Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/fOu6mFDPnERqaCdE6wcxSoHcgrY.roa
File: fOu6mFDPnERqaCdE6wcxSoHcgrY.roa (raw, json)
Hash identifier: HyFUflG5zCiC2nGy+3qx8F4zM18MKMrhxkuXEbrCg8g=
Subject key identifier: 7C:EB:BA:98:50:CF:9C:44:6A:68:27:44:EB:07:31:4A:81:DC:82:B6
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 01856D418FA9CC12D40103FD7FDC58C3454C
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/fOu6mFDPnERqaCdE6wcxSoHcgrY.roa
Signing time: Sun 01 Jan 2023 12:14:51 +0000
ROA not before: Sun 01 Jan 2023 12:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199216
IP address blocks: 2a01:190:15ec::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:8f:a9:cc:12:d4:01:03:fd:7f:dc:58:c3:45:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 12:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cebba9850cf9c446a682744eb07314a81dc82b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:d9:5b:47:76:de:72:b1:c8:29:37:c8:2b:
31:54:e7:10:d6:47:6e:b4:35:2c:b4:15:7a:07:0b:
ba:50:2e:c6:f4:9c:f8:3a:25:7c:b6:57:e1:11:23:
25:15:4d:7b:76:0d:ca:f1:ec:a3:c6:49:0b:dc:58:
24:78:26:d3:15:de:6e:43:97:4a:2f:6b:f5:92:7b:
49:97:d2:6c:64:9f:64:86:27:fb:c8:9c:03:57:30:
61:81:35:4d:a5:58:25:1a:d0:37:32:30:01:c2:15:
2d:16:65:3f:22:4c:93:65:91:7e:b6:b3:bc:6b:00:
21:c3:57:22:50:44:7e:df:cc:a9:3b:36:84:e9:3b:
00:b0:1f:23:a2:23:c2:fd:9c:93:43:3e:3a:14:36:
c6:61:19:1a:ea:6d:90:38:6a:0f:bc:ce:ec:1e:e4:
10:34:42:a0:5d:b9:de:6f:9f:54:4e:eb:cb:06:52:
fe:42:5a:8f:9a:1f:67:e2:f8:9c:64:42:30:b1:0b:
14:31:e1:21:3b:aa:be:e8:32:d8:a3:66:79:0d:50:
6c:06:93:bf:32:5a:c9:f9:3d:f0:db:4e:b1:1c:5d:
2e:00:22:da:06:ad:ad:ce:00:c4:35:ed:a2:e7:5d:
87:4f:60:23:94:5b:d9:85:4f:be:6f:41:19:ca:63:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EB:BA:98:50:CF:9C:44:6A:68:27:44:EB:07:31:4A:81:DC:82:B6
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/fOu6mFDPnERqaCdE6wcxSoHcgrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:15ec::/48
Signature Algorithm: sha256WithRSAEncryption
cd:5a:01:e0:6f:b0:14:f7:5f:42:77:c1:3e:72:66:8b:d9:d8:
97:c7:f6:8a:86:7d:4d:b0:b9:c2:d1:c1:e4:c7:5c:57:78:83:
b1:5a:d2:db:fb:51:d5:47:d7:ed:5e:f8:4c:67:51:36:0c:e7:
69:fe:6e:80:42:02:04:b3:f3:4d:fc:34:e3:09:95:98:64:26:
a8:32:d4:27:60:f5:69:16:e8:d2:c5:40:b3:c6:b5:72:9e:f4:
fe:f8:9d:9c:b5:14:53:9a:30:3b:8b:ed:20:bf:58:a8:0a:8c:
2e:fc:a5:bd:36:f3:67:bf:30:4b:bc:d3:ab:30:c5:93:45:44:
97:34:07:5f:54:d8:58:0b:64:7b:8a:f7:9c:d4:ad:8a:35:d3:
9d:76:d4:54:5c:e7:bd:0f:94:be:b5:46:ad:e6:8c:7a:06:79:
7a:cb:01:8c:df:3c:88:f6:ea:93:11:82:37:77:72:1a:b5:59:
27:79:04:77:7e:cc:7d:8b:51:ba:a8:f8:a7:aa:b6:0c:c9:c0:
5d:18:c7:16:5c:79:ad:2f:f1:a6:b8:74:0f:c6:5e:ba:00:bd:
73:1e:a6:a5:0c:c0:30:b8:fe:cf:70:1b:5b:88:46:27:2f:d4:
0b:48:24:e1:f3:9d:4b:63:48:9a:f6:8b:7e:9a:ad:77:c9:7c:
46:07:bd:34
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVtQY+pzBLUAQP9f9xYw0VMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw
YjQ1MDYwHhcNMjMwMTAxMTIxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2ViYmE5ODUwY2Y5YzQ0NmE2ODI3NDRlYjA3MzE0YTgxZGM4MmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW/ZW0d23nKxyCk3yCsxVOcQ1kdu
tDUstBV6Bwu6UC7G9Jz4OiV8tlfhESMlFU17dg3K8eyjxkkL3FgkeCbTFd5uQ5dK
L2v1kntJl9JsZJ9khif7yJwDVzBhgTVNpVglGtA3MjABwhUtFmU/IkyTZZF+trO8
awAhw1ciUER+38ypOzaE6TsAsB8joiPC/ZyTQz46FDbGYRka6m2QOGoPvM7sHuQQ
NEKgXbneb59UTuvLBlL+QlqPmh9n4vicZEIwsQsUMeEhO6q+6DLYo2Z5DVBsBpO/
MlrJ+T3w206xHF0uACLaBq2tzgDENe2i512HT2AjlFvZhU++b0EZymNczQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHzruphQz5xEamgnROsHMUqB3IK2MB8GA1UdIwQY
MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt
OGVlYjc1N2NmNTQ1LzEvZk91Nm1GRFBuRVJxYUNkRTZ3Y3hTb0hjZ3JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1
LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEBkBXs
MA0GCSqGSIb3DQEBCwUAA4IBAQDNWgHgb7AU919Cd8E+cmaL2diXx/aKhn1NsLnC
0cHkx1xXeIOxWtLb+1HVR9ftXvhMZ1E2DOdp/m6AQgIEs/NN/DTjCZWYZCaoMtQn
YPVpFujSxUCzxrVynvT++J2ctRRTmjA7i+0gv1ioCowu/KW9NvNnvzBLvNOrMMWT
RUSXNAdfVNhYC2R7ivec1K2KNdOddtRUXOe9D5S+tUat5ox6Bnl6ywGM3zyI9uqT
EYI3d3IatVkneQR3fsx9i1G6qPinqrYMycBdGMcWXHmtL/GmuHQPxl66AL1zHqal
DMAwuP7PcBtbiEYnL9QLSCTh851LY0ia9ot+mq13yXxGB700
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:50:14 2025 by rpki-client