Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/f14g__kU3CoE1B7Emxht9ZXOFFo.roa
File: f14g__kU3CoE1B7Emxht9ZXOFFo.roa (raw, json)
Hash identifier: 9tYcXRwPlJeD2rabBdYFlOs3piZ0t6gULmJ5TvXKWTs=
Subject key identifier: 7F:5E:20:FF:F9:14:DC:2A:04:D4:1E:C4:9B:18:6D:F5:95:CE:14:5A
Certificate issuer: /CN=75905949e963d3577be076326ca0b91ff32f9684
Certificate serial: 018A891ACF02BA6628C84F7A4F0C196978BC
Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/f14g__kU3CoE1B7Emxht9ZXOFFo.roa
Signing time: Tue 12 Sep 2023 11:15:50 +0000
ROA not before: Tue 12 Sep 2023 11:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a0d:d600::/32 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:89:1a:cf:02:ba:66:28:c8:4f:7a:4f:0c:19:69:78:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684
Validity
Not Before: Sep 12 11:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f5e20fff914dc2a04d41ec49b186df595ce145a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:69:86:5c:11:93:53:5c:7b:45:e2:56:7a:
77:63:45:af:f3:ba:9c:5f:07:8d:45:cb:4e:91:a0:
02:9a:46:f9:59:34:20:ca:fe:65:87:4b:13:b8:b7:
44:eb:63:d8:87:82:38:2d:53:f4:c8:c7:61:81:e4:
d3:08:7f:a4:e0:c0:4b:ec:4c:e0:70:61:f3:bc:3a:
74:77:ea:e6:ad:a2:3f:1d:86:80:db:3e:78:6f:68:
34:4c:37:02:d2:64:92:da:e8:56:c8:f7:bc:6d:19:
71:bd:d2:18:09:73:9a:5c:b0:84:2f:98:8e:c6:d7:
9e:4e:d7:45:c4:a5:e0:47:ae:22:3c:06:ae:b0:8d:
f7:c4:53:06:03:ab:a4:33:8a:c3:10:bb:ed:fe:83:
29:41:49:8a:d1:3a:66:4a:59:d2:88:cd:a6:b0:f4:
e3:b7:b7:a3:e2:a1:73:31:04:e1:1f:11:c4:a2:f1:
1d:d2:63:10:b2:b5:c2:87:2b:52:9d:bc:4c:5a:6b:
4d:0b:5b:ec:99:d5:69:76:cb:18:4c:b5:a6:27:86:
93:8f:30:0f:5b:d6:80:3d:7e:76:60:12:f1:4c:e6:
9d:6d:82:de:ce:ce:9c:cf:0f:e4:16:e5:47:30:f7:
1c:9d:ed:ef:9b:ab:5e:00:99:d8:5d:97:41:fd:3d:
78:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5E:20:FF:F9:14:DC:2A:04:D4:1E:C4:9B:18:6D:F5:95:CE:14:5A
X509v3 Authority Key Identifier:
keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/f14g__kU3CoE1B7Emxht9ZXOFFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d600::/32
Signature Algorithm: sha256WithRSAEncryption
12:60:34:64:e7:18:ad:a9:e1:f3:80:bc:e8:c2:ed:fa:82:4b:
e0:8e:93:df:29:ee:7f:ce:a5:67:f2:89:4c:d6:a5:2b:a6:b9:
80:82:6f:69:89:dd:72:4f:c4:9a:bf:97:15:99:c8:17:32:f1:
92:35:92:1a:df:03:10:9f:64:09:0a:23:1d:1a:e8:20:97:bf:
0f:50:19:58:1a:ad:f7:1d:c8:5f:0f:46:11:0a:bf:d3:f0:82:
9e:fa:46:e0:ea:34:d9:7f:c8:b3:33:74:15:5d:5f:90:96:db:
a3:4a:a8:94:3a:d6:26:0b:60:38:5d:7d:1d:bf:6f:32:88:69:
5e:91:b1:01:73:13:ad:b5:f3:3a:35:b9:9c:b0:60:63:ad:cc:
c4:f0:8d:7f:9f:7f:c3:74:72:a1:0f:75:bf:45:73:88:95:d9:
ec:a9:bb:ac:da:d4:89:87:1d:ff:43:e7:a0:e1:53:c9:d2:f8:
4f:f6:81:08:b7:b5:da:0a:5b:85:42:22:84:00:5e:0c:86:1f:
cf:87:92:52:bb:3a:de:77:2f:20:af:29:69:e8:c4:64:58:49:
ba:a5:5b:b0:b2:68:ad:da:7a:76:09:64:1f:fa:d5:80:07:7b:
a1:be:53:b8:c4:08:30:50:2d:8b:1b:4e:05:a8:9c:5c:f5:a4:
48:e9:8a:dd
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYqJGs8CumYoyE96TwwZaXi8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OTA1OTQ5ZTk2M2QzNTc3YmUwNzYzMjZjYTBiOTFmZjMy
Zjk2ODQwHhcNMjMwOTEyMTExNTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjVlMjBmZmY5MTRkYzJhMDRkNDFlYzQ5YjE4NmRmNTk1Y2UxNDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg5phlwRk1Nce0XiVnp3Y0Wv87qc
XweNRctOkaACmkb5WTQgyv5lh0sTuLdE62PYh4I4LVP0yMdhgeTTCH+k4MBL7Ezg
cGHzvDp0d+rmraI/HYaA2z54b2g0TDcC0mSS2uhWyPe8bRlxvdIYCXOaXLCEL5iO
xteeTtdFxKXgR64iPAausI33xFMGA6ukM4rDELvt/oMpQUmK0TpmSlnSiM2msPTj
t7ej4qFzMQThHxHEovEd0mMQsrXChytSnbxMWmtNC1vsmdVpdssYTLWmJ4aTjzAP
W9aAPX52YBLxTOadbYLezs6czw/kFuVHMPccne3vm6teAJnYXZdB/T14rwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFH9eIP/5FNwqBNQexJsYbfWVzhRaMB8GA1UdIwQY
MBaAFHWQWUnpY9NXe+B2MmyguR/zL5aEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQt
MWE4MzAxYjdlNmRlLzEvZjE0Z19fa1UzQ29FMUI3RW14aHQ5WlhPRkZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQtMWE4MzAxYjdlNmRl
LzEvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg3WADAN
BgkqhkiG9w0BAQsFAAOCAQEAEmA0ZOcYranh84C86MLt+oJL4I6T3ynuf86lZ/KJ
TNalK6a5gIJvaYndck/Emr+XFZnIFzLxkjWSGt8DEJ9kCQojHRroIJe/D1AZWBqt
9x3IXw9GEQq/0/CCnvpG4Oo02X/IszN0FV1fkJbbo0qolDrWJgtgOF19Hb9vMohp
XpGxAXMTrbXzOjW5nLBgY63MxPCNf59/w3RyoQ91v0VziJXZ7Km7rNrUiYcd/0Pn
oOFTydL4T/aBCLe12gpbhUIihABeDIYfz4eSUrs63ncvIK8paejEZFhJuqVbsLJo
rdp6dglkH/rVgAd7ob5TuMQIMFAtixtOBaicXPWkSOmK3Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:00 2025 by rpki-client