Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WzDzw-Wyzyq_whItmJJmYWt9jMs.roa
File: WzDzw-Wyzyq_whItmJJmYWt9jMs.roa (raw, json)
Hash identifier: TJoHOafq2mzIqSGVzs+0Qyf67NubFDilTr26Xh+iENc=
Subject key identifier: 5B:30:F3:C3:E5:B2:CF:2A:BF:C2:12:2D:98:92:66:61:6B:7D:8C:CB
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E5B593BFD5D381106DEA310E44F65
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WzDzw-Wyzyq_whItmJJmYWt9jMs.roa
Signing time: Mon 02 Jan 2023 06:14:52 +0000
ROA not before: Mon 02 Jan 2023 06:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206639
IP address blocks: 2a0c:b641:7c0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:5b:59:3b:fd:5d:38:11:06:de:a3:10:e4:4f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b30f3c3e5b2cf2abfc2122d989266616b7d8ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:92:94:6e:5e:a4:91:ed:b6:ab:60:7d:7d:
35:7c:f8:62:7f:ae:d8:00:4c:19:73:6e:1d:fe:d8:
83:6d:5e:f2:87:ba:a8:db:07:f3:0d:01:b2:57:9a:
68:e2:0f:f3:d5:40:94:33:d3:a7:f1:a6:d8:b9:e1:
e5:87:c4:94:00:c4:c8:16:a4:51:36:5c:76:f5:86:
06:37:26:96:be:ab:2f:2e:21:2a:a3:4d:aa:28:7c:
c6:d2:b1:c9:ee:9e:15:6c:4e:0f:e1:c4:50:4f:df:
49:11:9c:8c:54:c8:bf:52:5f:ed:dd:1f:67:6f:32:
63:d1:2e:cf:8e:29:19:8d:64:b8:39:84:5a:50:0e:
3a:25:78:40:9f:fa:92:5e:b3:d1:7a:39:82:da:52:
5d:d1:19:6d:c8:34:c9:d6:e8:50:54:f3:ae:7d:f8:
7d:bc:8b:bb:40:0c:40:9d:83:12:44:f2:8a:e9:40:
d3:84:71:b9:59:87:13:8f:7a:fa:4f:b8:7f:f9:11:
57:18:98:1f:8e:5f:7c:1e:f5:31:35:e1:b2:aa:ab:
b3:e1:1c:93:07:fd:c6:e6:d4:42:8e:1f:54:d5:ac:
32:a9:36:e4:72:a0:f7:58:e3:c2:7b:ed:d6:97:90:
bc:97:25:de:7f:be:47:d8:76:f1:70:8a:f3:0b:92:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:30:F3:C3:E5:B2:CF:2A:BF:C2:12:2D:98:92:66:61:6B:7D:8C:CB
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WzDzw-Wyzyq_whItmJJmYWt9jMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:7c0::/44
Signature Algorithm: sha256WithRSAEncryption
7a:00:75:e7:7a:3a:6e:cb:9f:a2:ba:bf:70:71:df:a2:59:86:
54:47:e8:f0:18:ee:6f:18:3a:0f:e1:a0:1f:bf:69:46:39:ab:
44:a5:22:58:35:e0:a6:99:b9:2f:a7:63:fa:86:82:ea:f0:b7:
8c:2b:e0:aa:97:55:6c:14:71:78:01:8d:48:9d:5d:c4:d5:35:
42:b1:82:4f:02:b5:9d:fa:86:8f:8e:72:e3:e4:8b:55:54:ac:
b3:13:e3:7c:3f:dc:ef:be:32:bf:14:13:f0:a3:7b:80:cb:22:
68:5f:89:16:f0:8a:f2:60:9b:3f:32:52:47:dc:3f:f3:84:d4:
ae:47:af:68:bf:09:5d:42:32:b9:3c:d1:b1:e5:82:e8:78:31:
b0:18:c9:12:b1:5d:e5:97:b1:a3:c7:9b:54:0a:e8:bc:d8:91:
27:b2:d1:7c:02:d6:16:2e:15:79:bb:77:54:03:c9:bc:a1:6b:
a6:02:2a:14:8c:26:56:a0:02:3d:02:af:6e:50:91:96:0a:e0:
26:58:d6:2d:c7:fb:fa:39:e5:cd:05:77:d3:ca:ef:2e:d9:6c:
30:c4:c1:13:77:eb:eb:99:09:81:b5:4f:ab:9d:89:e9:08:3d:
79:a7:75:22:12:19:ec:d5:5b:54:9c:2f:70:dc:f2:da:0c:f7:
4e:79:e9:5c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxHltZO/1dOBEG3qMQ5E9lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjMwMTAyMDYxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjMwZjNjM2U1YjJjZjJhYmZjMjEyMmQ5ODkyNjY2MTZiN2Q4Y2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtuSlG5epJHttqtgfX01fPhif67Y
AEwZc24d/tiDbV7yh7qo2wfzDQGyV5po4g/z1UCUM9On8abYueHlh8SUAMTIFqRR
Nlx29YYGNyaWvqsvLiEqo02qKHzG0rHJ7p4VbE4P4cRQT99JEZyMVMi/Ul/t3R9n
bzJj0S7PjikZjWS4OYRaUA46JXhAn/qSXrPRejmC2lJd0RltyDTJ1uhQVPOuffh9
vIu7QAxAnYMSRPKK6UDThHG5WYcTj3r6T7h/+RFXGJgfjl98HvUxNeGyqquz4RyT
B/3G5tRCjh9U1awyqTbkcqD3WOPCe+3Wl5C8lyXef75H2HbxcIrzC5LrXwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFsw88Plss8qv8ISLZiSZmFrfYzLMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvV3pEenctV3l6eXFfd2hJdG1KSm1ZV3Q5ak1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQfA
MA0GCSqGSIb3DQEBCwUAA4IBAQB6AHXnejpuy5+iur9wcd+iWYZUR+jwGO5vGDoP
4aAfv2lGOatEpSJYNeCmmbkvp2P6hoLq8LeMK+Cql1VsFHF4AY1InV3E1TVCsYJP
ArWd+oaPjnLj5ItVVKyzE+N8P9zvvjK/FBPwo3uAyyJoX4kW8IryYJs/MlJH3D/z
hNSuR69ovwldQjK5PNGx5YLoeDGwGMkSsV3ll7Gjx5tUCui82JEnstF8AtYWLhV5
u3dUA8m8oWumAioUjCZWoAI9Aq9uUJGWCuAmWNYtx/v6OeXNBXfTyu8u2WwwxMET
d+vrmQmBtU+rnYnpCD15p3UiEhns1VtUnC9w3PLaDPdOeelc
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:18 2025 by rpki-client