Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/fUDsUOcfOb9RRAG5Pahp35j4-6Y.roa
File: fUDsUOcfOb9RRAG5Pahp35j4-6Y.roa (raw, json)
Hash identifier: 4dLdEjwlX7N/W7JRtjzJJK9rkOE2SYUW4mvTp7q2d10=
Subject key identifier: 7D:40:EC:50:E7:1F:39:BF:51:44:01:B9:3D:A8:69:DF:98:F8:FB:A6
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 018571B0C4CD86D3B7C821C07C13C80D25C6
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/fUDsUOcfOb9RRAG5Pahp35j4-6Y.roa
Signing time: Mon 02 Jan 2023 08:54:48 +0000
ROA not before: Mon 02 Jan 2023 08:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 2a0c:8dc7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:c4:cd:86:d3:b7:c8:21:c0:7c:13:c8:0d:25:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: Jan 2 08:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d40ec50e71f39bf514401b93da869df98f8fba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ce:e7:9a:75:8c:94:ab:f5:ff:dd:e6:03:89:
ed:e0:e2:4e:47:c3:b7:1d:7b:07:f4:67:97:a3:55:
73:47:c2:16:20:31:ee:8b:b6:ab:02:cf:3c:02:93:
f1:f1:34:47:d4:5e:be:cf:0e:ca:a7:0c:48:f7:e6:
fa:a0:e0:e2:2c:32:d0:06:ee:d2:92:f9:07:10:f0:
22:f2:5c:da:67:bb:c4:db:49:68:a6:23:b0:6c:3b:
de:75:5d:9c:4a:ee:d6:25:53:e7:d2:bb:bf:8f:82:
e6:af:ae:ac:6d:04:d4:ca:c0:39:0b:ca:df:27:00:
15:67:11:38:de:d4:1a:99:bb:91:5c:6a:8e:56:02:
27:10:34:4e:24:1f:94:00:5e:f6:49:83:9f:d6:2f:
49:82:50:69:ac:e3:be:75:1e:44:1a:03:72:8d:54:
60:15:b2:40:a8:d2:b2:34:08:e5:d3:51:9b:cb:c8:
05:18:71:ec:61:c8:08:e7:5f:d7:92:8e:73:ce:60:
a3:b6:01:34:cd:65:47:0d:73:ca:38:95:5e:6b:98:
78:be:ab:4b:d9:33:ac:17:75:80:85:65:07:fc:ee:
04:d8:b9:b6:87:fa:ec:b9:b4:3c:f8:3c:a5:d8:71:
67:1e:e9:1e:b0:6b:3e:28:f5:ad:b3:a8:58:3d:98:
6d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:40:EC:50:E7:1F:39:BF:51:44:01:B9:3D:A8:69:DF:98:F8:FB:A6
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/fUDsUOcfOb9RRAG5Pahp35j4-6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:8dc7::/32
Signature Algorithm: sha256WithRSAEncryption
7b:02:40:61:c5:c7:c1:47:f9:5d:f8:92:c3:fe:5d:bb:6d:96:
4c:47:93:dd:06:d2:04:98:19:dc:0f:d3:eb:69:a8:42:80:e5:
40:20:d5:e0:cf:b3:c0:30:70:a1:cb:bd:83:77:f4:ae:5a:ce:
4d:cf:fc:50:55:f0:70:c5:68:ce:3e:c2:85:9e:4e:d4:82:1f:
3c:7c:db:1c:13:ba:94:7c:40:3b:20:5d:67:93:cc:8e:e3:f0:
2f:e9:c9:21:4f:60:1e:88:56:e8:c1:a0:15:06:47:29:09:88:
ae:ee:97:a5:e5:37:a3:6b:21:0d:2e:83:ee:cb:88:88:b3:3a:
82:da:51:56:24:c5:96:65:3f:63:c3:14:33:71:3e:ec:84:fc:
f0:a2:46:fb:0b:19:1a:8f:22:1b:fc:e0:a8:26:e3:a4:9c:ed:
dc:e1:89:f9:11:23:f1:28:9e:e2:a7:40:49:77:e3:06:46:34:
3f:e7:ec:9c:5a:e9:19:52:06:6c:87:79:45:7a:6a:d2:f0:16:
58:46:2a:38:d0:d1:d5:90:e2:87:aa:c3:ab:63:0a:14:55:17:
f7:30:5f:66:77:da:a7:a1:42:3d:b1:3d:9c:b3:46:99:af:0c:
b5:f7:2e:d6:87:3d:f9:f9:ff:e0:9e:64:36:b8:35:7b:11:c1:
66:2d:6d:7a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVxsMTNhtO3yCHAfBPIDSXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NzMzZTlkZTk0ODViNDQ2NzFjOGU1MTFkYTIyMWU0MTUz
YzcxMWIwHhcNMjMwMTAyMDg1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDQwZWM1MGU3MWYzOWJmNTE0NDAxYjkzZGE4NjlkZjk4ZjhmYmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks7nmnWMlKv1/93mA4nt4OJOR8O3
HXsH9GeXo1VzR8IWIDHui7arAs88ApPx8TRH1F6+zw7KpwxI9+b6oODiLDLQBu7S
kvkHEPAi8lzaZ7vE20lopiOwbDvedV2cSu7WJVPn0ru/j4Lmr66sbQTUysA5C8rf
JwAVZxE43tQambuRXGqOVgInEDROJB+UAF72SYOf1i9JglBprOO+dR5EGgNyjVRg
FbJAqNKyNAjl01Gby8gFGHHsYcgI51/Xko5zzmCjtgE0zWVHDXPKOJVea5h4vqtL
2TOsF3WAhWUH/O4E2Lm2h/rsubQ8+Dyl2HFnHukesGs+KPWts6hYPZhtIwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFH1A7FDnHzm/UUQBuT2oad+Y+PumMB8GA1UdIwQY
MBaAFLdzPp3pSFtEZxyOUR2iIeQVPHEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xN2U0NTAtODgxOC00YTI3LTlmMzUt
NTE4Y2QxNDcxM2ViLzEvZlVEc1VPY2ZPYjlSUkFHNVBhaHAzNWo0LTZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8xN2U0NTAtODgxOC00YTI3LTlmMzUtNTE4Y2QxNDcxM2Vi
LzEvdDNNLW5lbElXMFJuSEk1UkhhSWg1QlU4Y1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgyNxzAN
BgkqhkiG9w0BAQsFAAOCAQEAewJAYcXHwUf5XfiSw/5du22WTEeT3QbSBJgZ3A/T
62moQoDlQCDV4M+zwDBwocu9g3f0rlrOTc/8UFXwcMVozj7ChZ5O1IIfPHzbHBO6
lHxAOyBdZ5PMjuPwL+nJIU9gHohW6MGgFQZHKQmIru6XpeU3o2shDS6D7suIiLM6
gtpRViTFlmU/Y8MUM3E+7IT88KJG+wsZGo8iG/zgqCbjpJzt3OGJ+REj8Sie4qdA
SXfjBkY0P+fsnFrpGVIGbId5RXpq0vAWWEYqONDR1ZDih6rDq2MKFFUX9zBfZnfa
p6FCPbE9nLNGma8Mtfcu1oc9+fn/4J5kNrg1exHBZi1teg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:40 2025 by rpki-client