Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/_E12PrA8bsiN3BHtTKT41aOR5NM.roa
File: _E12PrA8bsiN3BHtTKT41aOR5NM.roa (raw, json)
Hash identifier: Tz+4uap5yi4sougFX0DLHig6yFlwCBeRgZ+xED1TeXI=
Subject key identifier: FC:4D:76:3E:B0:3C:6E:C8:8D:DC:11:ED:4C:A4:F8:D5:A3:91:E4:D3
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 018760EC288359E97F77785DB4EAD5B51D63
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/_E12PrA8bsiN3BHtTKT41aOR5NM.roa
Signing time: Sat 08 Apr 2023 12:51:42 +0000
ROA not before: Sat 08 Apr 2023 12:51:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210852
IP address blocks: 2a11:8481::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:60:ec:28:83:59:e9:7f:77:78:5d:b4:ea:d5:b5:1d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Apr 8 12:51:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc4d763eb03c6ec88ddc11ed4ca4f8d5a391e4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:7e:be:e6:a0:a8:e6:fb:63:bc:d7:67:ed:
58:f5:9e:f6:aa:eb:74:8a:ac:16:e4:7c:ae:54:c0:
67:29:70:6e:4a:28:e7:f9:fe:04:bf:16:93:a8:1f:
7d:94:72:53:c6:60:b5:42:df:ec:ae:7d:bc:f1:9b:
c8:8e:cb:a9:e5:6d:25:75:be:f9:ee:b8:97:62:0f:
c4:2e:ac:6f:8a:a1:9d:d6:b5:54:87:5d:64:05:ac:
09:0f:24:5c:a1:84:92:7f:21:b1:ea:6c:15:1e:83:
4a:54:50:84:2a:2d:49:3c:9c:d9:9e:5b:4b:9e:13:
8e:7e:74:9b:43:77:24:9d:2d:dc:4f:10:5d:60:5d:
38:97:9a:c5:71:ab:6a:cd:ef:3d:1d:89:a9:36:fd:
25:a8:5a:2e:6c:61:3f:3a:f3:d3:43:82:0b:6e:a4:
0c:34:74:65:fc:b3:5f:5a:aa:31:24:da:8e:2c:29:
15:1c:9c:5d:74:d3:7b:9a:b5:ef:b3:d7:08:ef:8a:
ef:3f:7d:28:4a:f0:b6:24:04:5d:e3:f9:cb:99:1d:
41:32:02:7e:4b:9a:c4:c4:dc:14:28:d8:d8:d0:e8:
69:9c:7b:ab:e2:82:3b:a7:69:cd:8d:13:bf:d7:1d:
86:db:d6:3c:9f:01:b3:2b:75:39:71:45:44:8b:4e:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4D:76:3E:B0:3C:6E:C8:8D:DC:11:ED:4C:A4:F8:D5:A3:91:E4:D3
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/_E12PrA8bsiN3BHtTKT41aOR5NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8481::/32
Signature Algorithm: sha256WithRSAEncryption
00:5d:de:bd:88:ba:2f:cf:09:9c:b9:3f:84:cf:b5:45:73:b1:
0c:8f:1a:0d:0b:2f:fb:81:49:3d:55:ed:3d:f8:c6:03:4a:3d:
89:ca:7a:72:b2:66:8d:d0:4c:f3:69:56:8d:8f:4a:8c:75:fa:
7c:25:36:0b:5c:8b:14:1c:33:56:8a:39:37:b9:47:5d:78:1f:
fa:01:7d:48:3d:0e:74:10:ec:57:fd:18:dd:32:4f:cb:55:ad:
6f:07:77:c9:98:5a:ec:6d:ff:07:9e:08:cc:0c:59:96:d6:30:
20:4e:7b:90:9d:b6:4b:14:e7:cc:a0:c2:10:df:71:60:58:e5:
2a:b4:76:e5:5a:59:40:22:e2:75:dd:70:45:3c:b8:61:8e:8f:
c8:59:a0:0a:48:bf:49:3d:70:f5:0b:74:3c:9f:81:ed:a0:62:
0b:5f:59:80:f9:86:3b:31:21:76:0a:0f:0a:d3:cc:0a:dd:e8:
09:aa:86:71:2b:8e:0e:9d:57:ee:9e:bd:ae:68:0c:6b:ce:cd:
b6:db:dc:5f:cc:2f:f0:7d:03:d1:ee:02:cc:7c:26:8d:68:9b:
98:da:14:f9:ed:67:2e:7d:58:33:8b:f8:3e:8d:37:d6:68:10:
05:ba:e8:4d:81:39:be:11:3a:fa:be:cb:22:79:b3:c0:5c:e7:
49:2a:54:71
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYdg7CiDWel/d3hdtOrVtR1jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNTAwMmJhMDg4ZDViZDA5YzE1NTNkY2VkNWIwYmYzOTA3
ZmY3MzYwHhcNMjMwNDA4MTI1MTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzRkNzYzZWIwM2M2ZWM4OGRkYzExZWQ0Y2E0ZjhkNWEzOTFlNGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnit+vuagqOb7Y7zXZ+1Y9Z72qut0
iqwW5HyuVMBnKXBuSijn+f4EvxaTqB99lHJTxmC1Qt/srn288ZvIjsup5W0ldb75
7riXYg/ELqxviqGd1rVUh11kBawJDyRcoYSSfyGx6mwVHoNKVFCEKi1JPJzZnltL
nhOOfnSbQ3cknS3cTxBdYF04l5rFcatqze89HYmpNv0lqFoubGE/OvPTQ4ILbqQM
NHRl/LNfWqoxJNqOLCkVHJxddNN7mrXvs9cI74rvP30oSvC2JARd4/nLmR1BMgJ+
S5rExNwUKNjY0OhpnHur4oI7p2nNjRO/1x2G29Y8nwGzK3U5cUVEi06guQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPxNdj6wPG7IjdwR7Uyk+NWjkeTTMB8GA1UdIwQY
MBaAFLNQAroIjVvQnBVT3O1bC/OQf/c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2Ut
YWYxZWYxZDdhZmI4LzEvX0UxMlByQThic2lOM0JIdFRLVDQxYU9SNU5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2UtYWYxZWYxZDdhZmI4
LzEvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhGEgTAN
BgkqhkiG9w0BAQsFAAOCAQEAAF3evYi6L88JnLk/hM+1RXOxDI8aDQsv+4FJPVXt
PfjGA0o9icp6crJmjdBM82lWjY9KjHX6fCU2C1yLFBwzVoo5N7lHXXgf+gF9SD0O
dBDsV/0Y3TJPy1Wtbwd3yZha7G3/B54IzAxZltYwIE57kJ22SxTnzKDCEN9xYFjl
KrR25VpZQCLidd1wRTy4YY6PyFmgCki/ST1w9Qt0PJ+B7aBiC19ZgPmGOzEhdgoP
CtPMCt3oCaqGcSuODp1X7p69rmgMa87NttvcX8wv8H0D0e4CzHwmjWibmNoU+e1n
Ln1YM4v4Po031mgQBbroTYE5vhE6+r7LInmzwFznSSpUcQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:48 2025 by rpki-client