Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/3joylErtFo3k7dOW-mye5fVAZDg.roa
File: 3joylErtFo3k7dOW-mye5fVAZDg.roa (raw, json)
Hash identifier: m2ADjI9UV4q5mhFMmP1/r8BAkO95EYejZTdVvbfv6cY=
Subject key identifier: DE:3A:32:94:4A:ED:16:8D:E4:ED:D3:96:FA:6C:9E:E5:F5:40:64:38
Certificate issuer: /CN=acef4da56cb940d9f2f7d021af2a61fbd3b14ea8
Certificate serial: 01856D13BF35A953ECA28F35EE768E439993
Authority key identifier: AC:EF:4D:A5:6C:B9:40:D9:F2:F7:D0:21:AF:2A:61:FB:D3:B1:4E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/3joylErtFo3k7dOW-mye5fVAZDg.roa
Signing time: Sun 01 Jan 2023 11:24:48 +0000
ROA not before: Sun 01 Jan 2023 11:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49844
IP address blocks: 2a12:f840::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:bf:35:a9:53:ec:a2:8f:35:ee:76:8e:43:99:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acef4da56cb940d9f2f7d021af2a61fbd3b14ea8
Validity
Not Before: Jan 1 11:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de3a32944aed168de4edd396fa6c9ee5f5406438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:98:80:d1:ba:fe:86:92:12:f8:38:53:75:
de:a8:9e:a0:2b:03:92:ce:fc:30:ff:3e:41:e6:ce:
b1:7e:af:ee:8b:dc:b0:8a:aa:62:b2:35:5c:15:1f:
e5:93:2f:b5:4d:f0:38:9e:86:88:f4:d6:9b:68:da:
85:d3:99:37:ed:b5:29:f0:3a:f4:07:63:74:e0:c1:
0c:c9:0a:af:ff:4b:53:86:07:ab:7e:56:bb:40:64:
da:56:17:73:88:79:79:95:f3:a2:0f:05:d5:94:44:
2e:85:fc:60:fc:49:41:dd:e5:83:35:3e:12:ce:36:
b9:03:7f:2e:d1:31:d9:de:08:d9:13:42:ce:c5:31:
2e:04:24:d8:dd:e3:75:27:60:03:4d:b9:6f:ea:e2:
6d:a3:92:9a:f7:f8:f0:ce:25:ee:e6:ac:69:56:de:
36:04:87:6a:4b:e0:8a:1b:50:b9:9c:79:80:c6:1f:
bf:3e:87:ab:e2:8b:5b:fb:76:49:c9:bf:de:a4:f6:
44:a3:e4:1d:4b:97:7b:5a:8f:07:84:66:79:8b:42:
63:8a:53:71:70:96:5e:5a:f4:e4:89:64:d3:72:80:
77:e0:33:e3:12:dd:12:ef:7a:69:70:e9:69:28:bc:
1f:90:3b:38:55:31:9e:95:12:67:17:ea:6f:f3:dc:
8f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3A:32:94:4A:ED:16:8D:E4:ED:D3:96:FA:6C:9E:E5:F5:40:64:38
X509v3 Authority Key Identifier:
keyid:AC:EF:4D:A5:6C:B9:40:D9:F2:F7:D0:21:AF:2A:61:FB:D3:B1:4E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/3joylErtFo3k7dOW-mye5fVAZDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f840::/29
Signature Algorithm: sha256WithRSAEncryption
80:9f:af:60:d6:cb:51:8a:f1:08:e8:52:d7:2b:da:f9:3d:dc:
00:39:af:d5:4a:8a:a4:92:9f:7d:c8:58:a4:1d:c2:b7:dc:8d:
