Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/N1eOB71LbTXq3aBWn-jLd2gXeVk.roa
File: N1eOB71LbTXq3aBWn-jLd2gXeVk.roa (raw, json)
Hash identifier: z0Tpw3k59j1ZSxScOksaIlstpWQ/8NwuAalcZllWb2g=
Subject key identifier: 37:57:8E:07:BD:4B:6D:35:EA:DD:A0:56:9F:E8:CB:77:68:17:79:59
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 0184E2D96526F8D4F97AE02C4F4EC3DD52F6
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/N1eOB71LbTXq3aBWn-jLd2gXeVk.roa
Signing time: Mon 05 Dec 2022 15:13:28 +0000
ROA not before: Mon 05 Dec 2022 15:13:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205432
IP address blocks: 2a05:b0c6:400::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:d9:65:26:f8:d4:f9:7a:e0:2c:4f:4e:c3:dd:52:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Dec 5 15:13:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37578e07bd4b6d35eadda0569fe8cb7768177959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:be:a4:f6:9d:ca:1e:43:0f:4e:09:6b:a2:99:
bc:d4:bf:6a:c1:92:53:f8:f0:7b:38:90:6f:e2:d1:
18:23:c7:a5:cb:22:a4:ba:f6:11:d0:f6:53:5a:fc:
51:81:1b:bc:54:1b:20:c7:23:df:49:7c:67:24:09:
cd:d0:ab:0a:9e:9f:c0:bb:bd:c0:99:4e:d1:fe:b1:
96:52:9b:97:3a:4f:5d:e1:ed:07:58:4f:1f:95:08:
13:2b:ef:f4:d2:8b:4c:f3:c4:66:e0:a7:2b:40:df:
f9:3d:67:f6:09:1e:ac:19:db:d2:76:2b:56:22:19:
28:07:57:d1:ac:15:24:96:0e:12:8c:3d:83:33:47:
1b:81:89:39:d0:8a:e0:5e:6d:bc:35:8f:28:21:d9:
cc:cf:87:d1:81:08:52:35:1c:3e:20:42:00:3f:e4:
33:bb:eb:47:ed:93:e0:f1:70:d7:8d:aa:93:c9:e7:
8b:4d:07:c7:18:3c:21:7a:df:ad:4c:68:45:f0:2a:
d4:55:1f:17:01:93:ce:81:43:f0:de:77:7b:d4:90:
f1:5c:dd:54:19:1e:07:25:12:b9:a9:f6:68:a3:6a:
1a:7c:bd:a7:b9:49:aa:31:ca:4a:3f:16:c2:96:f6:
9e:d8:fb:a7:76:26:5e:a9:4a:c0:bf:d4:0f:30:88:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:57:8E:07:BD:4B:6D:35:EA:DD:A0:56:9F:E8:CB:77:68:17:79:59
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/N1eOB71LbTXq3aBWn-jLd2gXeVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:400::/40
Signature Algorithm: sha256WithRSAEncryption
22:fa:97:f0:2b:fd:31:0b:ca:4b:63:1e:2e:f6:96:fa:81:84:
1e:88:5d:3f:9c:54:7f:f5:db:01:84:c0:93:48:5d:5a:7e:a1:
06:54:cc:0e:e8:50:d8:dc:20:60:e9:d9:c5:29:d7:36:f3:6f:
99:6a:7a:0d:5a:86:11:8e:1a:be:ae:ac:7c:13:d2:bb:ed:32:
5d:69:1c:7c:54:33:41:9e:7d:96:ca:17:8e:da:67:23:f5:e3:
39:20:bb:69:dd:ce:2b:54:26:c7:e7:b7:ff:fc:16:29:f0:e0:
c9:86:3a:63:1c:82:89:f4:5a:83:a4:a6:8e:f0:c9:f4:fd:dc:
2d:5d:21:e2:8d:14:33:05:e3:cf:4b:4d:af:e0:1e:97:1a:2e:
f2:f9:05:74:13:57:12:d0:c9:95:dc:f2:26:d4:09:cd:c2:91:
ef:de:f4:ba:9c:a5:21:73:3e:f1:73:0b:1c:4f:dd:a2:10:79:
ab:b1:89:fc:0b:79:ea:45:ca:e9:40:6c:f7:60:a4:34:0f:34:
d8:37:d0:c3:d6:f6:d4:b9:65:b7:c1:c8:6d:79:8c:0e:63:20:
3d:b8:b6:0d:21:1d:e0:48:37:f6:2d:fa:68:33:54:7e:c9:7a:
05:d6:20:a2:dc:5a:5c:88:53:fb:05:2f:98:06:30:fc:d9:e9:
d9:4e:34:e1
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYTi2WUm+NT5euAsT07D3VL2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjgzNDhlOTA1NDk3M2Q3YTVmODE5M2JkNGU1YzQ0ZjY3
Mzk5ZTEwHhcNMjIxMjA1MTUxMzI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzU3OGUwN2JkNGI2ZDM1ZWFkZGEwNTY5ZmU4Y2I3NzY4MTc3OTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib6k9p3KHkMPTglropm81L9qwZJT
+PB7OJBv4tEYI8elyyKkuvYR0PZTWvxRgRu8VBsgxyPfSXxnJAnN0KsKnp/Au73A
mU7R/rGWUpuXOk9d4e0HWE8flQgTK+/00otM88Rm4KcrQN/5PWf2CR6sGdvSditW
IhkoB1fRrBUklg4SjD2DM0cbgYk50IrgXm28NY8oIdnMz4fRgQhSNRw+IEIAP+Qz
u+tH7ZPg8XDXjaqTyeeLTQfHGDwhet+tTGhF8CrUVR8XAZPOgUPw3nd71JDxXN1U
GR4HJRK5qfZoo2oafL2nuUmqMcpKPxbClvae2PundiZeqUrAv9QPMIhurwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFDdXjge9S2016t2gVp/oy3doF3lZMB8GA1UdIwQY
MBaAFMIoNI6QVJc9el+Bk71OXET2c5nhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMt
ZTg4ZmZmODJkNTUzLzEvTjFlT0I3MUxiVFhxM2FCV24takxkMmdYZVZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMtZTg4ZmZmODJkNTUz
LzEvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgWwxgQw
DQYJKoZIhvcNAQELBQADggEBACL6l/Ar/TELyktjHi72lvqBhB6IXT+cVH/12wGE
wJNIXVp+oQZUzA7oUNjcIGDp2cUp1zbzb5lqeg1ahhGOGr6urHwT0rvtMl1pHHxU
M0GefZbKF47aZyP14zkgu2ndzitUJsfnt//8Finw4MmGOmMcgon0WoOkpo7wyfT9
3C1dIeKNFDMF489LTa/gHpcaLvL5BXQTVxLQyZXc8ibUCc3Cke/e9LqcpSFzPvFz
CxxP3aIQeauxifwLeepFyulAbPdgpDQPNNg30MPW9tS5ZbfByG15jA5jID24tg0h
HeBIN/Yt+mgzVH7JegXWIKLcWlyIU/sFL5gGMPzZ6dlONOE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:34:17 2025 by rpki-client