Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/3Wngkle_NmriP9pvztZqEjrFs7Q.roa
File: 3Wngkle_NmriP9pvztZqEjrFs7Q.roa (raw, json)
Hash identifier: cj2lYc5B+FbCWus1uKzx88jzaGUKcMCBkSYC0+Z6cr4=
Subject key identifier: DD:69:E0:92:57:BF:36:6A:E2:3F:DA:6F:CE:D6:6A:12:3A:C5:B3:B4
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 01838873B63D382AF35EC455835BF454AE26
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/3Wngkle_NmriP9pvztZqEjrFs7Q.roa
Signing time: Thu 29 Sep 2022 08:53:48 +0000
ROA not before: Thu 29 Sep 2022 08:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8315
IP address blocks: 2001:678:76c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:88:73:b6:3d:38:2a:f3:5e:c4:55:83:5b:f4:54:ae:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Sep 29 08:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd69e09257bf366ae23fda6fced66a123ac5b3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:02:a2:f7:ac:e6:4b:7c:3a:29:fc:8a:1c:3d:
93:1a:74:e0:9c:e7:59:8f:61:fb:75:29:ec:53:b6:
96:ac:d2:cd:05:0c:c3:9b:85:7c:b8:1a:fc:65:1e:
b5:9c:ba:dc:26:f2:29:42:04:b4:ef:58:81:a8:aa:
6c:5c:fe:aa:e9:ca:d9:5b:66:a5:36:43:ee:f3:c9:
ce:ce:05:d1:1f:cf:3c:76:c0:c4:2b:15:57:52:fd:
ed:6f:27:a7:0f:b6:9f:95:50:73:36:71:ee:f0:e4:
cc:bf:19:f7:1d:a4:1f:ad:5d:42:f7:08:0f:59:ed:
b8:b3:1c:dc:5f:00:5d:9a:78:49:16:95:32:8b:62:
78:ba:43:68:7f:f9:37:91:f2:90:88:3c:5e:ae:4f:
cd:f0:2c:7c:79:fc:52:52:b4:98:2a:d6:1f:04:66:
f1:5c:50:cb:a5:40:03:eb:61:e4:58:de:8b:5d:bd:
e8:b4:e7:56:56:f3:52:66:22:43:a5:91:77:00:d0:
51:b7:c9:bd:51:03:da:bd:f1:72:17:4c:c6:ec:e4:
26:06:16:42:20:65:86:be:38:d5:5b:60:83:9d:f3:
3a:3f:61:f9:7b:53:58:e1:df:bb:c6:25:ba:da:de:
4c:3b:74:12:4b:bc:ad:f5:db:ca:f0:d3:e8:53:34:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:69:E0:92:57:BF:36:6A:E2:3F:DA:6F:CE:D6:6A:12:3A:C5:B3:B4
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/3Wngkle_NmriP9pvztZqEjrFs7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:76c::/48
Signature Algorithm: sha256WithRSAEncryption
79:79:27:d0:16:9b:cc:ec:91:7a:40:fa:11:78:71:5f:23:70:
ef:8d:09:09:82:19:79:50:0f:8a:b5:6a:25:01:e5:9e:27:98:
df:eb:93:f8:b9:27:73:bd:79:31:a7:d5:60:1e:38:cb:0b:c2:
e8:8d:52:ac:1b:6b:19:30:a2:57:48:96:d6:ca:68:95:b8:34:
b6:2f:1c:a7:a7:3f:b7:20:c0:0d:2b:fb:09:c7:84:15:da:4e:
46:cb:d0:fc:03:57:cc:c7:cb:cd:e5:a6:69:de:37:c9:30:96:
b6:24:a3:8e:5c:cd:e5:f8:61:4a:d4:fa:7c:b8:82:d7:b4:13:
88:6e:b8:be:4d:63:88:de:2c:4e:ce:f7:dd:bf:d2:05:92:3d:
8b:73:46:d9:03:da:94:fd:84:3d:db:4f:52:d7:4d:df:53:75:
66:bd:64:d4:82:6f:03:ae:ff:ae:a8:1a:64:8d:c5:dc:97:8d:
79:57:e9:9d:d8:b7:da:a2:96:08:7c:1b:31:e6:1f:97:36:5f:
55:46:99:e4:3b:1d:c9:63:61:de:6f:06:a3:77:ee:b5:6a:06:
01:f9:3a:93:e4:b9:ad:b6:03:d6:d9:82:d1:08:d8:f3:31:8c:
9a:8a:40:21:3d:8f:e1:03:35:5d:4f:73:71:b4:f8:51:25:d6:
f0:ad:4c:33
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYOIc7Y9OCrzXsRVg1v0VK4mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4
NGU4YzYwHhcNMjIwOTI5MDg1MzQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDY5ZTA5MjU3YmYzNjZhZTIzZmRhNmZjZWQ2NmExMjNhYzViM2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwKi96zmS3w6KfyKHD2TGnTgnOdZ
j2H7dSnsU7aWrNLNBQzDm4V8uBr8ZR61nLrcJvIpQgS071iBqKpsXP6q6crZW2al
NkPu88nOzgXRH888dsDEKxVXUv3tbyenD7aflVBzNnHu8OTMvxn3HaQfrV1C9wgP
We24sxzcXwBdmnhJFpUyi2J4ukNof/k3kfKQiDxerk/N8Cx8efxSUrSYKtYfBGbx
XFDLpUAD62HkWN6LXb3otOdWVvNSZiJDpZF3ANBRt8m9UQPavfFyF0zG7OQmBhZC
IGWGvjjVW2CDnfM6P2H5e1NY4d+7xiW62t5MO3QSS7yt9dvK8NPoUzSvaQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFN1p4JJXvzZq4j/ab87WahI6xbO0MB8GA1UdIwQY
MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt
YjBkNzJlOTEwZWZlLzEvM1duZ2tsZV9ObXJpUDlwdnp0WnFFanJGczdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl
LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAds
MA0GCSqGSIb3DQEBCwUAA4IBAQB5eSfQFpvM7JF6QPoReHFfI3DvjQkJghl5UA+K
tWolAeWeJ5jf65P4uSdzvXkxp9VgHjjLC8LojVKsG2sZMKJXSJbWymiVuDS2Lxyn
pz+3IMANK/sJx4QV2k5Gy9D8A1fMx8vN5aZp3jfJMJa2JKOOXM3l+GFK1Pp8uILX
tBOIbri+TWOI3ixOzvfdv9IFkj2Lc0bZA9qU/YQ9209S103fU3VmvWTUgm8Drv+u
qBpkjcXcl415V+md2LfaopYIfBsx5h+XNl9VRpnkOx3JY2Hebwajd+61agYB+TqT
5LmttgPW2YLRCNjzMYyaikAhPY/hAzVdT3NxtPhRJdbwrUwz
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:37 2025 by rpki-client