
4e:ec:37:9d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVwZykfnO/sFsvQOfFeBgofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZWJhYTJmMTc2OWEzZGRmNjVmODczZGMzMWYzNTFlZjA3
OGFkMjUwHhcNMjMwMTAyMDI1NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTAxMTFjM2U2MDhjZmMzMGEyYjYzYjRlYzI2YzU2MWFjMTVlZWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oeDEce44jGPdb8NA13kI5p/MeQ6
Tmn7NIie9E8gbloLd5o8HUh4LOnhswvm2zZlEaS5t1Nz/n9kXhYNYOWsZp5zBf30
TfQgV4yqLnxbI1cbaPox8kK46eGqbsPARCOEi6qaZxAS6sPVfNPc8YckTLxY4qYt
h7jKAXIcZRIXX23AVxBeq1uitNBkQEbwqD0dO8L+aRML1dnPQCgA2fd76hFc/Xzu
VAO1BG5vdUlz3e0Gj3fxhLSCp17fgggdbUnpfiKnlzLFkl9pL9iLcQdWMUzNxYXl
c4MORFFV64AWI34tKz3MIOttKL+a9QkOBZ/Kpbmyp2HEiBkJC+CqqhBvFQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGUBEcPmCM/DCitjtOwmxWGsFe72MB8GA1UdIwQY
MBaAFIjrqi8XaaPd9l+HPcMfNR7weK0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU91cUx4ZHBvOTMyWDRjOXd4ODFIdkI0clNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmZjYzItNWRlZi00NGFhLTg3YzEt
MmJiZjQ2ODg0NTg1LzEvWlFFUnctWUl6OE1LSzJPMDdDYkZZYXdWN3ZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84YmZjYzItNWRlZi00NGFhLTg3YzEtMmJiZjQ2ODg0NTg1
LzEvaU91cUx4ZHBvOTMyWDRjOXd4ODFIdkI0clNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKganwDAN
BgkqhkiG9w0BAQsFAAOCAQEAOxTR2PDCNwUu0Aw2hc6K2OSsnsTfaEUZrnjA/lhf
/fk2LbLOQuTs+N5S0SvCGDm/kjAc2PMPc+dsU2Ae2c4PF0lSuuaAAyIEiC1f8z6Q
5fTrgyO2rpSqLnK5oH16WwJ5WjeTt7NOxCm8w3nxScILXghbonI0I3QnbL9dPs2Z
jpxNhkkLxA/9ZVe2H3psPSuK+Hozhm2a/cUFwRM8m0esTYoU8dVyZqV97lgppun6
OkdS13H1u2Wf5/tiQ74Wam5Jy699k5afaMfmHg4TvopnwtsS4/ivjY1mrldd62Sj
zECNiNreS4OfD+WcLrmo4CY6TTI8BXN916tc+ZHDTuw3nQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:35:30 2025 by rpki-client