Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/5M3-JZYSgxWRJlcU3qr-Os5e0RM.roa
File: 5M3-JZYSgxWRJlcU3qr-Os5e0RM.roa (raw, json)
Hash identifier: 4jeHcZXXdvPKzct3OPD+t1QN96KQrecn4vnr6nLZmoE=
Subject key identifier: E4:CD:FE:25:96:12:83:15:91:26:57:14:DE:AA:FE:3A:CE:5E:D1:13
Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial: 03C4B7A8
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/5M3-JZYSgxWRJlcU3qr-Os5e0RM.roa
Signing time: Sat 01 Jan 2022 13:56:45 +0000
ROA not before: Sat 01 Jan 2022 13:56:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2643
IP address blocks: 2001:678:7d8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63223720 (0x3c4b7a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Validity
Not Before: Jan 1 13:56:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4cdfe259612831591265714deaafe3ace5ed113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:d2:9f:b0:1d:ac:be:d0:27:cd:09:fd:ef:
fb:4d:58:f4:74:35:79:f7:b9:5c:08:03:eb:4e:86:
03:59:7c:5f:04:1b:f5:d5:ca:ad:35:10:72:b5:dd:
66:d8:b4:27:3c:b8:bb:c7:f9:63:26:cf:57:80:17:
14:d7:06:b3:a4:c5:c4:0c:92:1e:9e:d3:fe:31:46:
5b:04:da:8c:5a:00:5b:9a:06:db:89:bb:bd:55:9d:
e2:5c:d7:a0:31:46:75:10:66:2e:55:66:56:52:5f:
25:2b:eb:31:17:4d:37:47:f2:37:d0:d5:50:d6:f1:
9c:6e:04:36:db:17:04:68:3e:d9:3a:cc:fe:bb:60:
90:fb:c4:b9:43:e1:8b:06:d5:7c:fc:d1:93:71:33:
34:a0:4f:46:98:51:1b:45:07:b4:07:31:c6:89:45:
17:af:65:0b:96:b7:62:0a:04:f5:1d:9a:f4:34:45:
da:64:30:df:ad:cd:c0:63:90:ad:d4:83:0f:d4:ee:
9a:36:5c:1b:34:9a:10:19:13:d1:ab:c2:8a:76:62:
ab:8c:c2:de:c5:b9:8b:89:aa:d0:7e:67:79:46:1f:
48:aa:aa:c4:b8:1e:ad:9d:03:ca:61:84:e6:04:d8:
ef:a3:6f:95:fb:2e:2f:fb:78:43:17:a3:5f:8b:1d:
92:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CD:FE:25:96:12:83:15:91:26:57:14:DE:AA:FE:3A:CE:5E:D1:13
X509v3 Authority Key Identifier:
keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/5M3-JZYSgxWRJlcU3qr-Os5e0RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:7d8::/48
Signature Algorithm: sha256WithRSAEncryption
51:e4:e6:f3:69:b4:d4:49:ed:13:80:ee:fd:ea:31:60:ac:91:
fa:41:9c:0b:e7:67:e7:df:6d:fd:25:63:96:1c:17:c7:cc:bb:
bc:80:ad:51:d3:fa:4f:f4:00:e2:59:91:b0:86:de:be:81:54:
54:7c:d0:7a:75:7c:fc:2d:58:ab:fc:93:12:bb:12:70:dc:3f:
e5:30:27:4c:21:a5:1f:4f:58:66:32:1c:e9:bd:d1:24:9e:18:
19:32:5d:0d:33:8e:59:ca:4e:66:f0:7f:72:12:69:e6:d0:70:
18:0b:d1:56:6d:aa:09:d1:56:5a:9c:4b:1b:c3:45:b3:1f:6a:
b6:95:be:a0:cb:03:98:7d:d8:4b:e9:de:17:e8:70:4a:9e:f6:
40:1b:57:cf:1c:f1:30:9a:dd:46:ab:a8:1c:5a:6a:fe:aa:fe:
29:66:8d:cb:db:de:49:8f:80:ae:da:5f:37:7f:cc:0c:a4:ac:
3e:95:ea:86:8d:a1:da:71:61:27:ce:b7:b9:0f:32:26:38:6b:
d0:bc:c4:56:a2:0f:b4:af:08:1e:be:ce:02:4b:41:8b:1a:36:
4f:a2:42:7f:8a:0f:6c:8c:06:11:96:3a:4f:9d:4b:f2:38:dc:
b7:72:c4:f7:4d:68:ce:e0:ed:0b:a6:8b:4a:0f:3a:b8:d7:45:
eb:fb:33:ba
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEA8S3qDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTljNzI0M2JlZjJkYzc3NWFlNjc2OTI4ODlkNWQyNmMxYjJkMTQ4MB4XDTIyMDEw
MTEzNTY0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTRjZGZlMjU5NjEy
ODMxNTkxMjY1NzE0ZGVhYWZlM2FjZTVlZDExMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALam0p+wHay+0CfNCf3v+01Y9HQ1efe5XAgD606GA1l8XwQb
9dXKrTUQcrXdZti0Jzy4u8f5YybPV4AXFNcGs6TFxAySHp7T/jFGWwTajFoAW5oG
24m7vVWd4lzXoDFGdRBmLlVmVlJfJSvrMRdNN0fyN9DVUNbxnG4ENtsXBGg+2TrM
/rtgkPvEuUPhiwbVfPzRk3EzNKBPRphRG0UHtAcxxolFF69lC5a3YgoE9R2a9DRF
2mQw363NwGOQrdSDD9TumjZcGzSaEBkT0avCinZiq4zC3sW5i4mq0H5neUYfSKqq
xLgerZ0DymGE5gTY76NvlfsuL/t4QxejX4sdkrcCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTkzf4llhKDFZEmVxTeqv46zl7REzAfBgNVHSMEGDAWgBQ1nHJDvvLcd1rm
dpKInV0mwbLRSDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05aeHlRNzd5M0hkYTVuYVNpSjFkSnNHeTBVZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGIvNTU1YmM5LTRlMTktNDgyOC04ZWJhLTYxZmZiNjUwNjY0NC8x
LzVNMy1KWllTZ3hXUkpsY1UzcXItT3M1ZTBSTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIv
NTU1YmM5LTRlMTktNDgyOC04ZWJhLTYxZmZiNjUwNjY0NC8xL05aeHlRNzd5M0hk
YTVuYVNpSjFkSnNHeTBVZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngH2DANBgkqhkiG9w0BAQsF
AAOCAQEAUeTm82m01EntE4Du/eoxYKyR+kGcC+dn599t/SVjlhwXx8y7vICtUdP6
T/QA4lmRsIbevoFUVHzQenV8/C1Yq/yTErsScNw/5TAnTCGlH09YZjIc6b3RJJ4Y
GTJdDTOOWcpOZvB/chJp5tBwGAvRVm2qCdFWWpxLG8NFsx9qtpW+oMsDmH3YS+ne
F+hwSp72QBtXzxzxMJrdRquoHFpq/qr+KWaNy9veSY+ArtpfN3/MDKSsPpXqho2h
2nFhJ863uQ8yJjhr0LzEVqIPtK8IHr7OAktBixo2T6JCf4oPbIwGEZY6T51L8jjc
t3LE901ozuDtC6aLSg86uNdF6/szug==
-----END CERTIFICATE-----
Generated at Tue Apr 15 05:18:54 2025 by rpki-client