Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eptjF3fvfHeBOZ7t_cHokM2vKVM.roa
File: eptjF3fvfHeBOZ7t_cHokM2vKVM.roa (raw, json)
Hash identifier: 1MgneYylw1rCKvZP62Xn2+D1H8agxOuA5MvdLYZRrQk=
Subject key identifier: 7A:9B:63:17:77:EF:7C:77:81:39:9E:ED:FD:C1:E8:90:CD:AF:29:53
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 10E844F9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eptjF3fvfHeBOZ7t_cHokM2vKVM.roa
Signing time: Sat 01 Jan 2022 09:05:50 +0000
ROA not before: Sat 01 Jan 2022 09:05:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212793
IP address blocks: 2a10:2f01:2d0::/44 maxlen: 48
2a10:2f01:350::/44 maxlen: 48
2a10:2f00:147::/48 maxlen: 48
2a0f:e401:130::/44 maxlen: 48
2a10:2f01:2d1::/48 maxlen: 48
2a0e:b107:88f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283657465 (0x10e844f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 1 09:05:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a9b631777ef7c7781399eedfdc1e890cdaf2953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:75:ed:6f:ca:67:52:9e:6a:d2:7c:ef:6d:
de:e9:79:f6:e1:a1:63:1c:e5:6a:ec:6b:a2:03:2f:
8b:de:c3:ce:3c:85:7a:de:6a:7b:f6:34:ee:31:99:
31:5b:7e:0b:2c:2b:36:4a:5a:a0:68:ba:e6:f3:98:
0b:11:1d:32:ee:f0:36:29:01:fc:7c:26:4e:f5:20:
ea:2c:ef:9f:01:cf:9f:37:f1:f3:33:63:0c:e4:b1:
bb:65:df:a3:3c:a7:78:b0:28:e8:a6:2f:38:cd:79:
7f:6b:60:a0:4d:dd:3e:a3:98:7f:33:9c:32:52:21:
29:49:40:b2:3d:6e:a7:3e:88:3d:6c:b3:ce:80:ed:
cf:cb:5f:0d:38:44:e4:c2:f0:cd:6b:70:23:32:f6:
b6:06:88:79:56:35:8b:66:52:74:26:13:f6:5a:2c:
dd:76:46:df:19:5b:16:91:cb:6c:0d:df:1d:3b:2a:
22:23:08:3d:2a:78:7a:cc:9f:52:e2:6c:ed:f3:56:
ba:97:b8:81:fd:d1:87:bf:25:a7:3e:f5:e3:47:d8:
a8:4f:18:07:ff:76:e9:d5:76:f3:05:f0:09:96:ee:
c7:f1:d0:9e:be:fe:cd:04:db:46:b4:42:92:a5:81:
84:93:86:39:89:0b:85:3b:4c:e7:dc:b7:ff:c8:35:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9B:63:17:77:EF:7C:77:81:39:9E:ED:FD:C1:E8:90:CD:AF:29:53
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eptjF3fvfHeBOZ7t_cHokM2vKVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:88f::/48
2a0f:e401:130::/44
2a10:2f00:147::/48
2a10:2f01:2d0::/44
2a10:2f01:350::/44
Signature Algorithm: sha256WithRSAEncryption
8e:59:f6:38:71:28:6c:aa:40:c9:78:34:37:b0:79:30:86:42:
43:f2:c0:8f:0e:89:01:d6:ff:f8:87:6d:50:9a:54:65:cb:2d:
79:af:8d:f7:16:07:d7:53:63:bb:df:f0:30:84:69:9a:5b:23:
1f:82:ea:8e:7b:13:5a:88:a6:f6:bf:49:1a:1b:87:ba:3f:c4:
0a:91:84:ea:ab:f9:09:87:a5:c6:6b:06:b3:f6:48:8d:56:f6:
49:8f:1b:a6:d4:0b:cd:93:44:a2:3a:ed:b9:f5:1c:1d:c7:fa:
2c:0e:c6:7e:0a:40:35:46:e8:a3:00:11:b3:2e:6c:a3:ae:74:
66:9e:44:31:cc:34:a6:a8:39:f2:af:9a:fe:68:69:4c:d1:7f:
32:33:ee:57:24:65:40:f8:3d:65:46:94:dd:65:4f:d0:0a:40:
ed:8e:57:b7:02:f4:23:e7:e7:9a:45:36:ba:72:64:41:dd:bd:
c8:de:cb:e8:8c:3c:2a:69:98:d5:e8:7c:f3:f9:e4:40:c1:71:
53:3c:71:0b:cd:d5:f2:03:89:86:9a:f9:f4:1b:98:9d:f3:d2:
56:0d:52:b2:05:f5:2a:11:d9:84:8b:40:15:3a:0c:e8:e6:e9:
7e:fe:b7:ba:cf:c7:21:b0:1b:38:7c:da:a2:6f:a9:4e:ec:2a:
58:d9:42:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIEEOhE+TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDEw
MTA5MDU1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2E5YjYzMTc3N2Vm
N2M3NzgxMzk5ZWVkZmRjMWU4OTBjZGFmMjk1MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKp4de1vymdSnmrSfO9t3ul59uGhYxzlauxrogMvi97DzjyF
et5qe/Y07jGZMVt+CywrNkpaoGi65vOYCxEdMu7wNikB/HwmTvUg6izvnwHPnzfx
8zNjDOSxu2XfozyneLAo6KYvOM15f2tgoE3dPqOYfzOcMlIhKUlAsj1upz6IPWyz
zoDtz8tfDThE5MLwzWtwIzL2tgaIeVY1i2ZSdCYT9los3XZG3xlbFpHLbA3fHTsq
IiMIPSp4esyfUuJs7fNWupe4gf3Rh78lpz7140fYqE8YB/926dV28wXwCZbux/HQ
nr7+zQTbRrRCkqWBhJOGOYkLhTtM59y3/8g1KL8CAwEAAaOCAjAwggIsMB0GA1Ud
DgQWBBR6m2MXd+98d4E5nu39weiQza8pUzAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
L2VwdGpGM2Z2ZkhlQk9aN3RfY0hva00ydktWTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwMwQCAAIwLQMHACoOsQcIjwMHBCoP5AEBMAMHACoQ
LwABRwMHBCoQLwEC0AMHBCoQLwEDUDANBgkqhkiG9w0BAQsFAAOCAQEAjln2OHEo
bKpAyXg0N7B5MIZCQ/LAjw6JAdb/+IdtUJpUZcstea+N9xYH11Nju9/wMIRpmlsj
H4LqjnsTWoim9r9JGhuHuj/ECpGE6qv5CYelxmsGs/ZIjVb2SY8bptQLzZNEojrt
ufUcHcf6LA7GfgpANUboowARsy5so650Zp5EMcw0pqg58q+a/mhpTNF/MjPuVyRl
QPg9ZUaU3WVP0ApA7Y5XtwL0I+fnmkU2unJkQd29yN7L6Iw8KmmY1eh88/nkQMFx
UzxxC83V8gOJhpr59BuYnfPSVg1SsgX1KhHZhItAFToM6Obpfv63us/HIbAbOHza
om+pTuwqWNlCSA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:02 2023 by rpki-client on console-ams.rpki-client.org