Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/RHdgvdjzGW_7MBUEQifBV07oUp8.roa
File: RHdgvdjzGW_7MBUEQifBV07oUp8.roa (raw, json)
Hash identifier: SPG45n10h/7tTUC6nGGQTJq0pf3uFb3ytk/A2mGQhgA=
Subject key identifier: 44:77:60:BD:D8:F3:19:6F:FB:30:15:04:42:27:C1:57:4E:E8:52:9F
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 07DDF926
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/RHdgvdjzGW_7MBUEQifBV07oUp8.roa
Signing time: Sat 01 Jan 2022 01:55:48 +0000
ROA not before: Sat 01 Jan 2022 01:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23470
IP address blocks: 2a04:ff00:500::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131987750 (0x7ddf926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 1 01:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=447760bdd8f3196ffb3015044227c1574ee8529f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:73:c4:c8:9b:82:ca:07:da:4d:66:8f:1a:03:
7c:b3:ce:d6:93:b3:93:80:f5:3b:c4:31:11:21:1a:
30:cf:cf:62:e8:06:59:ab:71:bb:d1:c7:d3:6a:c7:
56:04:80:25:35:16:45:54:22:46:59:3d:74:b0:d9:
45:59:72:34:61:f6:c4:a0:c6:48:13:66:bb:8c:91:
bb:4a:7f:1e:62:cb:5c:25:89:4a:1e:3f:7c:82:69:
eb:91:b7:66:ca:63:5b:19:7b:59:0d:c9:78:26:67:
3a:d7:b6:0c:3a:ad:4b:e1:b1:6e:97:46:e4:df:2f:
ed:2e:54:f3:48:e2:7c:b2:9c:ff:62:df:23:47:ed:
4d:e0:79:33:c0:79:99:c3:5e:99:43:30:44:dc:23:
74:6c:0d:27:88:bb:4a:a6:fd:b8:a8:31:14:4b:c9:
9d:ff:42:77:09:43:36:4a:88:d9:4b:19:54:34:1c:
f8:f9:f7:78:f6:3f:e9:7d:b3:de:13:76:3b:e9:30:
ab:2f:00:cd:b4:de:87:48:46:2d:9d:ec:20:8b:e5:
4c:49:bd:e1:a7:e5:8e:58:2e:5b:e5:74:7f:5c:84:
8b:2a:ee:04:62:c2:09:c7:14:5d:39:06:7a:dc:20:
af:dc:21:52:91:38:4f:ad:23:9d:52:e1:3a:a2:4a:
30:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:77:60:BD:D8:F3:19:6F:FB:30:15:04:42:27:C1:57:4E:E8:52:9F
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/RHdgvdjzGW_7MBUEQifBV07oUp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ff00:500::/48
Signature Algorithm: sha256WithRSAEncryption
45:04:61:44:f2:89:d8:3c:c8:ba:c7:93:bb:c2:d8:a6:3b:82:
40:47:df:09:d7:25:1b:8d:a2:87:df:e7:23:60:fe:f2:33:29:
ce:68:b7:73:ba:83:d4:3b:69:0f:f3:00:b1:df:b3:8b:b9:cc:
97:90:c0:c6:d5:80:7b:f6:50:41:e8:43:5c:54:e9:cb:ca:9c:
66:03:d5:17:aa:a7:a8:ac:47:49:33:a5:dc:e4:42:b6:44:85:
22:ce:57:86:05:14:85:a7:56:a7:00:57:f5:b1:6f:a0:d3:d6:
f2:f8:01:1e:f9:4f:c5:df:25:cf:d7:54:21:65:c7:75:59:0e:
9f:2e:ce:cd:6f:5f:c6:fd:8a:27:dc:8c:48:9d:d9:3a:35:6c:
00:e4:ae:26:68:9c:08:bc:8f:d0:84:e9:c8:d7:92:30:aa:04:
cb:4b:dd:3c:1a:ab:7f:65:9a:74:aa:91:8d:98:15:45:54:8a:
f5:c1:08:4a:4b:64:dd:03:05:91:59:7a:2b:55:66:b8:d5:74:
ec:dc:38:4b:83:7e:cd:32:54:22:ce:8c:93:73:37:a9:b6:e7:
e7:94:a6:1b:07:18:2d:6c:55:4d:82:37:4c:f0:f4:7a:97:ab:
bc:07:3c:5d:93:c3:d3:4d:b0:b9:83:6f:6f:d9:76:89:94:57:
b4:dc:cf:65
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEB935JjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDA0YzI1YzJmOGI0N2U1ZGFmNTJkMWM0YzVhNTA5OTlkZDBhMGE5MB4XDTIyMDEw
MTAxNTU0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDQ3NzYwYmRkOGYz
MTk2ZmZiMzAxNTA0NDIyN2MxNTc0ZWU4NTI5ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOVzxMibgsoH2k1mjxoDfLPO1pOzk4D1O8QxESEaMM/PYugG
Watxu9HH02rHVgSAJTUWRVQiRlk9dLDZRVlyNGH2xKDGSBNmu4yRu0p/HmLLXCWJ
Sh4/fIJp65G3ZspjWxl7WQ3JeCZnOte2DDqtS+GxbpdG5N8v7S5U80jifLKc/2Lf
I0ftTeB5M8B5mcNemUMwRNwjdGwNJ4i7Sqb9uKgxFEvJnf9CdwlDNkqI2UsZVDQc
+Pn3ePY/6X2z3hN2O+kwqy8AzbTeh0hGLZ3sIIvlTEm94afljlguW+V0f1yEiyru
BGLCCccUXTkGetwgr9whUpE4T60jnVLhOqJKMC8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBREd2C92PMZb/swFQRCJ8FXTuhSnzAfBgNVHSMEGDAWgBR9BMJcL4tH5dr1
LRxMWlCZndCgqTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZRVENYQy1MUi1YYTlTMGNURnBRbVozUW9Lay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzgvOTcxY2M0LTU0ZDUtNGMyOC1hMWMzLWU2M2U5NGNiYTA5Zi8x
L1JIZGd2ZGp6R1dfN01CVUVRaWZCVjA3b1VwOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgv
OTcxY2M0LTU0ZDUtNGMyOC1hMWMzLWU2M2U5NGNiYTA5Zi8xL2ZRVENYQy1MUi1Y
YTlTMGNURnBRbVozUW9Lay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoE/wAFADANBgkqhkiG9w0BAQsF
AAOCAQEARQRhRPKJ2DzIuseTu8LYpjuCQEffCdclG42ih9/nI2D+8jMpzmi3c7qD
1DtpD/MAsd+zi7nMl5DAxtWAe/ZQQehDXFTpy8qcZgPVF6qnqKxHSTOl3ORCtkSF
Is5XhgUUhadWpwBX9bFvoNPW8vgBHvlPxd8lz9dUIWXHdVkOny7OzW9fxv2KJ9yM
SJ3ZOjVsAOSuJmicCLyP0ITpyNeSMKoEy0vdPBqrf2WadKqRjZgVRVSK9cEISktk
3QMFkVl6K1VmuNV07Nw4S4N+zTJUIs6Mk3M3qbbn55SmGwcYLWxVTYI3TPD0eper
vAc8XZPD002wuYNvb9l2iZRXtNzPZQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:18 2025 by rpki-client