Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/e6rZPBh7VOyCc_3xQVTqs7yttyU.roa
File: e6rZPBh7VOyCc_3xQVTqs7yttyU.roa (raw, json)
Hash identifier: m8o8tA1g08WP1GFOUuXLMdpnVN+1OZWIKpBnBy+R488=
Subject key identifier: 7B:AA:D9:3C:18:7B:54:EC:82:73:FD:F1:41:54:EA:B3:BC:AD:B7:25
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 08F1F96F
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/e6rZPBh7VOyCc_3xQVTqs7yttyU.roa
Signing time: Sat 01 Jan 2022 11:59:42 +0000
ROA not before: Sat 01 Jan 2022 11:59:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208328
IP address blocks: 2a0e:800:fff0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150075759 (0x8f1f96f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Jan 1 11:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7baad93c187b54ec8273fdf14154eab3bcadb725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:08:90:c0:7e:eb:96:6f:d6:d4:9e:7f:58:
4f:ec:8a:56:b7:5a:4e:af:8b:78:26:4c:18:b1:82:
8b:cf:d7:db:06:dd:55:df:33:ff:16:e8:9b:55:ce:
e1:6c:f0:8f:d7:b4:94:94:29:cd:b2:ea:10:e5:e7:
76:c5:b6:34:58:c0:13:e8:16:58:ff:2a:08:6a:9b:
df:f0:60:c9:22:4c:0d:ea:10:67:67:1b:35:6d:d4:
6c:de:65:c9:54:b9:52:78:11:da:84:1a:28:78:07:
ff:86:f5:86:ee:be:b9:a5:58:02:8e:17:11:f2:e5:
0e:cf:f9:9b:04:00:d4:82:6b:4d:58:ec:eb:5b:52:
6b:68:57:e3:8b:3a:8c:af:67:e4:de:ee:2b:fd:0b:
98:1c:0c:81:bb:c3:a9:87:10:7a:62:34:4c:6c:b8:
e6:54:29:8f:56:0e:d5:59:59:5c:85:32:8f:4d:16:
72:56:d6:96:ce:ec:8b:3a:c7:5a:ba:42:e0:2e:f7:
37:a9:b4:16:b8:89:e5:0e:3f:d8:ec:a3:f0:40:ed:
96:a0:9f:f9:f4:3a:5c:20:b9:a7:23:b6:59:aa:fa:
22:4a:60:40:4a:57:b3:bf:54:e7:63:07:8e:7c:79:
e3:72:71:72:26:ad:ca:93:b4:cc:75:47:69:f2:4b:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AA:D9:3C:18:7B:54:EC:82:73:FD:F1:41:54:EA:B3:BC:AD:B7:25
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/e6rZPBh7VOyCc_3xQVTqs7yttyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:800:fff0::/48
Signature Algorithm: sha256WithRSAEncryption
a1:88:57:76:67:33:60:ba:d4:98:0b:a5:cc:29:98:df:b4:cd:
49:5e:d2:da:2f:7e:5b:bb:a2:ce:02:0d:93:9b:21:b8:b9:e9:
67:67:9c:60:e7:68:0c:d9:12:c3:b1:6f:44:a3:47:77:db:09:
25:21:27:80:fb:5c:6c:66:40:c5:f9:13:fc:9f:00:6c:74:36:
0d:7e:cc:a9:40:33:67:8f:73:c0:dc:36:24:c2:93:b9:92:0e:
c0:9c:97:00:ab:d1:a9:3b:b5:14:6d:b6:43:f5:2f:fe:3a:fe:
8f:62:d8:a4:89:04:0d:6e:79:ab:0c:b8:7a:73:bb:98:ba:f1:
35:87:93:0b:a7:b9:ae:ac:9d:5c:0f:c5:42:3e:96:9d:b0:52:
f4:e9:ac:16:21:43:2e:3a:15:97:80:bd:72:cb:b4:71:70:1c:
bb:d9:ee:55:da:f7:cf:b7:7b:5a:cf:64:1d:fa:fa:47:4b:d8:
3a:00:d0:b0:17:2d:a6:9f:a3:8c:1e:6c:35:8f:cf:29:9a:c7:
28:b2:c2:bf:ab:54:83:0d:37:51:35:9c:2e:65:2a:eb:c6:18:
fb:cb:56:68:0e:fe:84:4f:82:19:01:08:4b:4d:96:d0:45:d4:
56:ae:ef:7b:22:67:ab:d1:34:03:6f:18:88:af:6a:e4:18:9f:
45:4b:0b:bb
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECPH5bzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MmNlNzU5MzIwMTk1YjljYzE4Y2NmY2IxYjUzMmFlYTk0OTI1OGYxMB4XDTIyMDEw
MTExNTk0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2JhYWQ5M2MxODdi
NTRlYzgyNzNmZGYxNDE1NGVhYjNiY2FkYjcyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALHqCJDAfuuWb9bUnn9YT+yKVrdaTq+LeCZMGLGCi8/X2wbd
Vd8z/xbom1XO4Wzwj9e0lJQpzbLqEOXndsW2NFjAE+gWWP8qCGqb3/BgySJMDeoQ
Z2cbNW3UbN5lyVS5UngR2oQaKHgH/4b1hu6+uaVYAo4XEfLlDs/5mwQA1IJrTVjs
61tSa2hX44s6jK9n5N7uK/0LmBwMgbvDqYcQemI0TGy45lQpj1YO1VlZXIUyj00W
clbWls7sizrHWrpC4C73N6m0FriJ5Q4/2Oyj8EDtlqCf+fQ6XCC5pyO2War6Ikpg
QEpXs79U52MHjnx543JxciatypO0zHVHafJLxG0CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBR7qtk8GHtU7IJz/fFBVOqzvK23JTAfBgNVHSMEGDAWgBRCznWTIBlbnMGM
z8sbUyrqlJJY8TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FzNTFreUFaVzV6QmpNX0xHMU1xNnBTU1dQRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvYTUyMDQ4LTEyY2EtNGEwMy05NWJlLTY5Nzk0OGVhNzFmNS8x
L2U2clpQQmg3Vk95Q2NfM3hRVlRxczd5dHR5VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
YTUyMDQ4LTEyY2EtNGEwMy05NWJlLTY5Nzk0OGVhNzFmNS8xL1FzNTFreUFaVzV6
QmpNX0xHMU1xNnBTU1dQRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoOCAD/8DANBgkqhkiG9w0BAQsF
AAOCAQEAoYhXdmczYLrUmAulzCmY37TNSV7S2i9+W7uizgINk5shuLnpZ2ecYOdo
DNkSw7FvRKNHd9sJJSEngPtcbGZAxfkT/J8AbHQ2DX7MqUAzZ49zwNw2JMKTuZIO
wJyXAKvRqTu1FG22Q/Uv/jr+j2LYpIkEDW55qwy4enO7mLrxNYeTC6e5rqydXA/F
Qj6WnbBS9OmsFiFDLjoVl4C9csu0cXAcu9nuVdr3z7d7Ws9kHfr6R0vYOgDQsBct
pp+jjB5sNY/PKZrHKLLCv6tUgw03UTWcLmUq68YY+8tWaA7+hE+CGQEIS02W0EXU
Vq7veyJnq9E0A28YiK9q5BifRUsLuw==
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:02:08 2025 by rpki-client