Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/FHk64_JWNUqtZbuGQj3s24L99bY.roa
File: FHk64_JWNUqtZbuGQj3s24L99bY.roa (raw, json)
Hash identifier: kDzAK+iAA5VXCdldBioky7WkgdwsEtz3vgSJBXZXmnI=
Subject key identifier: 14:79:3A:E3:F2:56:35:4A:AD:65:BB:86:42:3D:EC:DB:82:FD:F5:B6
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01856C1CA3A58453E1E4719C4E806A8111B9
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/FHk64_JWNUqtZbuGQj3s24L99bY.roa
Signing time: Sun 01 Jan 2023 06:54:54 +0000
ROA not before: Sun 01 Jan 2023 06:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138517
IP address blocks: 2a12:3fc2:dd00::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:a3:a5:84:53:e1:e4:71:9c:4e:80:6a:81:11:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 06:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14793ae3f256354aad65bb86423decdb82fdf5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:45:d2:76:7d:43:13:b6:1e:dc:40:22:69:
ae:dc:72:02:c9:44:03:73:e1:ef:b5:71:6c:be:5b:
62:db:f4:28:43:96:85:c3:95:e5:4f:dc:e4:31:a3:
39:b3:61:d3:ca:de:e1:01:b7:34:5d:cd:0a:ab:23:
8d:99:e3:fc:95:d7:38:d9:fd:47:3d:f2:2e:09:35:
b6:0c:db:50:ae:fa:c0:e9:34:65:0c:26:f7:a5:18:
0e:28:40:cd:73:5b:70:15:b0:d1:66:d5:a4:34:c5:
25:0b:2f:5e:3b:be:8e:3b:a9:95:43:44:80:d6:ff:
53:a1:fd:b0:e1:92:71:80:5b:fd:59:4e:5b:a2:16:
b3:0d:d5:c8:da:9a:e9:09:23:80:4a:6f:50:3f:bb:
24:f0:3b:fb:3d:a8:66:57:97:1e:25:cf:bc:10:b6:
3d:a1:88:71:76:ca:85:b4:da:51:1b:18:b5:e1:49:
8b:af:85:5a:30:d2:06:3b:b3:3e:aa:e9:24:b1:f2:
7b:1d:76:92:9b:88:7b:f8:11:c4:20:45:51:04:b6:
7d:bf:26:ac:37:1a:2b:a5:e5:33:8d:a6:98:fa:a5:
e3:55:60:3e:fc:52:07:fe:1b:b7:36:d4:69:b1:c8:
94:6e:a1:c0:15:49:6a:74:e4:37:ee:63:4d:3a:79:
5a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:79:3A:E3:F2:56:35:4A:AD:65:BB:86:42:3D:EC:DB:82:FD:F5:B6
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/FHk64_JWNUqtZbuGQj3s24L99bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:dd00::/40
Signature Algorithm: sha256WithRSAEncryption
17:81:fa:91:f1:8a:53:59:1e:59:9e:ab:2c:14:bb:5c:68:d1:
d1:c3:1c:66:29:24:29:8b:b3:eb:5d:ec:b2:9a:46:08:12:bc:
db:90:21:d9:23:d5:17:74:51:d3:59:b7:9f:eb:ba:2c:f2:70:
ba:8d:dd:33:2b:28:66:60:37:8c:13:ef:e4:46:e0:2f:41:fb:
9d:02:c7:60:90:88:da:d4:c9:24:25:0a:5f:ae:dc:96:3f:b7:
e8:76:b8:25:bd:b0:48:05:cd:3e:37:12:4c:34:7f:68:8d:06:
67:8e:21:a1:b3:c3:46:3a:86:71:22:80:0f:8b:f6:b7:8d:6f:
65:e8:fb:a5:a2:ad:7c:ef:69:e5:3e:eb:d6:e0:25:9a:fa:2c:
1a:fe:a3:93:24:46:24:32:cb:3f:52:cf:73:20:aa:6c:3b:25:
38:98:d6:bd:44:46:20:2a:98:e5:8f:d5:e3:34:e4:5d:3c:b2:
db:6d:db:ab:11:89:8e:0e:76:72:19:ef:78:a1:ba:50:2e:0d:
41:6d:77:77:fe:a4:6b:d8:61:5a:e7:0d:f6:11:31:c8:67:1b:
c6:27:b2:b6:3e:45:70:9f:90:cc:5d:9a:12:78:d4:8c:a5:8a:
a4:49:dc:43:d0:f3:14:31:4a:1e:fa:7e:c9:e9:a4:46:04:58:
d7:10:89:b2
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVsHKOlhFPh5HGcToBqgRG5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGY3YjFmZDgwMmIzZGM2YWJkN2E1Y2RhNzg2YTYzMTFl
MWQ2M2QwHhcNMjMwMTAxMDY1NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDc5M2FlM2YyNTYzNTRhYWQ2NWJiODY0MjNkZWNkYjgyZmRmNWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUBF0nZ9QxO2HtxAImmu3HICyUQD
c+HvtXFsvlti2/QoQ5aFw5XlT9zkMaM5s2HTyt7hAbc0Xc0KqyONmeP8ldc42f1H
PfIuCTW2DNtQrvrA6TRlDCb3pRgOKEDNc1twFbDRZtWkNMUlCy9eO76OO6mVQ0SA
1v9Tof2w4ZJxgFv9WU5bohazDdXI2prpCSOASm9QP7sk8Dv7PahmV5ceJc+8ELY9
oYhxdsqFtNpRGxi14UmLr4VaMNIGO7M+qukksfJ7HXaSm4h7+BHEIEVRBLZ9vyas
NxorpeUzjaaY+qXjVWA+/FIH/hu3NtRpsciUbqHAFUlqdOQ37mNNOnla/QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBR5OuPyVjVKrWW7hkI97NuC/fW2MB8GA1UdIwQY
MBaAFHmPex/YArPcar16XNp4amMR4dY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTkt
MDlkMGFhMjhlNTUxLzEvRkhrNjRfSldOVXF0WmJ1R1FqM3MyNEw5OWJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTktMDlkMGFhMjhlNTUx
LzEvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhI/wt0w
DQYJKoZIhvcNAQELBQADggEBABeB+pHxilNZHlmeqywUu1xo0dHDHGYpJCmLs+td
7LKaRggSvNuQIdkj1Rd0UdNZt5/ruizycLqN3TMrKGZgN4wT7+RG4C9B+50Cx2CQ
iNrUySQlCl+u3JY/t+h2uCW9sEgFzT43Ekw0f2iNBmeOIaGzw0Y6hnEigA+L9reN
b2Xo+6WirXzvaeU+69bgJZr6LBr+o5MkRiQyyz9Sz3Mgqmw7JTiY1r1ERiAqmOWP
1eM05F08sttt26sRiY4OdnIZ73ihulAuDUFtd3f+pGvYYVrnDfYRMchnG8YnsrY+
RXCfkMxdmhJ41IyliqRJ3EPQ8xQxSh76fsnppEYEWNcQibI=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:42 2025 by rpki-client