Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/0w3xxw9l0s3T5fffN1o5n2QJ-7g.roa
File: 0w3xxw9l0s3T5fffN1o5n2QJ-7g.roa (raw, json)
Hash identifier: uLFSfYJeKXEtGyJLn2IZhCULldJ6xdoRFucY4H3cnZg=
Subject key identifier: D3:0D:F1:C7:0F:65:D2:CD:D3:E5:F7:DF:37:5A:39:9F:64:09:FB:B8
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E7C6F68AB1EE7F2B90EFC7EDC98D0
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/0w3xxw9l0s3T5fffN1o5n2QJ-7g.roa
Signing time: Mon 02 Jan 2023 06:15:01 +0000
ROA not before: Mon 02 Jan 2023 06:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210821
IP address blocks: 2a0c:b641:250::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:7c:6f:68:ab:1e:e7:f2:b9:0e:fc:7e:dc:98:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d30df1c70f65d2cdd3e5f7df375a399f6409fbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:64:b3:1a:9f:ee:60:ef:5b:1f:ff:76:3d:dd:
cc:2a:29:4d:96:48:3c:2c:df:c8:57:60:c5:8c:57:
e9:bd:bf:b8:4c:75:52:5d:86:87:8c:0b:1d:b7:ee:
5c:0d:5f:82:d0:df:8c:1b:5d:6b:10:1e:90:42:ea:
a1:b0:c6:dd:00:a7:41:5e:9c:de:60:8a:91:27:ec:
95:1a:72:d2:cc:5d:19:3e:34:84:44:43:dc:79:af:
c8:52:27:47:a7:66:a9:b4:64:40:5a:50:75:13:60:
4f:4a:b6:02:46:d3:22:23:1e:99:ce:d3:d7:64:d0:
df:4b:fc:9b:ca:14:73:8f:31:50:6e:2a:8e:5e:13:
9a:76:0d:1e:b2:20:de:da:a8:0b:e4:e3:38:25:a9:
04:5e:2a:7f:4b:1c:36:c7:34:60:91:ce:6d:ec:dc:
12:07:35:e4:63:3b:b8:d0:33:72:42:e1:64:0d:83:
19:77:aa:4b:3d:01:a2:25:2b:54:62:13:9d:9e:2a:
a0:bb:48:da:ef:8d:ec:3b:7a:a3:a9:62:0a:91:36:
ba:37:2b:d2:04:25:a5:39:bd:51:8f:07:b6:5e:7c:
80:58:dc:7d:dc:df:4a:56:26:e3:cc:09:cc:88:ba:
c8:f9:60:9b:65:f1:35:79:25:32:63:a9:2c:1a:ae:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0D:F1:C7:0F:65:D2:CD:D3:E5:F7:DF:37:5A:39:9F:64:09:FB:B8
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/0w3xxw9l0s3T5fffN1o5n2QJ-7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:250::/44
Signature Algorithm: sha256WithRSAEncryption
29:88:18:31:f9:7f:50:70:7e:71:9b:25:85:86:5f:40:c8:f8:
c4:04:3b:a2:11:fe:a5:12:2e:cc:56:42:8b:d0:7a:74:2c:49:
1b:3c:68:ab:41:22:00:f1:25:63:de:2a:3d:32:af:0c:c1:bd:
1b:2c:a6:cd:03:d2:00:6a:9f:c6:96:18:a2:5a:1b:0c:cb:96:
ce:7d:01:56:cd:40:4d:f1:39:ba:f4:98:c6:6a:bb:0d:63:a7:
a9:01:61:69:42:40:f5:07:a5:4c:a0:ee:b0:52:c3:09:c3:16:
bf:0f:fe:2f:07:03:92:67:3b:78:a8:f9:18:37:26:e6:57:f4:
c7:7f:e8:06:89:25:9e:e5:df:e1:b9:56:69:63:52:69:7a:33:
ea:30:de:7b:f8:f9:89:b2:d2:86:12:2d:9a:72:d0:71:84:d3:
9f:5b:4b:54:b4:e0:78:af:27:6a:09:40:b9:36:86:88:74:06:
af:05:8d:93:4e:fa:dc:4f:48:9f:be:c4:ca:c5:cc:a4:4f:aa:
3c:79:3f:06:42:57:e4:f4:2d:09:c6:bb:28:31:a9:af:1a:ce:
cb:87:32:2d:06:2c:9c:d6:e7:f5:ce:e5:d1:2e:eb:89:17:5b:
5a:62:0b:37:f5:97:26:de:4f:62:3c:a5:d9:52:b4:98:16:12:
3c:1d:c2:b3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxHnxvaKse5/K5Dvx+3JjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjMwMTAyMDYxNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzBkZjFjNzBmNjVkMmNkZDNlNWY3ZGYzNzVhMzk5ZjY0MDlmYmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGSzGp/uYO9bH/92Pd3MKilNlkg8
LN/IV2DFjFfpvb+4THVSXYaHjAsdt+5cDV+C0N+MG11rEB6QQuqhsMbdAKdBXpze
YIqRJ+yVGnLSzF0ZPjSEREPcea/IUidHp2aptGRAWlB1E2BPSrYCRtMiIx6ZztPX
ZNDfS/ybyhRzjzFQbiqOXhOadg0esiDe2qgL5OM4JakEXip/Sxw2xzRgkc5t7NwS
BzXkYzu40DNyQuFkDYMZd6pLPQGiJStUYhOdniqgu0ja743sO3qjqWIKkTa6NyvS
BCWlOb1Rjwe2XnyAWNx93N9KVibjzAnMiLrI+WCbZfE1eSUyY6ksGq57PQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNMN8ccPZdLN0+X33zdaOZ9kCfu4MB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvMHczeHh3OWwwczNUNWZmZk4xbzVuMlFKLTdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQJQ
MA0GCSqGSIb3DQEBCwUAA4IBAQApiBgx+X9QcH5xmyWFhl9AyPjEBDuiEf6lEi7M
VkKL0Hp0LEkbPGirQSIA8SVj3io9Mq8Mwb0bLKbNA9IAap/GlhiiWhsMy5bOfQFW
zUBN8Tm69JjGarsNY6epAWFpQkD1B6VMoO6wUsMJwxa/D/4vBwOSZzt4qPkYNybm
V/THf+gGiSWe5d/huVZpY1JpejPqMN57+PmJstKGEi2actBxhNOfW0tUtOB4rydq
CUC5NoaIdAavBY2TTvrcT0ifvsTKxcykT6o8eT8GQlfk9C0JxrsoMamvGs7LhzIt
Biyc1uf1zuXRLuuJF1taYgs39Zcm3k9iPKXZUrSYFhI8HcKz
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:38 2025 by rpki-client