Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/6DWqOw6KTxJk9SZjCbKruWsaBKI.roa
File: 6DWqOw6KTxJk9SZjCbKruWsaBKI.roa (raw, json)
Hash identifier: 4+XtCQ087IDcZt10c1/d61ShB8ffh1H2LVvm58mpgeU=
Subject key identifier: E8:35:AA:3B:0E:8A:4F:12:64:F5:26:63:09:B2:AB:B9:6B:1A:04:A2
Certificate issuer: /CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Certificate serial: 01856B0A1CAA8589D5030B19D839DF70F936
Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/6DWqOw6KTxJk9SZjCbKruWsaBKI.roa
Signing time: Sun 01 Jan 2023 01:55:02 +0000
ROA not before: Sun 01 Jan 2023 01:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28795
IP address blocks: 144.127.3.0/24 maxlen: 24
144.127.0.0/16 maxlen: 16
144.127.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:0a:1c:aa:85:89:d5:03:0b:19:d8:39:df:70:f9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Validity
Not Before: Jan 1 01:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e835aa3b0e8a4f1264f5266309b2abb96b1a04a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c0:b6:58:22:5b:06:a3:4a:0f:34:c5:e5:ce:
dd:6a:9e:12:04:cb:9a:71:45:e9:33:46:e7:05:8f:
95:4c:7e:b3:f8:1f:b8:bf:5a:2b:cc:a8:a2:42:2e:
cd:90:ac:a5:99:4c:7c:b8:3c:2e:11:e6:e7:7e:6c:
4a:e3:80:eb:32:2d:c6:3f:76:cb:ce:c9:4f:b3:34:
95:ca:13:2d:8f:07:ed:23:f1:5a:70:06:31:ab:6a:
ac:a9:c1:76:6a:42:0f:93:3f:18:c6:a4:33:38:de:
1c:b8:1d:01:85:ef:c9:e6:18:c1:4b:da:9d:fe:af:
37:c7:4a:f3:7e:5c:90:38:2b:b3:31:73:e1:de:5a:
35:71:b8:ef:ef:13:ba:03:73:e2:10:76:8f:2b:a8:
aa:0a:42:a7:be:b4:20:77:d1:95:86:f5:c8:d9:93:
aa:93:14:42:cd:13:27:0e:ec:fa:cf:93:25:8b:f5:
fe:95:0c:f1:c0:dc:56:c8:80:0f:33:a6:67:26:3b:
7a:e7:50:0e:34:76:4b:7f:32:b4:b2:8a:21:57:2a:
1f:71:3d:3d:56:97:aa:bb:08:49:4a:a1:f1:94:49:
87:40:ce:71:65:02:cc:78:36:06:d7:0e:27:2b:40:
23:42:4e:57:39:c4:c8:4e:e6:24:c3:72:f7:e3:24:
dc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:35:AA:3B:0E:8A:4F:12:64:F5:26:63:09:B2:AB:B9:6B:1A:04:A2
X509v3 Authority Key Identifier:
keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/6DWqOw6KTxJk9SZjCbKruWsaBKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.127.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:a0:fd:5c:7a:ff:7d:9c:92:9d:20:a2:3b:a8:b0:da:98:c1:
67:ec:8d:9a:5c:be:f9:4e:54:ad:c4:a5:bb:30:4e:7a:32:35:
55:b1:71:51:de:d7:a7:2b:91:b6:30:e8:3d:c1:9f:ef:d1:52:
9c:41:d2:20:96:32:62:d0:c4:a7:44:f8:70:2a:9e:7e:98:69:
8d:e7:6c:9e:51:fc:69:be:50:23:81:fe:a4:41:e9:eb:95:ae:
71:f8:e0:4e:47:b2:09:d3:ba:50:1b:e0:65:bd:b3:3f:ef:73:
d9:22:08:69:3a:19:96:f7:26:f1:8b:4c:52:f2:06:57:60:b5:
e3:43:58:3c:ab:c3:24:48:8b:42:e6:82:67:14:27:39:be:36:
42:f5:4e:a4:94:55:95:51:76:36:87:fb:f5:ca:9d:de:05:50:
4d:ec:fa:e9:fc:11:e1:5a:11:30:79:e3:cf:4e:c7:93:80:f5:
4b:b6:e5:86:37:54:b8:01:1b:ba:fd:6b:83:02:4f:ab:ef:d2:
05:48:83:3a:97:be:ed:ad:51:74:b4:52:08:f7:65:fa:0c:08:
f7:d7:7a:c3:cf:bc:90:1f:bb:80:b2:4e:fe:a6:f8:32:88:56:
05:a4:f6:7d:12:81:2d:8c:26:66:ef:2e:ee:1f:f6:7e:aa:2a:
7c:e2:5e:a8
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYVrChyqhYnVAwsZ2DnfcPk2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YjM0NTU2MmQ1NzE4YjZjNGIyMDZiMWFlMzA0ZmM2ODQz
NmFkYjIwHhcNMjMwMTAxMDE1NTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODM1YWEzYjBlOGE0ZjEyNjRmNTI2NjMwOWIyYWJiOTZiMWEwNGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8C2WCJbBqNKDzTF5c7dap4SBMua
cUXpM0bnBY+VTH6z+B+4v1orzKiiQi7NkKylmUx8uDwuEebnfmxK44DrMi3GP3bL
zslPszSVyhMtjwftI/FacAYxq2qsqcF2akIPkz8YxqQzON4cuB0Bhe/J5hjBS9qd
/q83x0rzflyQOCuzMXPh3lo1cbjv7xO6A3PiEHaPK6iqCkKnvrQgd9GVhvXI2ZOq
kxRCzRMnDuz6z5Mli/X+lQzxwNxWyIAPM6ZnJjt651AONHZLfzK0soohVyofcT09
VpequwhJSqHxlEmHQM5xZQLMeDYG1w4nK0AjQk5XOcTITuYkw3L34yTcEwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFOg1qjsOik8SZPUmYwmyq7lrGgSiMB8GA1UdIwQY
MBaAFHWzRVYtVxi2xLIGsa4wT8aENq2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMGVhZWUtMWFkNy00ZTczLWE0ZGMt
OGFlNTFmNjJkMjE4LzEvNkRXcU93NktUeEprOVNaakNiS3J1V3NhQktJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zMGVhZWUtMWFkNy00ZTczLWE0ZGMtOGFlNTFmNjJkMjE4
LzEvZGJORlZpMVhHTGJFc2dheHJqQlB4b1EycmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkH8wDQYJ
KoZIhvcNAQELBQADggEBAIeg/Vx6/32ckp0gojuosNqYwWfsjZpcvvlOVK3Epbsw
TnoyNVWxcVHe16crkbYw6D3Bn+/RUpxB0iCWMmLQxKdE+HAqnn6YaY3nbJ5R/Gm+
UCOB/qRB6euVrnH44E5HsgnTulAb4GW9sz/vc9kiCGk6GZb3JvGLTFLyBldgteND
WDyrwyRIi0LmgmcUJzm+NkL1TqSUVZVRdjaH+/XKnd4FUE3s+un8EeFaETB5489O
x5OA9Uu25YY3VLgBG7r9a4MCT6vv0gVIgzqXvu2tUXS0Ugj3ZfoMCPfXesPPvJAf
u4CyTv6m+DKIVgWk9n0SgS2MJmbvLu4f9n6qKnziXqg=
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:59:00 2025 by rpki-client