Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/fF104_2Ia0x4TkSNH_05DuK6p-4.roa
File: fF104_2Ia0x4TkSNH_05DuK6p-4.roa (raw, json)
Hash identifier: Tny3TRDThEXM/kuulo0MWmI3vKsdHBad6vYKAlCBgrs=
Subject key identifier: 7C:5D:74:E3:FD:88:6B:4C:78:4E:44:8D:1F:FD:39:0E:E2:BA:A7:EE
Certificate issuer: /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial: 01892F4E3D0BADC0B6ACF754DD1F6F62546C
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/fF104_2Ia0x4TkSNH_05DuK6p-4.roa
Signing time: Fri 07 Jul 2023 07:43:23 +0000
ROA not before: Fri 07 Jul 2023 07:43:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205771
IP address blocks: 2a13:740::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2f:4e:3d:0b:ad:c0:b6:ac:f7:54:dd:1f:6f:62:54:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Validity
Not Before: Jul 7 07:43:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c5d74e3fd886b4c784e448d1ffd390ee2baa7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:94:26:9e:26:aa:82:8f:1b:8f:0b:7b:4d:97:
91:86:c8:49:3c:c0:50:4d:ae:00:ea:97:4b:72:61:
0e:c6:37:06:1b:3c:5f:f5:22:20:55:a9:a4:dc:95:
5b:59:06:1f:c2:59:19:54:58:22:5c:fc:45:53:a6:
22:7b:b4:19:bc:bb:e8:aa:68:db:3d:47:15:23:e6:
75:3e:d2:93:1a:2a:e5:54:a3:7d:22:25:5a:b0:9c:
8f:b1:21:36:39:20:1a:5e:59:35:5d:fd:cc:1e:00:
74:cc:b1:c2:37:92:7a:28:9a:30:20:55:39:59:f5:
43:0f:f9:5d:82:32:c6:11:e2:03:1d:4a:b0:1e:74:
11:b7:bb:ae:c2:56:62:6c:4f:4e:cf:d2:da:93:f9:
fc:80:1d:1f:e5:14:9c:15:a7:cc:49:52:ca:c8:33:
c9:4a:ec:ff:5e:46:5d:12:e4:fc:f9:db:16:b6:67:
c2:1c:60:f9:f1:8c:cf:00:dd:c5:04:90:9e:2d:2f:
99:fa:53:48:07:de:23:2d:20:6c:c7:c2:25:ab:c4:
5e:a5:54:db:24:63:f1:82:bd:a1:6b:89:ec:86:86:
28:51:bf:57:2e:59:4c:6e:79:26:64:d2:de:34:bb:
84:54:2f:1e:26:66:bd:54:1a:f6:c2:26:ee:2a:58:
a2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5D:74:E3:FD:88:6B:4C:78:4E:44:8D:1F:FD:39:0E:E2:BA:A7:EE
X509v3 Authority Key Identifier:
keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/fF104_2Ia0x4TkSNH_05DuK6p-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:740::/29
Signature Algorithm: sha256WithRSAEncryption
9e:ed:06:87:c7:ae:5b:cc:64:01:2d:b5:46:d5:bb:a4:26:03:
d4:c6:0d:7d:cd:ae:85:8e:4a:bf:1c:eb:a4:bf:7d:12:8c:38:
7b:ac:fa:30:b7:d5:38:13:81:c1:80:7b:d8:6c:b3:bf:3b:4b:
c8:ee:d3:f0:ce:22:04:c2:1b:20:94:19:c9:38:1a:63:52:4b:
1c:83:8c:ec:08:9f:43:78:04:10:aa:91:ef:b8:20:36:67:ba:
8f:d2:be:4e:99:fd:fd:03:68:bd:78:59:51:84:05:10:5a:b8:
61:e2:6d:6e:fa:15:95:30:62:c1:f1:83:4e:56:e2:ae:b2:2b:
89:21:c6:9a:b0:1a:6b:b1:35:08:af:ba:62:d5:d2:35:96:84:
c5:4e:f7:72:4a:56:55:73:2e:6c:f1:4e:fe:59:96:22:eb:a7:
f5:9a:34:e9:19:48:66:8d:2f:01:f1:b6:fc:f9:1f:5b:68:8e:
4e:d4:01:a6:7f:65:23:cf:20:5a:bb:4d:fb:d8:63:21:07:6b:
98:12:5f:4a:24:72:63:d6:2b:d3:13:e6:e6:a9:15:eb:9d:3c:
b2:85:40:7e:ea:ef:f4:ba:b9:89:d0:55:55:be:6b:11:83:6a:
ee:1a:91:b3:a7:6e:8c:f8:74:c1:a9:f5:1b:2c:6a:ed:a5:02:
49:25:58:08
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYkvTj0LrcC2rPdU3R9vYlRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxOWVkZGIzNjY5MTllZDc1ZjQ2NjBjZmIwZTBiNmU1ZmM0
MDE2MTMwHhcNMjMwNzA3MDc0MzIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzVkNzRlM2ZkODg2YjRjNzg0ZTQ0OGQxZmZkMzkwZWUyYmFhN2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZQmniaqgo8bjwt7TZeRhshJPMBQ
Ta4A6pdLcmEOxjcGGzxf9SIgVamk3JVbWQYfwlkZVFgiXPxFU6Yie7QZvLvoqmjb
PUcVI+Z1PtKTGirlVKN9IiVasJyPsSE2OSAaXlk1Xf3MHgB0zLHCN5J6KJowIFU5
WfVDD/ldgjLGEeIDHUqwHnQRt7uuwlZibE9Oz9Lak/n8gB0f5RScFafMSVLKyDPJ
Suz/XkZdEuT8+dsWtmfCHGD58YzPAN3FBJCeLS+Z+lNIB94jLSBsx8Ilq8RepVTb
JGPxgr2ha4nshoYoUb9XLllMbnkmZNLeNLuEVC8eJma9VBr2wibuKliikwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHxddOP9iGtMeE5EjR/9OQ7iuqfuMB8GA1UdIwQY
MBaAFDGe3bNmkZ7XX0Zgz7DgtuX8QBYTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85YTM2Y2MtNmRjYS00YTJhLWJmNmYt
ZDQ3YmQ3ZDAxOTJmLzEvZkYxMDRfMklhMHg0VGtTTkhfMDVEdUs2cC00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS85YTM2Y2MtNmRjYS00YTJhLWJmNmYtZDQ3YmQ3ZDAxOTJm
LzEvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhMHQDAN
BgkqhkiG9w0BAQsFAAOCAQEAnu0Gh8euW8xkAS21RtW7pCYD1MYNfc2uhY5Kvxzr
pL99Eow4e6z6MLfVOBOBwYB72GyzvztLyO7T8M4iBMIbIJQZyTgaY1JLHIOM7Aif
Q3gEEKqR77ggNme6j9K+Tpn9/QNovXhZUYQFEFq4YeJtbvoVlTBiwfGDTlbirrIr
iSHGmrAaa7E1CK+6YtXSNZaExU73ckpWVXMubPFO/lmWIuun9Zo06RlIZo0vAfG2
/PkfW2iOTtQBpn9lI88gWrtN+9hjIQdrmBJfSiRyY9Yr0xPm5qkV6508soVAfurv
9Lq5idBVVb5rEYNq7hqRs6dujPh0wan1Gyxq7aUCSSVYCA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:20 2025 by rpki-client