Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/p7YMee9CMPZUNNXFX3lZvhU2zF8.roa
File: p7YMee9CMPZUNNXFX3lZvhU2zF8.roa (raw, json)
Hash identifier: JTdaYADJIDGgj4cb5aGv0KZqnoiYHh1BbktUU/4yrQo=
Subject key identifier: A7:B6:0C:79:EF:42:30:F6:54:34:D5:C5:5F:79:59:BE:15:36:CC:5F
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0158386F
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/p7YMee9CMPZUNNXFX3lZvhU2zF8.roa
Signing time: Sat 01 Jan 2022 01:00:28 +0000
ROA not before: Sat 01 Jan 2022 01:00:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212963
IP address blocks: 2a0c:b641:650::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22558831 (0x158386f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 01:00:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7b60c79ef4230f65434d5c55f7959be1536cc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:a3:9c:bf:4d:e4:1d:51:09:5f:41:bd:b1:
ae:b8:a7:61:b1:5e:05:f1:f7:b5:f8:0a:40:49:03:
b9:19:ab:83:3a:75:d0:a1:ca:bf:c5:19:36:94:87:
b6:01:4c:6a:4f:8d:9f:bb:b7:8f:06:31:d7:15:59:
69:66:fb:64:ab:6a:c4:d1:e1:a2:98:4a:b1:1f:42:
e4:6b:82:ae:cc:8e:2f:d3:b0:dd:d8:2b:09:67:fd:
b1:24:b7:46:93:12:e4:de:49:25:8a:fd:2e:2e:fc:
99:be:af:d4:b1:00:36:8e:0f:76:34:47:36:70:3e:
ab:b6:77:4e:4d:86:b6:3d:96:28:d9:13:ae:69:3e:
29:38:4b:e3:1d:59:8f:4c:ae:c7:c9:35:4c:8f:9e:
8a:8c:b2:b4:f9:ca:e0:62:3c:14:04:ce:0a:90:30:
d0:70:c9:2c:6f:c0:9f:6e:34:38:3a:d8:09:4f:0c:
63:85:2f:ba:9a:20:b0:02:1c:12:e0:2f:93:0e:56:
3c:c9:2a:42:0e:6c:22:73:fe:8c:c8:80:fb:43:3e:
aa:78:bb:af:5d:69:d4:dc:56:7e:1d:e6:9b:ff:b6:
c3:0a:f3:68:8d:67:d3:e6:f2:2e:a4:e0:d0:90:08:
90:42:98:04:45:70:8b:1c:74:ab:10:14:8e:d8:4a:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B6:0C:79:EF:42:30:F6:54:34:D5:C5:5F:79:59:BE:15:36:CC:5F
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/p7YMee9CMPZUNNXFX3lZvhU2zF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:650::/44
Signature Algorithm: sha256WithRSAEncryption
4e:6e:af:53:8c:d8:bb:9c:ed:c2:aa:52:a5:b4:2c:fd:cd:29:
b4:70:8c:61:b5:16:2d:56:5e:e3:d8:21:4f:67:20:bd:b6:5d:
d7:38:d1:47:30:68:b4:b7:f5:df:0e:96:e4:55:f7:30:cb:1d:
c9:ac:d4:ab:1d:02:48:fe:30:e3:57:54:0d:59:9e:97:7b:22:
37:33:64:a2:b3:dc:c3:67:cd:9a:66:cf:9c:36:e1:70:17:83:
02:ec:b8:17:45:63:d2:b3:d5:50:b4:2f:5a:3b:6d:6a:a7:4a:
4e:52:db:e2:d6:95:4a:49:d9:21:7e:9a:06:6e:9e:d7:d9:23:
83:1f:43:c2:07:76:3c:6c:d8:69:14:25:91:b8:08:7e:46:e0:
b9:df:3f:3e:f3:a6:12:10:3c:22:ad:ec:3f:1f:3d:d5:a0:91:
17:7f:ea:53:b7:0c:ee:72:46:cf:e0:1c:4e:dc:3d:9c:83:9b:
a0:d6:a9:b1:17:c4:92:a9:71:01:90:5e:3d:7b:c2:06:67:dc:
ae:b8:7e:a0:ea:34:be:f9:dc:a7:d9:0f:dd:35:72:8a:55:b4:
ea:f4:ed:c4:a6:eb:fb:2f:ca:99:7d:52:fc:2d:a3:6d:23:b4:
ef:0b:ab:ee:1c:53:dc:4e:0a:f6:f2:69:7d:74:c2:4d:2b:dd:
82:35:09:7c
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEAVg4bzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTk3NjgwMTM2M2QzNzU3ODYxNTJlNGQwNjFlNzVjOGJlYjM1MDU4MB4XDTIyMDEw
MTAxMDAyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTdiNjBjNzllZjQy
MzBmNjU0MzRkNWM1NWY3OTU5YmUxNTM2Y2M1ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKo7o5y/TeQdUQlfQb2xrrinYbFeBfH3tfgKQEkDuRmrgzp1
0KHKv8UZNpSHtgFMak+Nn7u3jwYx1xVZaWb7ZKtqxNHhophKsR9C5GuCrsyOL9Ow
3dgrCWf9sSS3RpMS5N5JJYr9Li78mb6v1LEANo4PdjRHNnA+q7Z3Tk2Gtj2WKNkT
rmk+KThL4x1Zj0yux8k1TI+eioyytPnK4GI8FATOCpAw0HDJLG/An240ODrYCU8M
Y4UvupogsAIcEuAvkw5WPMkqQg5sInP+jMiA+0M+qni7r11p1NxWfh3mm/+2wwrz
aI1n0+byLqTg0JAIkEKYBEVwixx0qxAUjthKw1ECAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSntgx570Iw9lQ01cVfeVm+FTbMXzAfBgNVHSMEGDAWgBQFl2gBNj03V4YV
Lk0GHnXIvrNQWDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JaZG9BVFk5TjFlR0ZTNU5CaDUxeUw2elVGZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvMmJhYWRjLTJiN2EtNGVjMC05NWNhLTVlYzhjOGVkNjBmZC8x
L3A3WU1lZTlDTVBaVU5OWEZYM2xadmhVMnpGOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
MmJhYWRjLTJiN2EtNGVjMC05NWNhLTVlYzhjOGVkNjBmZC8xL0JaZG9BVFk5TjFl
R0ZTNU5CaDUxeUw2elVGZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoMtkEGUDANBgkqhkiG9w0BAQsF
AAOCAQEATm6vU4zYu5ztwqpSpbQs/c0ptHCMYbUWLVZe49ghT2cgvbZd1zjRRzBo
tLf13w6W5FX3MMsdyazUqx0CSP4w41dUDVmel3siNzNkorPcw2fNmmbPnDbhcBeD
Auy4F0Vj0rPVULQvWjttaqdKTlLb4taVSknZIX6aBm6e19kjgx9Dwgd2PGzYaRQl
kbgIfkbgud8/PvOmEhA8Iq3sPx891aCRF3/qU7cM7nJGz+AcTtw9nIOboNapsRfE
kqlxAZBePXvCBmfcrrh+oOo0vvncp9kP3TVyilW06vTtxKbr+y/KmX1S/C2jbSO0
7wur7hxT3E4K9vJpfXTCTSvdgjUJfA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:56 2025 by rpki-client