Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/Hxad0MTJz9XSdd3Hc-Gim-K9cL8.roa
File: Hxad0MTJz9XSdd3Hc-Gim-K9cL8.roa (raw, json)
Hash identifier: ALtky+/uA5WdD/CoFEUi9zg/LYVZa6WdbwAfOBJ6HRU=
Subject key identifier: 1F:16:9D:D0:C4:C9:CF:D5:D2:75:DD:C7:73:E1:A2:9B:E2:BD:70:BF
Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Certificate serial: 01856E2FD3F48F4938329DE6BD399C01CE5B
Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/Hxad0MTJz9XSdd3Hc-Gim-K9cL8.roa
Signing time: Sun 01 Jan 2023 16:35:06 +0000
ROA not before: Sun 01 Jan 2023 16:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50389
IP address blocks: 2a01:b960:2303::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:d3:f4:8f:49:38:32:9d:e6:bd:39:9c:01:ce:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Validity
Not Before: Jan 1 16:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f169dd0c4c9cfd5d275ddc773e1a29be2bd70bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:46:78:8c:ad:80:c7:a4:41:15:58:12:f7:
79:6e:44:bc:8e:8c:dd:39:af:27:cb:e5:cc:11:43:
72:a1:9e:4b:db:73:6f:1b:57:79:0f:2c:73:51:5d:
a4:5f:7e:84:f2:b1:3c:b2:be:04:31:cc:56:44:d9:
5f:97:c9:46:f7:13:c7:73:51:04:72:81:bb:1c:32:
02:3e:56:4d:62:e9:ac:ce:a8:d2:8e:69:b9:31:b2:
4d:d0:d5:8b:fc:22:21:fb:82:5d:87:ab:ed:9a:91:
f8:cf:59:b1:96:b8:1e:ce:47:72:c4:aa:bd:9f:eb:
6e:09:80:55:27:64:15:7c:d5:70:e7:ab:ea:55:33:
a5:6e:8b:c8:e0:6d:47:b8:5e:8e:88:cf:84:a6:cf:
a3:3c:3c:da:ad:0f:40:ad:80:d4:3e:11:b0:da:90:
5a:02:09:61:6d:b0:31:f6:59:9a:89:10:48:a0:d3:
73:3a:7d:c9:98:0a:93:02:a4:05:22:96:97:4b:9c:
c1:fc:4e:ec:84:34:6b:59:aa:0f:09:46:4b:1a:8f:
0a:99:0c:8c:7a:95:5e:a6:16:42:6b:94:ac:9a:83:
8e:65:f2:f1:f5:05:78:fe:a2:72:55:b9:ff:cd:50:
57:00:a9:aa:20:04:9c:a8:e5:08:b2:dd:40:d1:42:
af:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:16:9D:D0:C4:C9:CF:D5:D2:75:DD:C7:73:E1:A2:9B:E2:BD:70:BF
X509v3 Authority Key Identifier:
keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/Hxad0MTJz9XSdd3Hc-Gim-K9cL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:b960:2303::/48
Signature Algorithm: sha256WithRSAEncryption
76:c6:eb:ad:5a:62:73:e8:8a:6f:e9:21:66:1b:cc:51:ec:df:
f8:02:25:6f:f8:59:17:c9:f9:97:2e:cf:04:04:38:a4:10:4f:
f6:e7:8b:ec:69:d2:29:7e:c6:4d:1a:0f:66:93:4c:fc:29:35:
34:37:64:e9:7a:02:5f:1d:b3:3d:45:0f:ac:6e:2c:70:c6:d3:
f2:67:41:57:47:23:d3:85:bd:97:cb:50:4a:cd:c1:bf:50:69:
b5:99:1c:92:27:77:76:9e:37:11:1c:66:77:f8:16:5b:32:ad:
dc:77:a6:b2:3e:be:15:11:68:d7:42:18:b0:58:6b:b9:d3:31:
ae:ca:0f:09:c7:be:bd:d4:87:b5:b0:de:01:2e:14:b4:27:55:
bb:e5:13:34:86:71:fb:d3:ed:1b:36:b2:24:63:22:a3:d9:e7:
e6:80:81:2d:4f:ab:4e:5a:94:bb:f7:f3:c9:6d:8a:f9:da:67:
9f:bc:c2:bc:b3:d1:a6:36:5b:96:09:ec:83:f0:fe:cb:dc:81:
97:ef:d7:03:e0:08:46:99:d5:00:a9:09:b3:0a:ed:d0:a4:39:
dd:ba:2b:9a:ec:e9:1f:d2:c4:8e:52:56:d5:e3:83:94:c4:09:
74:78:9c:fb:0a:1f:18:50:86:99:4d:90:1e:e1:82:31:3e:63:
5e:e1:68:da
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVuL9P0j0k4Mp3mvTmcAc5bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl
MzU5YTIwHhcNMjMwMTAxMTYzNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjE2OWRkMGM0YzljZmQ1ZDI3NWRkYzc3M2UxYTI5YmUyYmQ3MGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1xGeIytgMekQRVYEvd5bkS8jozd
Oa8ny+XMEUNyoZ5L23NvG1d5DyxzUV2kX36E8rE8sr4EMcxWRNlfl8lG9xPHc1EE
coG7HDICPlZNYumszqjSjmm5MbJN0NWL/CIh+4Jdh6vtmpH4z1mxlrgezkdyxKq9
n+tuCYBVJ2QVfNVw56vqVTOlbovI4G1HuF6OiM+Eps+jPDzarQ9ArYDUPhGw2pBa
AglhbbAx9lmaiRBIoNNzOn3JmAqTAqQFIpaXS5zB/E7shDRrWaoPCUZLGo8KmQyM
epVephZCa5SsmoOOZfLx9QV4/qJyVbn/zVBXAKmqIAScqOUIst1A0UKvfwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFB8WndDEyc/V0nXdx3PhopvivXC/MB8GA1UdIwQY
MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt
ZThlOGQyZmU3MGZlLzEvSHhhZDBNVEp6OVhTZGQzSGMtR2ltLUs5Y0w4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl
LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgG5YCMD
MA0GCSqGSIb3DQEBCwUAA4IBAQB2xuutWmJz6Ipv6SFmG8xR7N/4AiVv+FkXyfmX
Ls8EBDikEE/254vsadIpfsZNGg9mk0z8KTU0N2TpegJfHbM9RQ+sbixwxtPyZ0FX
RyPThb2Xy1BKzcG/UGm1mRySJ3d2njcRHGZ3+BZbMq3cd6ayPr4VEWjXQhiwWGu5
0zGuyg8Jx7691Ie1sN4BLhS0J1W75RM0hnH70+0bNrIkYyKj2efmgIEtT6tOWpS7
9/PJbYr52mefvMK8s9GmNluWCeyD8P7L3IGX79cD4AhGmdUAqQmzCu3QpDnduiua
7Okf0sSOUlbV44OUxAl0eJz7Ch8YUIaZTZAe4YIxPmNe4Wja
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:18 2025 by rpki-client