Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/kVGDfSDX5o9NS5NElw4J_AQHRI4.roa
File: kVGDfSDX5o9NS5NElw4J_AQHRI4.roa (raw, json)
Hash identifier: kK/AgrtJHf8ZaOt+n6rRaGoIp+GJvdoy/y72J7Mbhoo=
Subject key identifier: 91:51:83:7D:20:D7:E6:8F:4D:4B:93:44:97:0E:09:FC:04:07:44:8E
Certificate issuer: /CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Certificate serial: 12A9B61E
Authority key identifier: B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/kVGDfSDX5o9NS5NElw4J_AQHRI4.roa
Signing time: Sat 01 Jan 2022 08:54:27 +0000
ROA not before: Sat 01 Jan 2022 08:54:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25365
IP address blocks: 2a00:7880:10::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313112094 (0x12a9b61e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Validity
Not Before: Jan 1 08:54:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9151837d20d7e68f4d4b9344970e09fc0407448e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:78:6b:4a:d3:29:9c:1e:99:50:3d:19:96:
22:2f:53:2d:f3:80:ce:54:24:60:24:33:a8:40:f4:
81:40:34:e6:df:8e:72:a9:ad:2e:60:8e:94:76:58:
35:3a:5a:ae:4c:2d:b6:c6:f2:0f:ec:fd:f3:02:1b:
53:d1:bb:00:17:09:88:58:fd:d4:d7:26:58:ec:05:
d7:77:71:c8:dc:16:28:fa:27:54:6a:ce:7c:c5:96:
41:57:64:a2:60:70:b2:51:27:e9:f1:1b:e7:39:76:
73:90:cf:f4:ce:a9:af:f2:46:63:08:79:65:a0:5d:
4e:42:b1:fd:cc:50:00:0b:d0:ea:7d:ab:5e:7c:34:
92:7d:ab:3b:39:f5:b8:c5:dc:c1:1e:09:fa:64:2a:
3b:29:1b:30:be:2d:f5:0f:b5:94:31:5f:bd:a3:3f:
50:0a:88:b3:01:e0:72:b5:1c:34:a0:fa:ce:ed:ad:
d6:73:96:a9:02:e5:aa:4b:65:c4:01:01:c4:f5:50:
21:6d:4f:f5:4e:6e:f3:08:c3:43:86:ef:96:a4:cf:
49:87:35:a9:7c:99:38:2b:19:3b:1c:d9:33:93:fc:
f4:17:6c:ca:9b:4b:6f:89:cf:6c:07:e9:a3:76:01:
1c:fc:c4:b6:86:2c:18:7e:b7:86:ed:09:3e:7f:d8:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:51:83:7D:20:D7:E6:8F:4D:4B:93:44:97:0E:09:FC:04:07:44:8E
X509v3 Authority Key Identifier:
keyid:B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/kVGDfSDX5o9NS5NElw4J_AQHRI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7880:10::/48
Signature Algorithm: sha256WithRSAEncryption
70:fe:7d:14:74:9b:4a:2d:1e:ab:6f:aa:66:27:9c:24:0c:b4:
31:da:af:37:ac:cc:b1:46:57:a4:d2:d8:18:ce:31:79:27:01:
2b:42:6f:e6:ba:3c:fc:e9:e3:78:68:a3:a3:c1:30:81:01:d3:
12:71:1f:df:93:bb:16:09:34:ec:f8:f3:f2:3b:bd:64:80:e6:
b5:1a:ee:13:c2:68:d6:2f:e6:1c:c0:03:fe:64:12:13:69:4e:
7c:06:f5:f8:e6:8d:15:ba:2a:79:b2:50:cb:86:8a:02:74:17:
5c:39:78:f5:e5:6e:20:ee:a6:39:e8:d4:b2:c7:7b:b8:0f:cf:
d1:9d:c0:f6:a7:10:12:e5:d7:87:2c:17:2e:f4:b7:b4:4c:d0:
5f:c9:c5:24:b5:37:5d:a2:08:b8:b9:be:0c:05:86:10:8b:87:
b6:cb:58:3f:c3:05:d3:74:91:dd:a5:3b:83:08:aa:81:cb:d6:
2b:3c:03:94:84:3e:bc:a2:19:af:75:9a:a3:d5:4f:1a:7e:f5:
ea:5f:81:81:7b:cd:cf:53:66:b5:7a:15:77:e4:05:51:7c:25:
d1:21:55:e5:45:05:47:c9:47:c3:b5:ed:fd:1d:1b:6f:95:36:
81:d3:84:d6:fa:e8:7a:5e:ae:71:a5:81:dc:51:e7:86:46:82:
1b:54:7b:7c
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEEqm2HjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTg2MDI4YzlmZWI2ZjE0MmIzZmVjYjY0NjY3ZjQ4ODc0YmE5YzM3MB4XDTIyMDEw
MTA4NTQyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTE1MTgzN2QyMGQ3
ZTY4ZjRkNGI5MzQ0OTcwZTA5ZmMwNDA3NDQ4ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL1deGtK0ymcHplQPRmWIi9TLfOAzlQkYCQzqED0gUA05t+O
cqmtLmCOlHZYNTparkwttsbyD+z98wIbU9G7ABcJiFj91NcmWOwF13dxyNwWKPon
VGrOfMWWQVdkomBwslEn6fEb5zl2c5DP9M6pr/JGYwh5ZaBdTkKx/cxQAAvQ6n2r
Xnw0kn2rOzn1uMXcwR4J+mQqOykbML4t9Q+1lDFfvaM/UAqIswHgcrUcNKD6zu2t
1nOWqQLlqktlxAEBxPVQIW1P9U5u8wjDQ4bvlqTPSYc1qXyZOCsZOxzZM5P89Bds
yptLb4nPbAfpo3YBHPzEtoYsGH63hu0JPn/YFmcCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSRUYN9INfmj01Lk0SXDgn8BAdEjjAfBgNVHSMEGDAWgBS5hgKMn+tvFCs/
7LZGZ/SIdLqcNzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VZWUNqSl9yYnhRclAteTJSbWYwaUhTNm5EYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGEvMjg1ODUwLTc1NTEtNDIyOS04N2I2LTNhNDQ2OGM0ZGZkZi8x
L2tWR0RmU0RYNW85TlM1TkVsdzRKX0FRSFJJNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEv
Mjg1ODUwLTc1NTEtNDIyOS04N2I2LTNhNDQ2OGM0ZGZkZi8xL3VZWUNqSl9yYnhR
clAteTJSbWYwaUhTNm5EYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoAeIAAEDANBgkqhkiG9w0BAQsF
AAOCAQEAcP59FHSbSi0eq2+qZiecJAy0MdqvN6zMsUZXpNLYGM4xeScBK0Jv5ro8
/OnjeGijo8EwgQHTEnEf35O7Fgk07Pjz8ju9ZIDmtRruE8Jo1i/mHMAD/mQSE2lO
fAb1+OaNFboqebJQy4aKAnQXXDl49eVuIO6mOejUssd7uA/P0Z3A9qcQEuXXhywX
LvS3tEzQX8nFJLU3XaIIuLm+DAWGEIuHtstYP8MF03SR3aU7gwiqgcvWKzwDlIQ+
vKIZr3Wao9VPGn716l+BgXvNz1NmtXoVd+QFUXwl0SFV5UUFR8lHw7Xt/R0bb5U2
gdOE1vroel6ucaWB3FHnhkaCG1R7fA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:37 2025 by rpki-client