Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1XpbwUTH2_0M_WxEW1EtRRHYpaI.roa
File: 1XpbwUTH2_0M_WxEW1EtRRHYpaI.roa (raw, json)
Hash identifier: 7my3bPjLUOZ/ZK7Q0uBEFaez1fle4dATujiLLinw+yQ=
Subject key identifier: D5:7A:5B:C1:44:C7:DB:FD:0C:FD:6C:44:5B:51:2D:45:11:D8:A5:A2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018750C454F226FBA695401D686086FE4867
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1XpbwUTH2_0M_WxEW1EtRRHYpaI.roa
Signing time: Wed 05 Apr 2023 09:34:16 +0000
ROA not before: Wed 05 Apr 2023 09:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208690
IP address blocks: 2a0e:97c0:6d0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:c4:54:f2:26:fb:a6:95:40:1d:68:60:86:fe:48:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 5 09:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d57a5bc144c7dbfd0cfd6c445b512d4511d8a5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:71:da:10:62:78:01:98:e1:69:40:ce:91:
e4:2e:7c:63:ce:3e:e1:48:60:da:8b:22:7a:8d:30:
25:f6:a4:a4:a8:0a:43:cd:d7:88:8c:89:4c:f1:fa:
ec:ad:e9:be:34:fa:d1:b4:24:a5:5d:eb:f9:e6:8b:
15:ec:fc:8f:f6:52:91:be:ba:9a:c3:75:6e:88:47:
a3:ee:78:b6:30:bb:ac:1b:b7:15:99:7e:3f:1d:78:
f7:7b:36:65:00:30:30:7d:50:9c:00:46:3a:63:27:
4e:2b:b0:b8:d4:fe:66:73:a7:8a:ed:9e:4d:4b:d1:
30:e4:3a:15:1a:79:c8:37:60:d1:dd:3b:0e:e2:ee:
47:14:bb:23:d0:9f:36:e1:20:d6:c3:7c:85:54:8f:
89:bd:dc:2b:3d:8d:a5:11:12:85:e0:9b:66:d5:ae:
31:b7:06:ad:f1:b4:b8:74:d2:4e:ce:73:d2:e9:88:
c1:a1:d6:f9:ca:96:c0:95:79:6d:55:92:a7:8b:aa:
6d:00:1d:6d:d5:84:f3:2f:f1:22:14:ad:51:f3:e1:
35:e9:76:63:d0:4c:d0:e5:ce:c2:2b:93:2a:26:42:
4f:b7:7e:a2:2f:61:9d:a0:a0:8e:d9:f2:8b:3c:35:
96:25:30:57:39:52:11:4c:43:4a:1a:df:2a:f9:ca:
92:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7A:5B:C1:44:C7:DB:FD:0C:FD:6C:44:5B:51:2D:45:11:D8:A5:A2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1XpbwUTH2_0M_WxEW1EtRRHYpaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:6d0::/44
Signature Algorithm: sha256WithRSAEncryption
16:ea:80:f6:78:23:cd:ca:b4:b7:d9:55:6f:1e:98:e4:e8:a2:
2c:05:f7:57:b8:20:8c:d6:c4:60:89:93:86:83:08:08:85:dd:
6c:d7:0f:05:18:ac:3d:42:01:ce:fc:f3:91:e6:a7:a3:ee:57:
00:18:a8:64:a2:fc:db:44:77:92:f2:cd:77:ee:08:cf:0e:c6:
2b:7b:80:67:d8:03:bd:ca:80:65:25:57:4a:2b:64:2e:28:58:
8d:9c:f5:f9:75:46:52:2f:53:b3:29:b8:9a:30:0e:4e:90:9c:
6a:6d:c1:d9:c8:e3:d5:55:e4:3f:14:ac:8d:09:de:b3:2b:ea:
dd:2d:d0:3f:63:78:70:8b:db:16:88:53:26:0d:77:d5:39:2a:
ff:b7:bf:e7:e5:7b:a2:a9:e3:6f:bc:f3:bc:6d:39:ca:26:c4:
b5:c0:e3:9b:e4:08:c5:8a:ae:51:3b:3e:24:74:49:1a:bb:b4:
a4:4e:80:c3:cf:ed:eb:dd:16:b3:76:f7:6b:a8:2e:87:20:5c:
62:ca:20:69:8d:a4:a6:d3:7e:0b:ff:23:cb:0d:98:fe:e2:98:
83:d1:0c:be:d4:f9:b7:a5:a4:8b:bc:ee:78:71:81:f9:01:22:
8c:e6:5c:bf:72:08:e0:c5:1e:b2:57:f5:cb:98:92:d2:5a:0b:
dc:4b:75:e3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYdQxFTyJvumlUAdaGCG/khnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNDA1MDkzNDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTdhNWJjMTQ0YzdkYmZkMGNmZDZjNDQ1YjUxMmQ0NTExZDhhNWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsptx2hBieAGY4WlAzpHkLnxjzj7h
SGDaiyJ6jTAl9qSkqApDzdeIjIlM8frsrem+NPrRtCSlXev55osV7PyP9lKRvrqa
w3VuiEej7ni2MLusG7cVmX4/HXj3ezZlADAwfVCcAEY6YydOK7C41P5mc6eK7Z5N
S9Ew5DoVGnnIN2DR3TsO4u5HFLsj0J824SDWw3yFVI+JvdwrPY2lERKF4Jtm1a4x
twat8bS4dNJOznPS6YjBodb5ypbAlXltVZKni6ptAB1t1YTzL/EiFK1R8+E16XZj
0EzQ5c7CK5MqJkJPt36iL2GdoKCO2fKLPDWWJTBXOVIRTENKGt8q+cqSHQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNV6W8FEx9v9DP1sRFtRLUUR2KWiMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvMVhwYndVVEgyXzBNX1d4RVcxRXRSUkhZcGFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAbQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAW6oD2eCPNyrS32VVvHpjk6KIsBfdXuCCM1sRg
iZOGgwgIhd1s1w8FGKw9QgHO/POR5qej7lcAGKhkovzbRHeS8s137gjPDsYre4Bn
2AO9yoBlJVdKK2QuKFiNnPX5dUZSL1OzKbiaMA5OkJxqbcHZyOPVVeQ/FKyNCd6z
K+rdLdA/Y3hwi9sWiFMmDXfVOSr/t7/n5XuiqeNvvPO8bTnKJsS1wOOb5AjFiq5R
Oz4kdEkau7SkToDDz+3r3RazdvdrqC6HIFxiyiBpjaSm034L/yPLDZj+4piD0Qy+
1Pm3paSLvO54cYH5ASKM5ly/cgjgxR6yV/XLmJLSWgvcS3Xj
-----END CERTIFICATE-----
Generated at Fri Apr 18 10:44:03 2025 by rpki-client