59:65:5f:bc:c3:05:f7:83:e8:11:84:a7:33:96:14:ca:df:12:
c6:98:0a:63:d4:d0:ed:02:43:db:d7:f6:10:93:f5:82:60:82:
b2:5c:b7:2b:b7:ea:6f:22:78:a3:da:7d:08:e1:a5:64:ef:b5:
de:3e:36:a9:0d:db:0a:d9:69:e4:2b:f4:aa:1b:d0:8d:ac:c2:
9c:2f:36:8a:74:72:84:f5:5c:a8:65:9e:23:33:3f:35:fc:a3:
94:12:23:48:ee:d9:2f:fd:29:31:26:be:c7:1b:6a:52:ab:24:
10:65:fd:19:12:32:35:dc:71:e9:dc:06:b5:b0:95:da:07:97:
df:15:b5:bc:4b:60:c4:36:93:db:d1:a3:48:59:fa:b3:09:7b:
10:0d:f6:53:59:fc:20:60:91:31:4c:65:65:0a:25:0b:88:09:
29:20:0c:62:02:e5:bb:d9:63:5f:8f:70:2b:e2:54:f8:7a:ec:
74:60:ce:ba:ba:10:b3:7b:39:6b:60:8e:44:90:44:99:20:67:
89:5e:80:22:a2:12:15:5c:fe:8e:3c:29:57:50:97:46:d3:b1:
04:38:d6:0a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVtE781qVPsoo817naOQ5mTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZWY0ZGE1NmNiOTQwZDlmMmY3ZDAyMWFmMmE2MWZiZDNi
MTRlYTgwHhcNMjMwMTAxMTEyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTNhMzI5NDRhZWQxNjhkZTRlZGQzOTZmYTZjOWVlNWY1NDA2NDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLyYgNG6/oaSEvg4U3XeqJ6gKwOS
zvww/z5B5s6xfq/ui9ywiqpisjVcFR/lky+1TfA4noaI9NabaNqF05k37bUp8Dr0
B2N04MEMyQqv/0tThgerfla7QGTaVhdziHl5lfOiDwXVlEQuhfxg/ElB3eWDNT4S
zja5A38u0THZ3gjZE0LOxTEuBCTY3eN1J2ADTblv6uJto5Ka9/jwziXu5qxpVt42
BIdqS+CKG1C5nHmAxh+/Poer4otb+3ZJyb/epPZEo+QdS5d7Wo8HhGZ5i0JjilNx
cJZeWvTkiWTTcoB34DPjEt0S73ppcOlpKLwfkDs4VTGelRJnF+pv89yPzwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFN46MpRK7RaN5O3TlvpsnuX1QGQ4MB8GA1UdIwQY
MBaAFKzvTaVsuUDZ8vfQIa8qYfvTsU6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck85TnBXeTVRTm55OTlBaHJ5cGgtOU94VHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hNWMwODgtY2ZkYy00Yjk1LWFiZjQt
MzkxMWJiYzU0NzQ3LzEvM2pveWxFcnRGbzNrN2RPVy1teWU1ZlZBWkRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9hNWMwODgtY2ZkYy00Yjk1LWFiZjQtMzkxMWJiYzU0NzQ3
LzEvck85TnBXeTVRTm55OTlBaHJ5cGgtOU94VHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhL4QDAN
BgkqhkiG9w0BAQsFAAOCAQEAgJ+vYNbLUYrxCOhS1yva+T3cADmv1UqKpJKffchY
pB3Ct9yNWWVfvMMF94PoEYSnM5YUyt8SxpgKY9TQ7QJD29f2EJP1gmCCsly3K7fq
byJ4o9p9COGlZO+13j42qQ3bCtlp5Cv0qhvQjazCnC82inRyhPVcqGWeIzM/Nfyj
lBIjSO7ZL/0pMSa+xxtqUqskEGX9GRIyNdxx6dwGtbCV2geX3xW1vEtgxDaT29Gj
SFn6swl7EA32U1n8IGCRMUxlZQolC4gJKSAMYgLlu9ljX49wK+JU+HrsdGDOuroQ
s3s5a2CORJBEmSBniV6AIqISFVz+jjwpV1CXRtOxBDjWCg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:17 2025 by rpki-client