Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/dx8DibQMfiIXa_qMQRyNE7JzaTo.roa
File: dx8DibQMfiIXa_qMQRyNE7JzaTo.roa (raw, json)
Hash identifier: peGqM6HHdIy8yjzVW2AxB0Vxl0ifSA2c7HxZ1myKuKo=
Subject key identifier: 77:1F:03:89:B4:0C:7E:22:17:6B:FA:8C:41:1C:8D:13:B2:73:69:3A
Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial: 0185718C36A3917EF50073ACF89CDD0F476B
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/dx8DibQMfiIXa_qMQRyNE7JzaTo.roa
Signing time: Mon 02 Jan 2023 08:14:52 +0000
ROA not before: Mon 02 Jan 2023 08:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201612
IP address blocks: 2001:678:24::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:36:a3:91:7e:f5:00:73:ac:f8:9c:dd:0f:47:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Validity
Not Before: Jan 2 08:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=771f0389b40c7e22176bfa8c411c8d13b273693a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:e0:8b:b6:b5:82:55:ff:8e:ba:77:db:44:
7e:30:d0:7a:ef:d3:7e:57:0f:04:07:cd:c4:2e:ed:
10:29:6f:41:b7:aa:77:40:06:92:b8:b7:e3:48:28:
fe:88:97:d8:01:81:9b:1b:d4:6a:25:b9:ae:17:19:
9a:ee:2f:8a:13:79:1c:49:10:ba:50:de:c7:e9:66:
33:66:de:07:41:10:0e:db:cf:2b:3d:f9:74:1b:aa:
02:dd:b1:84:05:87:34:90:e6:69:7f:6a:f6:2b:21:
c3:40:3d:8c:9e:a0:f2:4c:48:48:32:52:f1:9a:3f:
23:31:17:d2:1d:c1:dc:5f:61:52:8a:81:c1:9b:5c:
fd:1d:8a:77:ca:f9:f1:b0:c2:e9:1f:a6:dd:58:1b:
0b:b3:6e:e5:b0:59:25:54:92:a4:79:18:81:ff:be:
d3:ea:b4:8d:e9:99:10:30:e8:1b:f2:92:b7:bb:85:
a0:71:73:2d:4f:da:49:96:2f:1a:7c:9e:d2:0c:5a:
1f:67:80:69:17:c5:fc:be:50:0d:76:7a:4e:9f:87:
e8:5e:ef:ba:c0:95:0d:8d:7a:1e:a2:36:b4:2c:4b:
61:61:f7:bc:d9:40:93:1a:d2:ce:79:17:b5:d6:2a:
95:fc:20:40:84:19:e9:21:d5:30:62:4f:dc:44:ed:
9e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1F:03:89:B4:0C:7E:22:17:6B:FA:8C:41:1C:8D:13:B2:73:69:3A
X509v3 Authority Key Identifier:
keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/dx8DibQMfiIXa_qMQRyNE7JzaTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:24::/48
Signature Algorithm: sha256WithRSAEncryption
45:47:3e:da:19:7b:10:75:2a:73:e9:54:e9:db:92:7c:2c:ef:
74:f3:a1:1c:17:df:57:50:06:49:ee:22:d8:1b:45:bd:f4:85:
8f:b9:38:98:25:99:3a:6e:1c:84:89:3b:26:4b:ef:4e:1f:48:
63:5b:05:7b:ef:0a:c2:7b:08:a7:12:59:69:74:9d:37:f6:b1:
30:25:92:b8:07:50:90:2a:8c:a1:88:8a:6a:7c:7d:63:69:c7:
76:aa:60:0d:bb:51:d4:50:93:b7:b3:df:18:2c:08:f0:a5:94:
0c:0a:b0:56:77:cd:ed:cf:0d:04:b1:54:b4:fe:b3:fc:d1:97:
70:39:c3:71:e5:e9:69:5d:64:2f:19:f2:3f:32:8d:c8:19:6b:
e7:19:01:e9:a0:f8:2b:12:10:d3:08:94:d4:3b:9c:df:39:e7:
91:2f:f5:d9:2a:ec:e6:c1:a6:d8:e2:73:e2:ae:87:15:af:01:
ae:76:3d:8b:3c:43:0b:b8:5d:b9:b9:52:d7:09:68:83:ac:0f:
2c:6b:52:2a:87:f7:2e:13:76:bd:22:a8:9e:05:d2:8f:2b:a8:
4a:b9:91:e0:33:be:60:d8:78:97:48:1a:79:c5:63:84:4b:12:
53:d6:d1:61:f2:f7:af:c7:d0:75:39:18:79:be:cd:a0:26:c5:
c2:74:b0:08
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxjDajkX71AHOs+JzdD0drMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMzkwYmZmNjVkY2VkY2E4MTNkN2ExMGQ3ZWMzMjhjMmY2
ZWFjMzQwHhcNMjMwMTAyMDgxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzFmMDM4OWI0MGM3ZTIyMTc2YmZhOGM0MTFjOGQxM2IyNzM2OTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorngi7a1glX/jrp320R+MNB679N+
Vw8EB83ELu0QKW9Bt6p3QAaSuLfjSCj+iJfYAYGbG9RqJbmuFxma7i+KE3kcSRC6
UN7H6WYzZt4HQRAO288rPfl0G6oC3bGEBYc0kOZpf2r2KyHDQD2MnqDyTEhIMlLx
mj8jMRfSHcHcX2FSioHBm1z9HYp3yvnxsMLpH6bdWBsLs27lsFklVJKkeRiB/77T
6rSN6ZkQMOgb8pK3u4WgcXMtT9pJli8afJ7SDFofZ4BpF8X8vlANdnpOn4foXu+6
wJUNjXoeoja0LEthYfe82UCTGtLOeRe11iqV/CBAhBnpIdUwYk/cRO2erQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHcfA4m0DH4iF2v6jEEcjROyc2k6MB8GA1UdIwQY
MBaAFBw5C/9l3O3KgT16ENfsMowvbqw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTIt
YTk3NjVlZGM3OTVjLzEvZHg4RGliUU1maUlYYV9xTVFSeU5FN0p6YVRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTItYTk3NjVlZGM3OTVj
LzEvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAAk
MA0GCSqGSIb3DQEBCwUAA4IBAQBFRz7aGXsQdSpz6VTp25J8LO9086EcF99XUAZJ
7iLYG0W99IWPuTiYJZk6bhyEiTsmS+9OH0hjWwV77wrCewinEllpdJ039rEwJZK4
B1CQKoyhiIpqfH1jacd2qmANu1HUUJO3s98YLAjwpZQMCrBWd83tzw0EsVS0/rP8
0ZdwOcNx5elpXWQvGfI/Mo3IGWvnGQHpoPgrEhDTCJTUO5zfOeeRL/XZKuzmwabY
4nPirocVrwGudj2LPEMLuF25uVLXCWiDrA8sa1Iqh/cuE3a9IqieBdKPK6hKuZHg
M75g2HiXSBp5xWOESxJT1tFh8vevx9B1ORh5vs2gJsXCdLAI
-----END CERTIFICATE-----
Generated at Fri Apr 18 15:02:58 2025 by rpki-client