Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/PpfPQpXn_o8314skDyu8SzDJDfQ.roa
File: PpfPQpXn_o8314skDyu8SzDJDfQ.roa (raw, json)
Hash identifier: Zn5AhMBBtIWq8eqg3vr+mqgBtXDi1H5hC36qO1Ff0fg=
Subject key identifier: 3E:97:CF:42:95:E7:FE:8F:37:D7:8B:24:0F:2B:BC:4B:30:C9:0D:F4
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 1B4B52FB
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/PpfPQpXn_o8314skDyu8SzDJDfQ.roa
Signing time: Sat 19 Mar 2022 08:39:47 +0000
ROA not before: Sat 19 Mar 2022 08:39:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29802
IP address blocks: 2a00:17c0:c4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457921275 (0x1b4b52fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Mar 19 08:39:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e97cf4295e7fe8f37d78b240f2bbc4b30c90df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:a8:70:43:00:c6:28:44:ff:7e:ab:fb:6c:
28:1f:a1:23:e9:09:c3:8a:f7:73:47:46:bb:2a:4c:
17:ef:5a:09:57:d0:aa:71:56:57:16:c0:87:fe:d7:
52:0d:c5:0f:be:85:95:17:4c:06:24:ea:ff:6d:67:
61:79:24:7d:aa:cb:78:de:3c:61:e6:31:14:d3:56:
48:89:50:b9:60:55:6a:70:3c:61:a6:9b:b0:04:bb:
cd:ae:d9:6a:ba:8c:04:da:71:d8:50:db:4a:13:e8:
d6:25:9f:44:f1:a8:06:8d:49:a3:b1:fb:87:1b:37:
51:52:0f:c8:af:d1:c0:ee:0a:90:aa:62:f9:f5:21:
22:9d:f3:e6:2a:a2:4f:fd:86:84:bd:0c:03:bd:6f:
4f:11:8c:c4:ec:67:81:ec:eb:14:0a:a4:b8:d3:25:
d7:2f:96:bc:89:32:c8:ec:74:ae:0f:1e:cd:82:2c:
43:6a:f5:31:9e:57:36:c1:36:61:7c:92:27:fd:ee:
aa:15:00:92:d1:e2:09:20:e9:82:c8:67:60:de:d5:
3a:30:8e:42:46:7a:40:1c:27:bf:24:86:8c:93:b0:
12:e2:6c:e4:94:03:23:04:af:15:c7:58:0c:3b:1a:
a1:c1:20:66:61:e8:3e:e5:82:58:da:fd:d8:0e:38:
82:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:97:CF:42:95:E7:FE:8F:37:D7:8B:24:0F:2B:BC:4B:30:C9:0D:F4
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/PpfPQpXn_o8314skDyu8SzDJDfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:17c0:c4::/48
Signature Algorithm: sha256WithRSAEncryption
90:a0:83:dc:04:b8:20:3b:a4:72:14:a0:b1:b0:fe:ab:ee:93:
10:ae:5e:80:cd:d4:60:22:74:8b:38:72:e0:a8:3e:7d:8f:76:
4c:b5:b6:23:e4:5f:23:c3:a5:02:63:ce:4c:12:96:2c:80:03:
1a:c4:01:3e:12:b8:c1:da:88:5b:c9:98:a8:4d:9c:7d:6a:45:
10:e8:9a:35:88:cb:ef:6f:ce:8d:7f:b5:e5:38:c5:4b:a2:15:
43:a7:4c:c4:d0:bb:48:65:cc:ce:40:f2:79:3e:ec:2a:2a:25:
9f:d5:9b:b6:3e:71:83:9a:11:c6:20:65:48:cd:ab:83:ff:f3:
51:24:20:6d:6e:5d:7a:98:62:41:91:47:df:e4:8a:09:b0:0a:
b4:a7:61:bc:28:46:3b:1c:96:5e:23:a4:e1:cf:79:03:65:14:
51:9d:87:1c:38:a2:33:19:9b:9c:6a:4f:89:ee:f9:b0:e2:b0:
be:5d:e4:00:49:d7:11:a3:25:00:37:f3:29:8d:48:92:92:7e:
9e:b4:86:94:12:6b:94:0f:63:f9:4e:87:b7:b1:81:fe:30:86:
b8:d5:b4:ac:48:04:6f:b5:23:08:51:77:61:26:e8:fa:72:46:
bb:23:33:4b:42:cb:75:5a:df:05:60:1d:5a:00:7a:df:d5:ac:
ff:59:35:dc
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEG0tS+zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
N2MyMDNlM2YzNjU5MjNhODQzZDMyMjAzMTdhMWM2OGNmNzRkZTBmMB4XDTIyMDMx
OTA4Mzk0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2U5N2NmNDI5NWU3
ZmU4ZjM3ZDc4YjI0MGYyYmJjNGIzMGM5MGRmNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALiIqHBDAMYoRP9+q/tsKB+hI+kJw4r3c0dGuypMF+9aCVfQ
qnFWVxbAh/7XUg3FD76FlRdMBiTq/21nYXkkfarLeN48YeYxFNNWSIlQuWBVanA8
YaabsAS7za7ZarqMBNpx2FDbShPo1iWfRPGoBo1Jo7H7hxs3UVIPyK/RwO4KkKpi
+fUhIp3z5iqiT/2GhL0MA71vTxGMxOxngezrFAqkuNMl1y+WvIkyyOx0rg8ezYIs
Q2r1MZ5XNsE2YXySJ/3uqhUAktHiCSDpgshnYN7VOjCOQkZ6QBwnvySGjJOwEuJs
5JQDIwSvFcdYDDsaocEgZmHoPuWCWNr92A44gn0CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQ+l89Clef+jzfXiyQPK7xLMMkN9DAfBgNVHSMEGDAWgBQXwgPj82WSOoQ9
MiAxehxoz3TeDzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Y4SUQ0X05sa2pxRVBUSWdNWG9jYU05MDNnOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWMvODlhZThlLTQ2NzQtNDU1ZC05ZjIzLWFjNjdhMzZlNGFhYi8x
L1BwZlBRcFhuX284MzE0c2tEeXU4U3pESkRmUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMv
ODlhZThlLTQ2NzQtNDU1ZC05ZjIzLWFjNjdhMzZlNGFhYi8xL0Y4SUQ0X05sa2px
RVBUSWdNWG9jYU05MDNnOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoAF8AAxDANBgkqhkiG9w0BAQsF
AAOCAQEAkKCD3AS4IDukchSgsbD+q+6TEK5egM3UYCJ0izhy4Kg+fY92TLW2I+Rf
I8OlAmPOTBKWLIADGsQBPhK4wdqIW8mYqE2cfWpFEOiaNYjL72/OjX+15TjFS6IV
Q6dMxNC7SGXMzkDyeT7sKioln9Wbtj5xg5oRxiBlSM2rg//zUSQgbW5dephiQZFH
3+SKCbAKtKdhvChGOxyWXiOk4c95A2UUUZ2HHDiiMxmbnGpPie75sOKwvl3kAEnX
EaMlADfzKY1IkpJ+nrSGlBJrlA9j+U6Ht7GB/jCGuNW0rEgEb7UjCFF3YSbo+nJG
uyMzS0LLdVrfBWAdWgB639Ws/1k13A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:15:46 2025 by rpki-client