Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/6Jr3Vtt-Lp4H6K2ztMZ-7uCmaVA.roa
File: 6Jr3Vtt-Lp4H6K2ztMZ-7uCmaVA.roa (raw, json)
Hash identifier: cao38CkqrvS995m7XPbNoNhtL06+n1OnGM+cY6wIvM8=
Subject key identifier: E8:9A:F7:56:DB:7E:2E:9E:07:E8:AD:B3:B4:C6:7E:EE:E0:A6:69:50
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E34445B2C7B4EE36ABCF72C26CB0B
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/6Jr3Vtt-Lp4H6K2ztMZ-7uCmaVA.roa
Signing time: Mon 02 Jan 2023 06:14:42 +0000
ROA not before: Mon 02 Jan 2023 06:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7489
IP address blocks: 2a0c:b642:1a07::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:34:44:5b:2c:7b:4e:e3:6a:bc:f7:2c:26:cb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e89af756db7e2e9e07e8adb3b4c67eeee0a66950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:99:b7:0a:50:34:b9:24:db:e8:33:1b:7b:
63:6a:1f:9f:c2:aa:02:fb:35:ea:ff:6b:31:ee:8d:
cd:7a:87:7b:e7:08:fd:53:d4:d2:36:b8:69:2d:ce:
ca:fb:c9:18:b0:c3:52:a7:67:c2:06:c1:f7:3c:f6:
82:2d:e1:9e:96:64:49:29:90:84:58:f0:48:2e:33:
4b:65:64:31:44:37:cf:81:4f:76:a8:5f:cc:dd:28:
81:8d:c5:91:96:ca:e0:55:e2:b7:67:5d:3e:c6:d4:
1c:9b:2b:22:79:41:d2:88:4c:32:29:87:ba:91:d4:
d7:48:b4:08:ea:71:0c:b7:c1:b2:15:d3:76:2c:eb:
f0:44:4a:6c:45:21:73:57:d3:ba:43:6e:1c:44:10:
1d:cc:a2:65:bd:b8:93:19:9b:e7:d0:7d:e0:ee:97:
67:15:f5:97:4a:7b:58:08:39:ea:07:9b:a8:73:2a:
80:27:04:43:6b:72:8a:f7:84:b8:69:ce:7d:db:c9:
d5:7b:60:39:2d:90:fb:b9:ee:4e:14:70:d9:0a:f9:
15:fb:2e:0a:b7:86:0f:d6:02:63:36:06:27:21:1b:
04:23:e7:5c:c4:18:ff:b6:2e:0f:8d:f1:ee:f4:1c:
38:64:a6:f8:30:ce:75:8d:b1:af:75:5b:51:a0:f0:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:F7:56:DB:7E:2E:9E:07:E8:AD:B3:B4:C6:7E:EE:E0:A6:69:50
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/6Jr3Vtt-Lp4H6K2ztMZ-7uCmaVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a07::/48
Signature Algorithm: sha256WithRSAEncryption
34:dc:74:bd:0b:45:8a:ea:72:6e:69:4a:54:fe:75:50:53:28:
89:96:14:fa:db:46:4d:e1:0d:f8:25:5e:83:f6:50:70:a1:13:
7a:7b:69:60:04:a1:72:9c:98:fd:b6:c8:99:01:06:ca:be:72:
cc:d8:54:30:28:0b:01:25:f7:01:a4:b3:16:a8:c2:de:3d:30:
b4:40:bd:ff:d7:44:a8:87:ed:d5:0e:19:46:f2:10:8d:2e:28:
7a:4f:31:ae:ba:5d:2a:c6:72:dc:cc:78:b8:be:3b:f5:c5:e6:
19:39:81:71:af:cd:10:db:11:c7:e2:de:5b:f6:36:f6:bc:da:
13:1d:cf:dd:75:3f:99:1f:94:f4:90:9a:41:d6:8f:5f:e1:18:
39:1c:b7:6c:00:f6:08:c3:b2:b0:44:d9:8f:f6:41:56:e4:ae:
7f:00:7d:d9:c5:61:f8:88:66:af:14:b6:c2:d2:20:0e:19:de:
50:5b:f9:b0:27:f2:92:c6:7c:1a:84:aa:8a:fd:39:fc:96:9d:
a0:65:96:f0:b0:b7:f2:f3:fc:bc:fb:55:2b:08:ee:ca:9a:04:
f7:a8:bb:c1:d7:66:1e:7d:23:b3:9c:56:82:e4:00:f0:4d:f8:
37:22:58:33:32:0d:99:e4:e3:fa:ae:35:0c:cd:a3:94:db:b0:
a7:fb:15:0a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxHjREWyx7TuNqvPcsJssLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjMwMTAyMDYxNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODlhZjc1NmRiN2UyZTllMDdlOGFkYjNiNGM2N2VlZWUwYTY2OTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrGZtwpQNLkk2+gzG3tjah+fwqoC
+zXq/2sx7o3Neod75wj9U9TSNrhpLc7K+8kYsMNSp2fCBsH3PPaCLeGelmRJKZCE
WPBILjNLZWQxRDfPgU92qF/M3SiBjcWRlsrgVeK3Z10+xtQcmysieUHSiEwyKYe6
kdTXSLQI6nEMt8GyFdN2LOvwREpsRSFzV9O6Q24cRBAdzKJlvbiTGZvn0H3g7pdn
FfWXSntYCDnqB5uocyqAJwRDa3KK94S4ac5928nVe2A5LZD7ue5OFHDZCvkV+y4K
t4YP1gJjNgYnIRsEI+dcxBj/ti4PjfHu9Bw4ZKb4MM51jbGvdVtRoPAyEQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOia91bbfi6eB+its7TGfu7gpmlQMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvNkpyM1Z0dC1McDRINksyenRNWi03dUNtYVZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgy2QhoH
MA0GCSqGSIb3DQEBCwUAA4IBAQA03HS9C0WK6nJuaUpU/nVQUyiJlhT620ZN4Q34
JV6D9lBwoRN6e2lgBKFynJj9tsiZAQbKvnLM2FQwKAsBJfcBpLMWqMLePTC0QL3/
10Soh+3VDhlG8hCNLih6TzGuul0qxnLczHi4vjv1xeYZOYFxr80Q2xHH4t5b9jb2
vNoTHc/ddT+ZH5T0kJpB1o9f4Rg5HLdsAPYIw7KwRNmP9kFW5K5/AH3ZxWH4iGav
FLbC0iAOGd5QW/mwJ/KSxnwahKqK/Tn8lp2gZZbwsLfy8/y8+1UrCO7KmgT3qLvB
12YefSOznFaC5ADwTfg3IlgzMg2Z5OP6rjUMzaOU27Cn+xUK
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:41 2025 by rpki-client