Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/NOurgztVQkAfyXCOmsXx8T_pbhk.roa
File: NOurgztVQkAfyXCOmsXx8T_pbhk.roa (raw, json)
Hash identifier: +NWiOcZns3TZMyX0C+hqXkznuN4ILfZQlqirTEfJxZQ=
Subject key identifier: 34:EB:AB:83:3B:55:42:40:1F:C9:70:8E:9A:C5:F1:F1:3F:E9:6E:19
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 089A7F9C
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/NOurgztVQkAfyXCOmsXx8T_pbhk.roa
Signing time: Tue 29 Mar 2022 18:28:23 +0000
ROA not before: Tue 29 Mar 2022 18:28:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206634
IP address blocks: 2a04:ff00:600::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144342940 (0x89a7f9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Mar 29 18:28:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34ebab833b5542401fc9708e9ac5f1f13fe96e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bc:b7:62:fa:90:eb:29:9b:c6:35:f0:f6:a2:
83:20:1b:1c:46:e0:6f:4b:b4:4a:68:4a:6b:f3:2f:
78:04:72:8b:59:88:8d:46:b0:a6:a0:a1:c6:00:17:
60:eb:fb:67:49:0e:03:78:cb:6d:e8:b7:39:e0:2a:
d2:be:1b:29:a6:8d:7e:33:e3:6a:87:f4:7f:c0:38:
22:1d:ae:30:a1:15:78:ee:af:65:19:2f:e7:ff:9d:
3f:98:09:98:8d:43:cd:eb:aa:6a:28:19:58:4d:94:
69:c8:a9:c4:73:01:4a:82:5e:ee:34:32:92:cb:00:
92:9c:6b:67:29:0e:55:f7:6d:22:39:af:f6:17:79:
a8:83:11:aa:a6:12:fe:6c:26:d2:15:64:ee:c3:33:
fc:13:d0:1f:c7:56:b1:ef:03:79:43:54:c2:0c:1e:
96:5f:00:d3:29:a2:3b:91:20:cf:1c:a8:3c:e2:4a:
6a:4e:a1:69:33:63:43:e6:17:60:6f:74:7b:1d:92:
7e:14:69:7b:a0:ab:d6:3c:a1:ba:31:cc:68:12:93:
f4:87:5e:7f:79:85:f5:8b:49:68:ff:72:62:f8:37:
b5:8d:34:31:32:6b:f6:c0:48:6c:56:24:5b:b1:b7:
bc:59:e2:ba:44:e0:5c:f0:af:49:26:20:91:d7:b1:
16:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EB:AB:83:3B:55:42:40:1F:C9:70:8E:9A:C5:F1:F1:3F:E9:6E:19
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/NOurgztVQkAfyXCOmsXx8T_pbhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ff00:600::/40
Signature Algorithm: sha256WithRSAEncryption
77:8a:75:77:14:44:61:17:a9:66:5c:fc:1e:14:68:c5:27:2c:
b3:8f:54:c3:05:22:3f:1e:4a:3d:5d:e0:70:57:90:6b:e0:fe:
99:fa:dd:d5:bc:ab:8b:ad:70:63:a6:4f:19:cf:c8:b8:b9:d2:
3e:64:bd:aa:9c:65:4b:86:0b:8b:07:a1:3c:52:dc:f6:e4:75:
c7:5b:02:1a:80:9c:c0:2f:77:44:1c:a8:af:54:da:20:a6:76:
a4:2c:92:dd:62:6b:96:48:dd:00:13:7b:c3:40:85:ef:9a:09:
cc:5b:de:16:8e:a5:8a:c1:82:9f:7f:d4:c4:11:ff:19:dd:8a:
72:ed:f4:3b:6a:fa:5e:83:0d:f4:18:da:48:10:e5:2d:e4:9d:
0c:e3:b0:1a:2f:21:43:89:32:5d:aa:17:86:ea:b3:1a:02:c0:
d4:1e:78:c9:fe:b8:3c:db:46:7a:8c:0c:6a:6c:9c:18:4b:4b:
e5:7d:40:cf:78:1f:d4:42:d4:c7:c2:a2:5c:3f:7f:aa:eb:8c:
a7:58:b3:7d:41:42:e9:5f:4b:da:ce:33:8d:b6:a0:7b:8c:84:
85:4c:de:b5:9f:1c:f4:ca:e0:8f:a2:57:ef:1d:f9:5f:fc:1c:
b3:45:0e:b3:24:15:df:70:04:58:3c:16:17:12:dd:4f:ef:75:
6b:39:1f:6a
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIECJp/nDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDA0YzI1YzJmOGI0N2U1ZGFmNTJkMWM0YzVhNTA5OTlkZDBhMGE5MB4XDTIyMDMy
OTE4MjgyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzRlYmFiODMzYjU1
NDI0MDFmYzk3MDhlOWFjNWYxZjEzZmU5NmUxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIe8t2L6kOspm8Y18PaigyAbHEbgb0u0SmhKa/MveARyi1mI
jUawpqChxgAXYOv7Z0kOA3jLbei3OeAq0r4bKaaNfjPjaof0f8A4Ih2uMKEVeO6v
ZRkv5/+dP5gJmI1DzeuqaigZWE2UacipxHMBSoJe7jQykssAkpxrZykOVfdtIjmv
9hd5qIMRqqYS/mwm0hVk7sMz/BPQH8dWse8DeUNUwgwell8A0ymiO5EgzxyoPOJK
ak6haTNjQ+YXYG90ex2SfhRpe6Cr1jyhujHMaBKT9Idef3mF9YtJaP9yYvg3tY00
MTJr9sBIbFYkW7G3vFniukTgXPCvSSYgkdexFjcCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBQ066uDO1VCQB/JcI6axfHxP+luGTAfBgNVHSMEGDAWgBR9BMJcL4tH5dr1
LRxMWlCZndCgqTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZRVENYQy1MUi1YYTlTMGNURnBRbVozUW9Lay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzgvOTcxY2M0LTU0ZDUtNGMyOC1hMWMzLWU2M2U5NGNiYTA5Zi8x
L05PdXJnenRWUWtBZnlYQ09tc1h4OFRfcGJoay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgv
OTcxY2M0LTU0ZDUtNGMyOC1hMWMzLWU2M2U5NGNiYTA5Zi8xL2ZRVENYQy1MUi1Y
YTlTMGNURnBRbVozUW9Lay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoE/wAGMA0GCSqGSIb3DQEBCwUA
A4IBAQB3inV3FERhF6lmXPweFGjFJyyzj1TDBSI/Hko9XeBwV5Br4P6Z+t3VvKuL
rXBjpk8Zz8i4udI+ZL2qnGVLhguLB6E8Utz25HXHWwIagJzAL3dEHKivVNogpnak
LJLdYmuWSN0AE3vDQIXvmgnMW94WjqWKwYKff9TEEf8Z3Ypy7fQ7avpegw30GNpI
EOUt5J0M47AaLyFDiTJdqheG6rMaAsDUHnjJ/rg820Z6jAxqbJwYS0vlfUDPeB/U
QtTHwqJcP3+q64ynWLN9QULpX0vazjONtqB7jISFTN61nxz0yuCPolfvHflf/Byz
RQ6zJBXfcARYPBYXEt1P73VrOR9q
-----END CERTIFICATE-----
Generated at Wed Apr 16 23:29:28 2025 by rpki-client