Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/uB8blK51clmlqZIG3MgE-Kk1G5o.roa
File: uB8blK51clmlqZIG3MgE-Kk1G5o.roa (raw, json)
Hash identifier: xMwS5z1W356FPT+nDClX6H6zwMtl06jPqyIJ071az7U=
Subject key identifier: B8:1F:1B:94:AE:75:72:59:A5:A9:92:06:DC:C8:04:F8:A9:35:1B:9A
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 01856D418CF3D9F865B8F2F2269257E8A0A4
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/uB8blK51clmlqZIG3MgE-Kk1G5o.roa
Signing time: Sun 01 Jan 2023 12:14:50 +0000
ROA not before: Sun 01 Jan 2023 12:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44753
IP address blocks: 2a01:190:15ef::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:8c:f3:d9:f8:65:b8:f2:f2:26:92:57:e8:a0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 12:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b81f1b94ae757259a5a99206dcc804f8a9351b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:e4:5c:24:9e:e6:98:91:1f:40:a8:b3:c0:
aa:d6:36:b2:7b:0e:3e:fa:a6:29:a0:4b:9d:4c:f2:
d5:c7:55:ff:1d:82:2d:d0:3f:ed:22:24:5a:78:29:
98:33:49:52:29:a5:43:65:db:22:67:4a:ca:d8:34:
c3:98:ff:e2:74:2f:c2:5d:bc:f9:2e:28:98:22:0e:
bc:b1:2e:20:bf:e7:38:09:cb:72:8a:85:e7:e7:86:
e5:1a:27:29:0e:9d:6b:7a:8f:80:65:d6:ed:7f:46:
b6:f5:45:51:2d:8c:b0:b4:2a:27:29:08:64:b3:f6:
4d:8f:0e:8c:07:9d:b1:5d:b9:f9:cb:14:ff:52:be:
58:fd:04:a2:d0:14:e3:4d:a7:36:0d:4e:06:7f:23:
80:c1:8b:4b:28:e8:4e:62:25:1e:e6:f6:7e:73:8e:
9d:83:f9:49:61:cb:bc:6a:5a:1b:cb:50:b5:6c:f7:
77:c9:68:bb:6b:9d:0d:19:64:6e:f7:3a:2a:f7:9d:
b7:c8:dd:da:4d:09:97:89:26:72:b1:b4:a1:15:4c:
b6:91:09:4d:2d:37:bf:84:ff:61:2f:d2:ed:b5:0b:
22:82:16:eb:1c:1a:ab:82:13:80:9a:20:a5:0f:bd:
ea:04:31:08:50:f4:5f:16:1e:f5:64:66:bf:f4:4e:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1F:1B:94:AE:75:72:59:A5:A9:92:06:DC:C8:04:F8:A9:35:1B:9A
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/uB8blK51clmlqZIG3MgE-Kk1G5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:15ef::/48
Signature Algorithm: sha256WithRSAEncryption
92:22:89:52:7e:c2:02:0d:32:fb:b7:f9:b1:26:fb:e0:45:92:
5b:09:aa:57:70:23:45:72:63:76:8a:73:aa:b7:ad:c4:bc:6b:
5a:71:42:9c:38:4a:9c:fe:7e:0b:c9:89:3b:75:37:5d:72:11:
87:5c:4f:c2:9a:de:72:f0:ff:93:de:ba:b1:fb:1a:f9:cc:b2:
13:4d:dd:da:55:af:14:57:42:2d:61:ab:78:9c:6b:68:dd:87:
1e:d1:ba:27:27:d8:2f:44:18:f4:d3:ec:52:39:1c:4d:cd:f0:
8f:30:f7:b8:3c:25:da:ab:d2:58:e5:3b:cd:b0:a6:58:74:cd:
49:17:3f:8d:5f:07:36:0c:3a:f8:57:14:6a:f1:83:a4:99:cd:
2a:72:42:07:f8:78:a5:7c:a0:d2:1b:dc:d7:a8:b2:6e:5a:27:
3e:47:ce:b7:fa:d7:4c:c7:be:48:78:94:25:50:dc:b9:70:ca:
8f:9f:7f:a9:f9:2f:e9:82:32:86:94:ed:3d:23:c8:fd:21:67:
3f:66:73:1f:85:94:23:0a:85:ca:83:87:2e:e5:a8:39:92:5b:
c4:67:43:32:78:ba:3d:3f:de:50:f6:c7:e1:bc:87:51:ed:68:
b8:68:00:10:37:91:93:28:51:c5:44:4d:30:7f:26:9d:da:e3:
7c:ff:83:4f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVtQYzz2fhluPLyJpJX6KCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw
YjQ1MDYwHhcNMjMwMTAxMTIxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODFmMWI5NGFlNzU3MjU5YTVhOTkyMDZkY2M4MDRmOGE5MzUxYjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi3kXCSe5piRH0Cos8Cq1jayew4+
+qYpoEudTPLVx1X/HYIt0D/tIiRaeCmYM0lSKaVDZdsiZ0rK2DTDmP/idC/CXbz5
LiiYIg68sS4gv+c4CctyioXn54blGicpDp1reo+AZdbtf0a29UVRLYywtConKQhk
s/ZNjw6MB52xXbn5yxT/Ur5Y/QSi0BTjTac2DU4GfyOAwYtLKOhOYiUe5vZ+c46d
g/lJYcu8aloby1C1bPd3yWi7a50NGWRu9zoq9523yN3aTQmXiSZysbShFUy2kQlN
LTe/hP9hL9LttQsighbrHBqrghOAmiClD73qBDEIUPRfFh71ZGa/9E6GzQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLgfG5SudXJZpamSBtzIBPipNRuaMB8GA1UdIwQY
MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt
OGVlYjc1N2NmNTQ1LzEvdUI4YmxLNTFjbG1scVpJRzNNZ0UtS2sxRzVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1
LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEBkBXv
MA0GCSqGSIb3DQEBCwUAA4IBAQCSIolSfsICDTL7t/mxJvvgRZJbCapXcCNFcmN2
inOqt63EvGtacUKcOEqc/n4LyYk7dTddchGHXE/Cmt5y8P+T3rqx+xr5zLITTd3a
Va8UV0ItYat4nGto3Yce0bonJ9gvRBj00+xSORxNzfCPMPe4PCXaq9JY5TvNsKZY
dM1JFz+NXwc2DDr4VxRq8YOkmc0qckIH+HilfKDSG9zXqLJuWic+R863+tdMx75I
eJQlUNy5cMqPn3+p+S/pgjKGlO09I8j9IWc/ZnMfhZQjCoXKg4cu5ag5klvEZ0My
eLo9P95Q9sfhvIdR7Wi4aAAQN5GTKFHFRE0wfyad2uN8/4NP
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:12 2025 by rpki-client