Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/woDpEAzqB2sB1c0VK8oPEkPuwC0.roa
File: woDpEAzqB2sB1c0VK8oPEkPuwC0.roa (raw, json)
Hash identifier: dTkEeaHxpsfknyqWJz464WW4WhqeWo1XB1Tx2oVd6Xg=
Subject key identifier: C2:80:E9:10:0C:EA:07:6B:01:D5:CD:15:2B:CA:0F:12:43:EE:C0:2D
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 1006E780
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/woDpEAzqB2sB1c0VK8oPEkPuwC0.roa
Signing time: Tue 01 Feb 2022 10:10:32 +0000
ROA not before: Tue 01 Feb 2022 10:10:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 2a06:56c1::/40 maxlen: 48
2a06:56c2::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268887936 (0x1006e780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Feb 1 10:10:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c280e9100cea076b01d5cd152bca0f1243eec02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:d1:79:82:e9:3f:61:38:31:f2:83:f5:c8:
04:c7:52:3e:89:1f:61:68:ca:bd:2d:5b:12:88:7f:
ee:a6:80:7c:fd:85:b3:ea:1a:35:52:f9:16:8c:bf:
a1:5c:83:7b:b7:82:dc:fa:7d:48:64:02:32:2c:a6:
6d:ec:bf:c7:10:e0:ec:9c:dd:4c:da:52:31:10:43:
aa:4e:26:c9:63:1b:4d:98:c3:cd:d3:f9:ac:79:ba:
1c:03:77:fc:08:18:d7:c1:26:85:99:65:94:8c:b3:
fd:ad:a9:b8:bc:c9:b6:4f:e3:37:07:f8:37:5c:6f:
1b:26:01:f4:83:42:bb:4b:e5:d9:77:63:cf:16:d3:
79:97:04:be:73:7d:1c:1f:2e:d1:23:58:02:e8:61:
83:d1:34:d1:cc:04:c7:b6:67:2d:00:6f:48:3c:a5:
ed:5e:66:6a:e2:89:3d:95:5b:f4:dc:61:b6:41:53:
36:a7:ed:cc:a7:24:82:55:8b:a4:cc:72:c5:f7:93:
7d:93:35:3b:68:d0:56:26:1f:69:8e:6c:30:76:78:
72:19:07:20:8b:dc:49:f5:3e:cb:eb:b9:b8:89:1a:
dd:6b:c0:c4:c7:5a:5c:08:f6:d6:46:7d:3f:1d:c2:
d1:ce:dc:e0:28:04:a6:1a:c9:a7:b4:ad:1c:65:45:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:80:E9:10:0C:EA:07:6B:01:D5:CD:15:2B:CA:0F:12:43:EE:C0:2D
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/woDpEAzqB2sB1c0VK8oPEkPuwC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:56c1::/40
2a06:56c2::/40
Signature Algorithm: sha256WithRSAEncryption
04:96:ad:0e:ec:18:4b:cd:45:1f:4a:e1:d8:13:fd:b4:b2:66:
bc:bc:b9:99:e7:b2:29:73:2b:58:cf:c7:66:69:1e:13:5e:f5:
c2:55:24:da:12:af:64:a8:da:fe:91:28:93:13:fa:fc:ad:e0:
da:2f:a6:07:59:c5:bb:12:13:95:eb:1e:6a:6b:23:53:5a:1f:
b6:08:32:33:8e:49:b0:7b:46:ac:66:72:bb:6d:d6:c7:7c:5a:
12:74:71:29:5d:f1:5f:a6:2c:ee:cf:af:a5:db:41:86:ee:6f:
35:75:c3:7a:55:90:8a:60:c5:e1:5a:6a:80:69:50:3e:3e:97:
51:ba:8e:49:bb:c5:30:f0:d8:69:ad:18:3e:02:0c:9b:f1:33:
55:9a:71:87:8b:9e:65:4f:b1:95:13:20:de:3d:6b:c3:11:29:
0a:9a:f7:0b:70:fc:f7:97:30:17:11:85:12:30:ab:68:19:44:
41:20:68:a1:01:c7:7a:84:5d:7b:2f:ea:88:ab:3e:3e:39:1b:
36:aa:ba:56:0a:29:12:b1:1b:7a:dd:b9:1c:a9:15:50:93:33:
cc:af:d3:30:50:85:f4:db:99:a6:0f:ab:83:bb:b7:7f:54:a2:
9f:4c:66:96:ef:bd:46:24:25:7e:18:52:bd:f2:6c:24:13:95:
6d:18:19:f0
-----BEGIN CERTIFICATE-----
MIIE+TCCA+GgAwIBAgIEEAbngDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NzJmMGU0MmIwOGFhNDUxZmM1ODNhMzU4ZWMzNzBmZmJkMmRhYzY4MB4XDTIyMDIw
MTEwMTAzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzI4MGU5MTAwY2Vh
MDc2YjAxZDVjZDE1MmJjYTBmMTI0M2VlYzAyZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANi80XmC6T9hODHyg/XIBMdSPokfYWjKvS1bEoh/7qaAfP2F
s+oaNVL5Foy/oVyDe7eC3Pp9SGQCMiymbey/xxDg7JzdTNpSMRBDqk4myWMbTZjD
zdP5rHm6HAN3/AgY18EmhZlllIyz/a2puLzJtk/jNwf4N1xvGyYB9INCu0vl2Xdj
zxbTeZcEvnN9HB8u0SNYAuhhg9E00cwEx7ZnLQBvSDyl7V5mauKJPZVb9NxhtkFT
NqftzKckglWLpMxyxfeTfZM1O2jQViYfaY5sMHZ4chkHIIvcSfU+y+u5uIka3WvA
xMdaXAj21kZ9Px3C0c7c4CgEphrJp7StHGVF3R8CAwEAAaOCAhMwggIPMB0GA1Ud
DgQWBBTCgOkQDOoHawHVzRUryg8SQ+7ALTAfBgNVHSMEGDAWgBRnLw5CsIqkUfxY
OjWOw3D/vS2saDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1p5OE9RckNLcEZIOFdEbzFqc053XzcwdHJHZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTMvNTlhNmI5LWNkMjAtNGNkNy1iNGE3LWYwYjk2MmY1MjQxNC8x
L3dvRHBFQXpxQjJzQjFjMFZLOG9QRWtQdXdDMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMv
NTlhNmI5LWNkMjAtNGNkNy1iNGE3LWYwYjk2MmY1MjQxNC8xL1p5OE9RckNLcEZI
OFdEbzFqc053XzcwdHJHZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAp
BggrBgEFBQcBBwEB/wQaMBgwFgQCAAIwEAMGACoGVsEAAwYAKgZWwgAwDQYJKoZI
hvcNAQELBQADggEBAASWrQ7sGEvNRR9K4dgT/bSyZry8uZnnsilzK1jPx2ZpHhNe
9cJVJNoSr2So2v6RKJMT+vyt4NovpgdZxbsSE5XrHmprI1NaH7YIMjOOSbB7Rqxm
crtt1sd8WhJ0cSld8V+mLO7Pr6XbQYbubzV1w3pVkIpgxeFaaoBpUD4+l1G6jkm7
xTDw2GmtGD4CDJvxM1WacYeLnmVPsZUTIN49a8MRKQqa9wtw/PeXMBcRhRIwq2gZ
REEgaKEBx3qEXXsv6oirPj45GzaqulYKKRKxG3rduRypFVCTM8yv0zBQhfTbmaYP
q4O7t39Uop9MZpbvvUYkJX4YUr3ybCQTlW0YGfA=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:21 2025 by rpki-client