Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/52rVHXRHy5Q-znenaolL7cI1vys.roa
File: 52rVHXRHy5Q-znenaolL7cI1vys.roa (raw, json)
Hash identifier: lkSp1k4pBa+kYjLZekNEPLP2S4Y70M0bhaJxTP5yxpI=
Subject key identifier: E7:6A:D5:1D:74:47:CB:94:3E:CE:77:A7:6A:89:4B:ED:C2:35:BF:2B
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8AFBC180A97298905364A03B7B0B83
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/52rVHXRHy5Q-znenaolL7cI1vys.roa
Signing time: Sun 01 Jan 2023 13:35:02 +0000
ROA not before: Sun 01 Jan 2023 13:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15398
IP address blocks: 2001:918:ff5d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:fb:c1:80:a9:72:98:90:53:64:a0:3b:7b:0b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e76ad51d7447cb943ece77a76a894bedc235bf2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:60:58:16:73:ec:52:6c:23:2a:72:ba:e4:
ef:93:82:17:92:d3:8f:61:34:7d:1e:ed:0b:8f:7d:
46:ff:6e:a1:bd:e9:66:5f:8c:81:86:0b:fc:23:29:
43:bd:50:dc:c2:56:00:78:4c:e2:00:c7:2b:58:36:
0f:73:a3:53:bc:68:b0:82:8c:2f:c0:8c:3d:27:b9:
01:10:45:9f:6b:68:94:cc:36:0b:78:72:95:02:16:
6a:9c:21:db:90:ba:80:65:1e:2b:26:b2:71:b1:2a:
86:d2:23:bf:6b:4c:67:dd:01:94:01:4a:ef:95:4e:
8a:c1:6a:54:b6:92:e4:0b:fb:23:93:fd:db:2f:1f:
74:92:52:1a:03:68:5e:4c:33:aa:a9:02:2c:77:be:
65:4c:01:27:57:a5:d9:49:db:1a:9e:9a:d5:6e:51:
00:a4:59:4d:ef:ec:08:46:bd:8f:26:00:df:80:93:
d1:71:fa:a3:1f:16:d9:1a:03:21:67:f9:ef:95:2f:
c1:e4:bf:2b:0a:75:14:e0:90:2c:48:cf:95:eb:af:
ff:87:2d:76:30:02:73:be:3a:2d:d8:47:1b:b1:5c:
01:d2:ab:34:84:29:77:61:74:18:cf:2f:07:9f:57:
1d:72:7c:75:0a:2d:d1:98:40:46:f7:b8:e9:30:90:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6A:D5:1D:74:47:CB:94:3E:CE:77:A7:6A:89:4B:ED:C2:35:BF:2B
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/52rVHXRHy5Q-znenaolL7cI1vys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:918:ff5d::/48
Signature Algorithm: sha256WithRSAEncryption
31:06:43:99:08:48:2a:0e:6b:bd:fa:dc:ef:46:ff:ab:09:be:
5f:b1:43:d0:a4:8e:08:97:3d:3f:62:3f:0a:13:ba:22:d0:75:
75:c7:e2:34:5f:2b:0b:4d:d0:12:71:8d:e6:29:9b:01:bd:e8:
30:b8:61:ed:1a:36:ed:c6:a7:e3:3c:ca:a0:3b:5f:85:a6:48:
08:98:b1:de:32:c6:6c:55:2e:07:c9:bc:6e:9e:05:5a:c7:fe:
ba:08:9f:6c:7c:8c:f5:fa:56:a3:e3:9e:20:48:1f:29:c9:1c:
39:4b:28:91:dc:ce:58:3d:64:86:61:8f:ad:c1:f8:1e:ef:a1:
e3:39:dd:5c:7d:7a:10:0c:cd:2e:5a:87:11:85:28:f4:33:8b:
0c:f5:af:2e:24:23:f0:dc:41:e9:2e:83:b0:3c:54:b6:7e:d0:
cb:30:3a:e2:d7:5a:72:ef:aa:5f:56:b0:9a:ea:7a:9e:72:5a:
34:51:e2:0a:19:7e:3c:93:7a:9b:28:d2:b4:0d:bb:42:f9:5f:
0d:9b:54:ba:6d:69:da:96:8a:f3:39:af:6d:f6:f1:bd:03:1e:
0b:86:4b:0c:c3:86:72:2a:93:6d:36:14:fa:99:65:f1:cd:1d:
4b:4e:fd:a7:4a:60:01:4c:d5:35:c5:9b:93:cd:3d:70:ac:f9:
9e:80:92:3f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVtivvBgKlymJBTZKA7ewuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjMwMTAxMTMzNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzZhZDUxZDc0NDdjYjk0M2VjZTc3YTc2YTg5NGJlZGMyMzViZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArspgWBZz7FJsIypyuuTvk4IXktOP
YTR9Hu0Lj31G/26hvelmX4yBhgv8IylDvVDcwlYAeEziAMcrWDYPc6NTvGiwgowv
wIw9J7kBEEWfa2iUzDYLeHKVAhZqnCHbkLqAZR4rJrJxsSqG0iO/a0xn3QGUAUrv
lU6KwWpUtpLkC/sjk/3bLx90klIaA2heTDOqqQIsd75lTAEnV6XZSdsanprVblEA
pFlN7+wIRr2PJgDfgJPRcfqjHxbZGgMhZ/nvlS/B5L8rCnUU4JAsSM+V66//hy12
MAJzvjot2EcbsVwB0qs0hCl3YXQYzy8Hn1cdcnx1Ci3RmEBG97jpMJDPmQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOdq1R10R8uUPs53p2qJS+3CNb8rMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvNTJyVkhYUkh5NVEtem5lbmFvbEw3Y0kxdnlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEJGP9d
MA0GCSqGSIb3DQEBCwUAA4IBAQAxBkOZCEgqDmu9+tzvRv+rCb5fsUPQpI4Ilz0/
Yj8KE7oi0HV1x+I0XysLTdAScY3mKZsBvegwuGHtGjbtxqfjPMqgO1+FpkgImLHe
MsZsVS4HybxungVax/66CJ9sfIz1+laj454gSB8pyRw5SyiR3M5YPWSGYY+twfge
76HjOd1cfXoQDM0uWocRhSj0M4sM9a8uJCPw3EHpLoOwPFS2ftDLMDri11py76pf
VrCa6nqeclo0UeIKGX48k3qbKNK0DbtC+V8Nm1S6bWnalorzOa9t9vG9Ax4LhksM
w4ZyKpNtNhT6mWXxzR1LTv2nSmABTNU1xZuTzT1wrPmegJI/
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:38:45 2025 by rpki-client