Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/S-CPhngwzDsl18vqbh8p-KoeAv4.roa
File: S-CPhngwzDsl18vqbh8p-KoeAv4.roa (raw, json)
Hash identifier: lVI61jYrZEi6Vorh8t9ASOYv4/M69j0MqrZAPyXIUoY=
Subject key identifier: 4B:E0:8F:86:78:30:CC:3B:25:D7:CB:EA:6E:1F:29:F8:AA:1E:02:FE
Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial: 0534E1C9
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/S-CPhngwzDsl18vqbh8p-KoeAv4.roa
Signing time: Sat 01 Jan 2022 13:57:29 +0000
ROA not before: Sat 01 Jan 2022 13:57:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206884
IP address blocks: 2001:678:8f8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87351753 (0x534e1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Validity
Not Before: Jan 1 13:57:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4be08f867830cc3b25d7cbea6e1f29f8aa1e02fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:30:28:f9:f5:22:a4:f5:b3:8e:29:fb:5a:
14:d5:9c:41:45:aa:f2:e8:86:86:e1:1f:df:39:8d:
51:fa:3b:fe:07:47:68:e6:03:34:ee:4d:3b:75:09:
cb:d5:df:47:ea:82:3f:d3:79:43:82:f5:f5:32:37:
3b:b8:69:1f:5a:11:a6:b2:78:cc:39:f2:44:76:b5:
ee:eb:5d:0d:60:95:f3:e3:0e:d4:6a:30:ca:d7:bc:
29:e0:81:a8:11:37:ad:25:0b:de:12:b0:99:00:75:
7b:89:af:8e:15:e5:46:6c:e3:c3:0b:77:a3:c9:db:
ee:ad:06:60:61:cc:3a:f1:de:6e:d0:6c:3e:02:9d:
f4:eb:fe:f7:24:f8:01:22:56:f2:39:18:5a:72:6e:
c8:b7:5d:17:d2:f1:bd:04:58:8b:18:78:79:2c:87:
b3:fc:77:a8:b8:79:f0:e7:55:62:45:03:eb:e5:8d:
2a:c2:35:3b:01:45:af:68:1d:b7:5e:4a:49:01:41:
03:6a:37:fe:16:c8:72:b0:0f:a4:7d:53:8b:54:b9:
10:22:7e:37:5f:af:0e:a3:8b:24:82:46:92:66:de:
1b:bf:18:96:c7:ba:ae:e9:1f:d5:b0:17:60:c2:68:
c4:86:93:8f:3c:24:b7:50:81:8f:b5:d7:ab:d5:7f:
d6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E0:8F:86:78:30:CC:3B:25:D7:CB:EA:6E:1F:29:F8:AA:1E:02:FE
X509v3 Authority Key Identifier:
keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/S-CPhngwzDsl18vqbh8p-KoeAv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:8f8::/48
Signature Algorithm: sha256WithRSAEncryption
b9:ad:95:b2:df:c9:2d:7c:43:fa:a3:a6:11:14:06:78:80:43:
86:32:e3:1a:5d:e2:ae:72:f6:b5:4a:65:f8:c5:58:4a:b9:17:
36:41:25:74:97:31:47:49:10:82:76:ed:22:df:87:2e:cd:aa:
73:bd:ad:7c:50:0c:58:e1:0b:51:0f:d4:6b:ec:d4:d1:a3:e4:
a1:41:70:b8:60:ba:39:cb:b6:b3:26:de:f4:fa:5e:6f:79:2a:
41:03:50:e5:c3:b1:33:a1:b5:a9:01:d8:75:76:19:a4:a2:7f:
0d:f0:b3:f0:7f:4f:30:db:d6:07:54:57:64:63:d6:57:b9:91:
c4:14:22:8a:7b:ec:8b:ce:d8:9c:eb:1c:e7:c5:fd:e0:82:fa:
55:03:fc:cf:4d:77:3f:9c:2d:8f:f6:18:3e:3d:49:59:bf:ba:
5a:cc:9b:a6:fd:d5:fc:ad:ba:10:39:ee:65:c7:a5:2c:be:ab:
36:84:67:08:9f:09:11:26:b9:01:38:3e:45:91:f7:1a:39:8c:
b7:ee:6c:67:8c:b2:39:92:7a:7d:b6:7c:3c:ec:7e:c4:3e:02:
05:86:49:2e:f8:b0:9b:c6:af:81:5d:c7:90:2d:76:f0:ff:0f:
ea:d0:16:2d:7e:38:70:29:f1:48:dd:76:45:b6:26:96:37:f2:
8d:9a:54:f0
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBTThyTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
OTM0Njk1NDQyMDMwODJkMmMzYzFkZGYwZjBiYmQ5MGJkYzU2OTQxMB4XDTIyMDEw
MTEzNTcyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGJlMDhmODY3ODMw
Y2MzYjI1ZDdjYmVhNmUxZjI5ZjhhYTFlMDJmZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAME5MCj59SKk9bOOKftaFNWcQUWq8uiGhuEf3zmNUfo7/gdH
aOYDNO5NO3UJy9XfR+qCP9N5Q4L19TI3O7hpH1oRprJ4zDnyRHa17utdDWCV8+MO
1Gowyte8KeCBqBE3rSUL3hKwmQB1e4mvjhXlRmzjwwt3o8nb7q0GYGHMOvHebtBs
PgKd9Ov+9yT4ASJW8jkYWnJuyLddF9LxvQRYixh4eSyHs/x3qLh58OdVYkUD6+WN
KsI1OwFFr2gdt15KSQFBA2o3/hbIcrAPpH1Ti1S5ECJ+N1+vDqOLJIJGkmbeG78Y
lse6rukf1bAXYMJoxIaTjzwkt1CBj7XXq9V/1jMCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRL4I+GeDDMOyXXy+puHyn4qh4C/jAfBgNVHSMEGDAWgBRJNGlUQgMILSw8
Hd8PC72QvcVpQTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NUUnBWRUlEQ0Mwc1BCM2ZEd3U5a0wzRmFVRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2EvZDI5NzMwLTUxNWEtNGJmYi1hZDU1LWUwMzhkODFiM2Y5Ny8x
L1MtQ1Bobmd3ekRzbDE4dnFiaDhwLUtvZUF2NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Ev
ZDI5NzMwLTUxNWEtNGJmYi1hZDU1LWUwMzhkODFiM2Y5Ny8xL1NUUnBWRUlEQ0Mw
c1BCM2ZEd3U5a0wzRmFVRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngI+DANBgkqhkiG9w0BAQsF
AAOCAQEAua2Vst/JLXxD+qOmERQGeIBDhjLjGl3irnL2tUpl+MVYSrkXNkEldJcx
R0kQgnbtIt+HLs2qc72tfFAMWOELUQ/Ua+zU0aPkoUFwuGC6Ocu2sybe9Ppeb3kq
QQNQ5cOxM6G1qQHYdXYZpKJ/DfCz8H9PMNvWB1RXZGPWV7mRxBQiinvsi87YnOsc
58X94IL6VQP8z013P5wtj/YYPj1JWb+6Wsybpv3V/K26EDnuZcelLL6rNoRnCJ8J
ESa5ATg+RZH3GjmMt+5sZ4yyOZJ6fbZ8POx+xD4CBYZJLviwm8avgV3HkC128P8P
6tAWLX44cCnxSN12RbYmljfyjZpU8A==
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:48:39 2025 by rpki-client