Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/mRkDHRmXYW2rFEIqiOjxmZvW8QE.roa
File: mRkDHRmXYW2rFEIqiOjxmZvW8QE.roa (raw, json)
Hash identifier: Uk7WaE1wgTgdiO0e2Nr1aPldp0TYbyl4Dz/1VHoef5Y=
Subject key identifier: 99:19:03:1D:19:97:61:6D:AB:14:42:2A:88:E8:F1:99:9B:D6:F1:01
Certificate issuer: /CN=75905949e963d3577be076326ca0b91ff32f9684
Certificate serial: 018A8E50BBCF8DB7A5402BFA354B54E06723
Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/mRkDHRmXYW2rFEIqiOjxmZvW8QE.roa
Signing time: Wed 13 Sep 2023 11:32:50 +0000
ROA not before: Wed 13 Sep 2023 11:32:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a0d:d600::/42 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:50:bb:cf:8d:b7:a5:40:2b:fa:35:4b:54:e0:67:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684
Validity
Not Before: Sep 13 11:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9919031d1997616dab14422a88e8f1999bd6f101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:ff:6a:63:18:48:ef:7f:1c:38:b2:e7:38:
42:6b:60:cc:65:65:17:9c:de:6e:b6:4a:90:9d:69:
bf:2d:af:34:e4:7c:e1:6e:59:56:aa:93:ca:db:6c:
7a:ce:99:c8:8e:8b:23:38:94:29:93:69:08:22:6d:
79:0f:b0:cf:78:4d:8b:e5:9a:97:ea:ca:8d:2a:43:
96:1c:2c:b7:2c:47:5b:f9:a8:32:96:46:2d:98:bc:
66:a0:57:6c:cb:b1:f0:49:86:a7:42:5d:e4:79:58:
75:e5:33:ad:ce:a1:d0:93:1f:86:ba:bd:e0:11:9f:
2b:2a:86:36:88:39:dd:b9:03:cd:d7:b2:66:d4:ef:
4f:51:9c:54:d0:a0:3f:a0:b8:9a:59:e3:75:8d:10:
41:77:7c:bd:cf:6e:48:9a:25:93:22:1f:34:18:0d:
95:9c:f2:79:fe:67:4a:0f:a8:7e:3d:80:11:ae:da:
75:ec:1b:ee:df:02:69:49:19:8b:26:cb:08:cb:46:
65:a9:e5:27:33:fa:01:56:98:d8:4a:3c:3e:e7:ff:
c5:c9:57:00:57:b7:7a:71:2b:a9:d8:5b:69:17:af:
58:a0:6b:3f:f1:9b:f6:e6:4d:bd:34:84:9d:e9:f1:
b5:60:aa:8b:0f:46:8b:1c:66:f9:97:86:37:ba:29:
aa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:19:03:1D:19:97:61:6D:AB:14:42:2A:88:E8:F1:99:9B:D6:F1:01
X509v3 Authority Key Identifier:
keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/mRkDHRmXYW2rFEIqiOjxmZvW8QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d600::/42
Signature Algorithm: sha256WithRSAEncryption
0f:45:9f:22:b7:1d:f6:27:24:e4:b9:b7:56:6d:07:54:25:71:
8e:e4:2d:da:ec:36:e0:09:92:f4:bc:41:ba:c7:cc:59:81:50:
29:66:bf:52:87:7d:e8:55:c0:42:41:dd:e9:e9:81:73:0d:bf:
6d:62:b2:cb:15:76:6a:40:79:58:ef:c4:6a:80:6b:8b:89:ae:
b6:b7:cd:0f:db:46:e0:47:b8:64:cc:2d:f6:fa:a3:c9:b2:0a:
c5:8d:33:20:26:e3:17:85:1b:35:33:30:bf:4b:67:70:71:2f:
f9:74:25:97:06:83:76:05:68:e4:ea:c0:c8:59:7a:26:9b:a8:
df:1b:3b:a0:4c:af:db:3f:04:b3:12:5e:52:36:9b:83:79:d1:
d7:08:ae:45:2a:da:38:41:4b:32:0b:06:a1:a8:ab:3e:a2:6a:
e2:c9:f6:f3:a5:93:d1:e6:e4:03:b8:04:9c:4a:fa:40:8c:26:
02:ce:67:ad:8d:cd:3b:d9:69:eb:df:57:39:32:2c:85:f1:f2:
7b:c9:04:47:34:63:d1:ef:14:67:cb:5c:bd:40:ea:e0:8f:79:
b9:67:3f:40:76:f7:e4:b8:a2:19:85:94:4f:a3:6e:2f:61:10:
8e:56:29:b2:c3:a4:3e:d0:ea:70:34:61:32:e5:16:75:93:75:
83:c4:11:ab
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYqOULvPjbelQCv6NUtU4GcjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OTA1OTQ5ZTk2M2QzNTc3YmUwNzYzMjZjYTBiOTFmZjMy
Zjk2ODQwHhcNMjMwOTEzMTEzMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTE5MDMxZDE5OTc2MTZkYWIxNDQyMmE4OGU4ZjE5OTliZDZmMTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFr/amMYSO9/HDiy5zhCa2DMZWUX
nN5utkqQnWm/La805HzhbllWqpPK22x6zpnIjosjOJQpk2kIIm15D7DPeE2L5ZqX
6sqNKkOWHCy3LEdb+agylkYtmLxmoFdsy7HwSYanQl3keVh15TOtzqHQkx+Gur3g
EZ8rKoY2iDnduQPN17Jm1O9PUZxU0KA/oLiaWeN1jRBBd3y9z25ImiWTIh80GA2V
nPJ5/mdKD6h+PYARrtp17Bvu3wJpSRmLJssIy0ZlqeUnM/oBVpjYSjw+5//FyVcA
V7d6cSup2FtpF69YoGs/8Zv25k29NISd6fG1YKqLD0aLHGb5l4Y3uimq0wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJkZAx0Zl2FtqxRCKojo8Zmb1vEBMB8GA1UdIwQY
MBaAFHWQWUnpY9NXe+B2MmyguR/zL5aEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQt
MWE4MzAxYjdlNmRlLzEvbVJrREhSbVhZVzJyRkVJcWlPanhtWnZXOFFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQtMWE4MzAxYjdlNmRl
LzEvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGKg3WAAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAPRZ8itx32JyTkubdWbQdUJXGO5C3a7DbgCZL0
vEG6x8xZgVApZr9Sh33oVcBCQd3p6YFzDb9tYrLLFXZqQHlY78RqgGuLia62t80P
20bgR7hkzC32+qPJsgrFjTMgJuMXhRs1MzC/S2dwcS/5dCWXBoN2BWjk6sDIWXom
m6jfGzugTK/bPwSzEl5SNpuDedHXCK5FKto4QUsyCwahqKs+omriyfbzpZPR5uQD
uAScSvpAjCYCzmetjc072Wnr31c5MiyF8fJ7yQRHNGPR7xRny1y9QOrgj3m5Zz9A
dvfkuKIZhZRPo24vYRCOVimyw6Q+0OpwNGEy5RZ1k3WDxBGr
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:49 2025 by rpki-client