Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/PlIAYh_U0uVRGVgstWlPGI1vN5c.roa
File: PlIAYh_U0uVRGVgstWlPGI1vN5c.roa (raw, json)
Hash identifier: YqlAK0GxpiQptieKj9vfur6pIrzPYIINs74lXf1Ju/s=
Subject key identifier: 3E:52:00:62:1F:D4:D2:E5:51:19:58:2C:B5:69:4F:18:8D:6F:37:97
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 018A60935B90F14F28D257B288EFBFE358FB
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/PlIAYh_U0uVRGVgstWlPGI1vN5c.roa
Signing time: Mon 04 Sep 2023 14:23:04 +0000
ROA not before: Mon 04 Sep 2023 14:23:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216355
IP address blocks: 2a06:d1c1:1f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:60:93:5b:90:f1:4f:28:d2:57:b2:88:ef:bf:e3:58:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Sep 4 14:23:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e5200621fd4d2e55119582cb5694f188d6f3797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:7f:62:a2:be:85:9a:06:50:0e:b5:fd:5d:
3d:ba:6a:01:a3:9e:d3:7f:de:72:91:2e:e3:b7:1a:
67:ad:60:0e:b9:fa:08:55:71:b7:8d:b8:c0:3f:6c:
62:84:3d:c8:06:ec:ed:50:03:9b:fd:a0:73:33:09:
9e:af:51:47:47:0f:7f:50:ec:2c:7f:bd:2c:4c:28:
54:ce:75:37:47:be:13:d8:88:aa:2f:b4:29:7a:39:
3f:7c:ef:13:53:b6:bc:24:de:d2:e6:eb:89:3d:65:
c8:ad:6a:6a:d1:e7:4a:78:62:ae:c9:55:6c:e1:2f:
19:c1:7f:46:e1:21:7b:f8:2a:be:e6:c9:a2:2c:82:
d6:3d:4c:7e:e7:1f:c4:08:4e:dc:19:18:85:c4:c7:
bf:a7:95:c8:ac:34:15:b5:fa:ea:4e:2a:2c:ec:34:
9e:a7:6a:45:df:36:26:bf:d7:75:35:d6:7a:c5:42:
6a:0a:94:4b:2e:ec:9f:26:e9:54:ba:0f:7c:35:ca:
1e:50:1f:70:f9:b5:fb:b3:3c:e8:34:62:27:00:99:
91:76:96:c0:2d:a5:d6:7f:ee:0d:ed:73:bb:68:13:
de:9b:32:67:ea:c5:6f:11:18:e9:dc:d4:7a:de:04:
fb:e2:c5:77:24:d9:02:62:a6:73:f6:6c:b9:c2:0e:
48:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:52:00:62:1F:D4:D2:E5:51:19:58:2C:B5:69:4F:18:8D:6F:37:97
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/PlIAYh_U0uVRGVgstWlPGI1vN5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:d1c1:1f::/48
Signature Algorithm: sha256WithRSAEncryption
50:7d:05:14:77:c7:f0:20:f0:a2:17:79:47:61:5a:f6:b1:bb:
40:66:1f:77:63:95:91:e8:a7:60:a0:a1:12:c1:ce:d2:a5:35:
b6:89:25:29:30:d3:be:0b:f5:10:ed:bc:31:56:61:7d:6f:da:
71:1b:77:6e:64:ac:d8:a8:f7:b4:a5:89:f5:85:93:46:94:a3:
38:5c:6e:b3:c5:ba:04:68:11:a2:1f:63:af:c2:f8:d2:9a:33:
b5:0e:28:5c:81:de:9c:1b:c3:6a:c9:5c:5d:3f:2d:fe:bb:d6:
af:ae:8e:56:83:00:20:d1:77:df:3f:a9:ca:6c:f1:80:24:bf:
0b:43:d0:ab:13:f4:17:5e:59:c3:56:6a:cc:56:13:4c:50:e4:
1c:5f:25:13:80:ae:44:46:b0:07:4f:85:c0:fb:89:49:23:7a:
65:e9:01:5f:76:f8:54:93:34:b4:c3:c5:fa:f3:a3:b8:f2:c7:
11:53:1b:30:90:95:aa:ce:4b:29:9b:d4:de:d0:3d:a8:66:f0:
e9:6d:ba:56:a5:91:ec:54:33:57:36:91:b3:d8:0e:1c:90:f2:
2d:4a:32:00:be:60:c8:cf:f9:c5:1f:2c:23:8a:a7:19:09:b4:
0d:f2:8c:41:0b:6e:14:a7:98:25:73:51:2a:30:7d:77:e8:0f:
ee:65:c9:f0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYpgk1uQ8U8o0leyiO+/41j7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi
ZjQ3NWQwHhcNMjMwOTA0MTQyMzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTUyMDA2MjFmZDRkMmU1NTExOTU4MmNiNTY5NGYxODhkNmYzNzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S5/YqK+hZoGUA61/V09umoBo57T
f95ykS7jtxpnrWAOufoIVXG3jbjAP2xihD3IBuztUAOb/aBzMwmer1FHRw9/UOws
f70sTChUznU3R74T2IiqL7Qpejk/fO8TU7a8JN7S5uuJPWXIrWpq0edKeGKuyVVs
4S8ZwX9G4SF7+Cq+5smiLILWPUx+5x/ECE7cGRiFxMe/p5XIrDQVtfrqTios7DSe
p2pF3zYmv9d1NdZ6xUJqCpRLLuyfJulUug98NcoeUB9w+bX7szzoNGInAJmRdpbA
LaXWf+4N7XO7aBPemzJn6sVvERjp3NR63gT74sV3JNkCYqZz9my5wg5ISwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFD5SAGIf1NLlURlYLLVpTxiNbzeXMB8GA1UdIwQY
MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt
YmNmNzcwMjY5MzlkLzEvUGxJQVloX1UwdVZSR1Znc3RXbFBHSTF2TjVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk
LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgbRwQAf
MA0GCSqGSIb3DQEBCwUAA4IBAQBQfQUUd8fwIPCiF3lHYVr2sbtAZh93Y5WR6Kdg
oKESwc7SpTW2iSUpMNO+C/UQ7bwxVmF9b9pxG3duZKzYqPe0pYn1hZNGlKM4XG6z
xboEaBGiH2OvwvjSmjO1Dihcgd6cG8NqyVxdPy3+u9avro5WgwAg0XffP6nKbPGA
JL8LQ9CrE/QXXlnDVmrMVhNMUOQcXyUTgK5ERrAHT4XA+4lJI3pl6QFfdvhUkzS0
w8X686O48scRUxswkJWqzkspm9Te0D2oZvDpbbpWpZHsVDNXNpGz2A4ckPItSjIA
vmDIz/nFHywjiqcZCbQN8oxBC24Up5glc1EqMH136A/uZcnw
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:03:59 2025 by rpki-client