Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/TEYmFzTlFvk69vw4T-oxrSgql9I.roa
File: TEYmFzTlFvk69vw4T-oxrSgql9I.roa (raw, json)
Hash identifier: xI1VIQ9zku5WMnwB+mO9uVL9AZZN9HQ3TAMSwpyIzv8=
Subject key identifier: 4C:46:26:17:34:E5:16:F9:3A:F6:FC:38:4F:EA:31:AD:28:2A:97:D2
Certificate issuer: /CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
Certificate serial: 0181DF418A6CEC68EA6C652CF6F095127731
Authority key identifier: D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/TEYmFzTlFvk69vw4T-oxrSgql9I.roa
Signing time: Fri 08 Jul 2022 19:20:23 +0000
ROA not before: Fri 08 Jul 2022 19:20:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59645
IP address blocks: 2001:67c:a44::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:df:41:8a:6c:ec:68:ea:6c:65:2c:f6:f0:95:12:77:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
Validity
Not Before: Jul 8 19:20:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c46261734e516f93af6fc384fea31ad282a97d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:c5:75:b6:05:d5:ae:a1:71:14:b2:d8:55:
02:e9:c2:82:c5:d8:5b:55:1a:71:20:f2:40:ea:5e:
10:c6:f6:f8:cc:80:be:16:0a:37:a9:85:76:a5:bf:
b0:8a:1a:78:07:54:89:50:b0:df:cf:fe:7a:be:d0:
28:b0:7d:18:cd:1d:f5:f0:68:d6:83:5a:9f:08:59:
91:7b:2f:a7:95:96:fb:13:ff:89:1a:20:a8:4e:8b:
15:7d:88:ae:6c:b9:67:7f:bc:38:14:02:80:ec:dc:
c6:7f:8a:15:00:3e:8b:0e:b1:16:63:cc:ef:70:4e:
2b:fb:40:9a:59:2b:c9:99:8b:7c:d8:fa:1a:f2:89:
8a:4a:4f:2c:30:0d:4d:b2:28:df:f3:33:20:ac:50:
71:41:1b:bb:21:e4:9f:35:52:e8:99:f3:6f:e1:f5:
53:cd:9b:20:cb:a5:e1:8f:b1:28:e5:bf:87:72:6e:
31:cc:a9:1d:ea:61:92:78:48:93:63:12:63:36:6d:
89:36:73:ec:a4:27:d4:9c:8a:fa:10:7f:ed:fd:90:
67:b7:23:1f:17:f8:8b:52:7d:95:b2:90:01:ff:e1:
6d:9e:8c:86:f2:46:4b:9f:b1:7f:ae:b5:5a:63:73:
92:64:6b:54:29:cc:ab:64:b6:8a:91:0a:bb:f6:54:
4c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:46:26:17:34:E5:16:F9:3A:F6:FC:38:4F:EA:31:AD:28:2A:97:D2
X509v3 Authority Key Identifier:
keyid:D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/TEYmFzTlFvk69vw4T-oxrSgql9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a44::/48
Signature Algorithm: sha256WithRSAEncryption
67:95:2e:6c:e1:bb:4c:8f:52:4b:19:02:5d:ce:f3:f6:2d:e8:
98:1e:8c:13:ad:e3:15:aa:fa:93:1e:bd:7c:6d:2a:d9:d5:6b:
be:7d:86:d0:39:48:3b:a5:ce:d3:19:f6:4e:25:7e:b3:6e:4a:
0d:4b:e8:98:6c:34:ab:33:99:74:35:5a:ad:3f:02:9b:36:25:
f6:bb:cc:ab:42:c0:d7:59:cc:ef:aa:c6:a6:5c:7a:ca:de:72:
69:04:6f:b3:da:95:23:2c:5e:25:69:ca:51:7b:37:34:5e:75:
61:95:f2:2b:ac:c9:d5:63:2d:49:ac:50:6b:b6:60:0e:be:b3:
8a:68:c0:29:20:e0:e6:95:6e:29:91:65:2b:c6:24:06:2a:a7:
1d:69:af:0f:3d:1d:c2:c8:c3:28:04:24:25:02:68:aa:77:10:
98:e0:db:23:5a:67:c9:9f:25:73:12:7c:f2:32:66:28:49:c0:
df:b2:44:57:25:e4:8b:b1:55:dc:8c:ea:a7:d0:d3:e4:a8:69:
7d:93:e4:0f:e7:68:6a:a1:28:95:a8:63:a6:10:f4:47:4a:91:
cd:d5:02:47:b5:9e:dd:80:f8:44:2b:ab:b7:eb:b6:d5:9e:28:
81:f9:b9:6b:fd:4c:f3:bf:7f:ea:a1:fa:ff:87:2c:6d:74:86:
46:47:a5:9e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYHfQYps7GjqbGUs9vCVEncxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MGUwYzRiNDc1MDEwYTViNDJhZGVmMzMzYzM5YmRjMWFk
Yjk2MTEwHhcNMjIwNzA4MTkyMDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzQ2MjYxNzM0ZTUxNmY5M2FmNmZjMzg0ZmVhMzFhZDI4MmE5N2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdzFdbYF1a6hcRSy2FUC6cKCxdhb
VRpxIPJA6l4Qxvb4zIC+Fgo3qYV2pb+wihp4B1SJULDfz/56vtAosH0YzR318GjW
g1qfCFmRey+nlZb7E/+JGiCoTosVfYiubLlnf7w4FAKA7NzGf4oVAD6LDrEWY8zv
cE4r+0CaWSvJmYt82Poa8omKSk8sMA1Nsijf8zMgrFBxQRu7IeSfNVLomfNv4fVT
zZsgy6Xhj7Eo5b+Hcm4xzKkd6mGSeEiTYxJjNm2JNnPspCfUnIr6EH/t/ZBntyMf
F/iLUn2VspAB/+FtnoyG8kZLn7F/rrVaY3OSZGtUKcyrZLaKkQq79lRMrwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFExGJhc05Rb5Ovb8OE/qMa0oKpfSMB8GA1UdIwQY
MBaAFNcODEtHUBCltCre8zPDm9wa25YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXc0TVMwZFFFS1cwS3Q3ek04T2IzQnJibGhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNTIxYmYtZjhmZC00ZTM5LWI2ZWEt
Yzk3MzhjZTViYWVmLzEvVEVZbUZ6VGxGdms2OXZ3NFQtb3hyU2dxbDlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9lNTIxYmYtZjhmZC00ZTM5LWI2ZWEtYzk3MzhjZTViYWVm
LzEvMXc0TVMwZFFFS1cwS3Q3ek04T2IzQnJibGhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfApE
MA0GCSqGSIb3DQEBCwUAA4IBAQBnlS5s4btMj1JLGQJdzvP2LeiYHowTreMVqvqT
Hr18bSrZ1Wu+fYbQOUg7pc7TGfZOJX6zbkoNS+iYbDSrM5l0NVqtPwKbNiX2u8yr
QsDXWczvqsamXHrK3nJpBG+z2pUjLF4lacpRezc0XnVhlfIrrMnVYy1JrFBrtmAO
vrOKaMApIODmlW4pkWUrxiQGKqcdaa8PPR3CyMMoBCQlAmiqdxCY4NsjWmfJnyVz
EnzyMmYoScDfskRXJeSLsVXcjOqn0NPkqGl9k+QP52hqoSiVqGOmEPRHSpHN1QJH
tZ7dgPhEK6u367bVniiB+blr/Uzzv3/qofr/hyxtdIZGR6We
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:23 2025 by rpki-client