Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/6dQW3OJfffdAoJ2rWXBP36G7AVk.roa
File: 6dQW3OJfffdAoJ2rWXBP36G7AVk.roa (raw, json)
Hash identifier: 3+7gfEKBJAfbF/lbFNqVeMXFgh19b1Hl4Utw0tlKdAo=
Subject key identifier: E9:D4:16:DC:E2:5F:7D:F7:40:A0:9D:AB:59:70:4F:DF:A1:BB:01:59
Certificate issuer: /CN=75905949e963d3577be076326ca0b91ff32f9684
Certificate serial: 018A8E50BB668D1EBD28D14B8D540B3ED650
Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/6dQW3OJfffdAoJ2rWXBP36G7AVk.roa
Signing time: Wed 13 Sep 2023 11:32:50 +0000
ROA not before: Wed 13 Sep 2023 11:32:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a0d:d600::/42 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:50:bb:66:8d:1e:bd:28:d1:4b:8d:54:0b:3e:d6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684
Validity
Not Before: Sep 13 11:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9d416dce25f7df740a09dab59704fdfa1bb0159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:d0:6f:6e:d5:0e:05:73:88:d0:77:26:ec:
1d:9d:46:a0:a7:5a:ce:ce:18:a0:11:92:44:06:c9:
d2:5e:c6:9b:2f:91:72:9e:65:0e:90:f1:24:db:9d:
49:55:80:fb:f3:f0:e2:00:b2:dc:33:46:70:81:5d:
dd:d7:b0:64:ea:12:4e:e6:9e:49:a9:42:c8:72:03:
62:07:90:e7:e6:dd:3a:5d:dc:18:48:c0:06:09:7b:
bb:a1:ad:9b:2a:e4:4e:3d:64:48:1d:76:84:79:60:
1f:f7:c3:d3:5f:b2:91:76:cc:f1:01:98:7e:97:0f:
9c:08:65:fd:2f:c2:5d:ee:ab:1e:d6:da:92:bb:1f:
e9:20:96:eb:37:dc:82:8c:1b:a3:ab:4c:d7:a3:8e:
33:c3:b7:89:da:f6:4b:95:e9:48:9a:a3:c4:9d:35:
51:71:cb:5c:12:80:3b:a1:90:a8:41:0d:b4:f8:4d:
8d:da:10:d0:89:2d:ba:51:20:f3:6d:84:cf:39:47:
76:2b:0b:88:d7:5b:5b:db:5d:88:a4:b2:a2:ab:7c:
fe:a1:23:03:17:5e:f9:b6:88:e3:e0:a2:48:28:0f:
ec:0a:44:8b:55:78:89:8c:b9:e8:5a:4d:a6:0c:20:
d7:27:81:ea:41:44:ca:49:53:d5:c9:d0:59:c2:35:
5a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D4:16:DC:E2:5F:7D:F7:40:A0:9D:AB:59:70:4F:DF:A1:BB:01:59
X509v3 Authority Key Identifier:
keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/6dQW3OJfffdAoJ2rWXBP36G7AVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d600::/42
Signature Algorithm: sha256WithRSAEncryption
89:90:34:da:6e:33:b3:35:70:0c:6a:11:8d:7c:0f:b0:6c:5b:
ae:b6:8b:d9:6d:cb:ce:05:84:3c:08:b4:b2:cf:86:29:0e:cc:
32:83:83:b9:9c:8f:1d:9e:3c:57:95:0c:2a:95:c2:2b:aa:70:
f7:a8:39:eb:a5:d7:4c:07:84:ba:d6:52:c6:aa:f0:3c:2d:2b:
86:52:52:bc:4b:72:85:51:dd:79:18:71:41:db:9c:ed:31:cd:
38:3d:2e:5b:d9:5f:74:80:e6:7a:31:5a:dc:0e:7d:11:a3:a2:
04:25:7c:a9:d8:5a:67:d2:6f:e9:aa:c6:13:52:58:f3:86:e3:
48:04:9e:0d:74:ea:69:31:d4:fd:77:d5:b2:57:9f:c5:42:b5:
a5:b1:79:59:ec:0b:dc:50:63:80:ab:08:b1:8f:3b:fb:57:ed:
ff:ea:a1:4a:19:d2:52:f1:83:d4:4c:3c:3f:27:f1:d1:3e:ce:
44:a6:dc:1f:0a:17:4d:7e:b3:6f:ae:e2:f0:ff:78:8f:e7:e8:
ee:20:65:e2:6e:44:31:7c:76:c0:d4:39:d0:de:85:33:49:7d:
d2:82:71:ef:a1:d1:5d:16:3d:55:81:1c:67:bf:a2:0b:6c:7f:
6e:95:42:65:e2:29:95:ce:ea:80:dc:ea:f8:d4:a6:49:9b:26:
0f:de:d5:7b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYqOULtmjR69KNFLjVQLPtZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OTA1OTQ5ZTk2M2QzNTc3YmUwNzYzMjZjYTBiOTFmZjMy
Zjk2ODQwHhcNMjMwOTEzMTEzMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWQ0MTZkY2UyNWY3ZGY3NDBhMDlkYWI1OTcwNGZkZmExYmIwMTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSbQb27VDgVziNB3JuwdnUagp1rO
zhigEZJEBsnSXsabL5FynmUOkPEk251JVYD78/DiALLcM0ZwgV3d17Bk6hJO5p5J
qULIcgNiB5Dn5t06XdwYSMAGCXu7oa2bKuROPWRIHXaEeWAf98PTX7KRdszxAZh+
lw+cCGX9L8Jd7qse1tqSux/pIJbrN9yCjBujq0zXo44zw7eJ2vZLlelImqPEnTVR
cctcEoA7oZCoQQ20+E2N2hDQiS26USDzbYTPOUd2KwuI11tb212IpLKiq3z+oSMD
F175tojj4KJIKA/sCkSLVXiJjLnoWk2mDCDXJ4HqQUTKSVPVydBZwjVavQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOnUFtziX333QKCdq1lwT9+huwFZMB8GA1UdIwQY
MBaAFHWQWUnpY9NXe+B2MmyguR/zL5aEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQt
MWE4MzAxYjdlNmRlLzEvNmRRVzNPSmZmZmRBb0oycldYQlAzNkc3QVZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQtMWE4MzAxYjdlNmRl
LzEvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGKg3WAAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCJkDTabjOzNXAMahGNfA+wbFuutovZbcvOBYQ8
CLSyz4YpDswyg4O5nI8dnjxXlQwqlcIrqnD3qDnrpddMB4S61lLGqvA8LSuGUlK8
S3KFUd15GHFB25ztMc04PS5b2V90gOZ6MVrcDn0Ro6IEJXyp2Fpn0m/pqsYTUljz
huNIBJ4NdOppMdT9d9WyV5/FQrWlsXlZ7AvcUGOAqwixjzv7V+3/6qFKGdJS8YPU
TDw/J/HRPs5EptwfChdNfrNvruLw/3iP5+juIGXibkQxfHbA1DnQ3oUzSX3SgnHv
odFdFj1VgRxnv6ILbH9ulUJl4imVzuqA3Or41KZJmyYP3tV7
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:38 2025 by rpki-client