Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/pBrQsw-pkt5Yt_M6uSD3Fj6eENM.roa
File: pBrQsw-pkt5Yt_M6uSD3Fj6eENM.roa (raw, json)
Hash identifier: Q5O7y00Sngemk4Dbd/4vQYHvr2+8oaGd12xLPNdHDAE=
Subject key identifier: A4:1A:D0:B3:0F:A9:92:DE:58:B7:F3:3A:B9:20:F7:16:3E:9E:10:D3
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 01856C6F0483465DE1758619513CB1EA1AAF
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/pBrQsw-pkt5Yt_M6uSD3Fj6eENM.roa
Signing time: Sun 01 Jan 2023 08:24:53 +0000
ROA not before: Sun 01 Jan 2023 08:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137490
IP address blocks: 2a0e:46c4:110::/48 maxlen: 48
2a0e:46c4:200::/48 maxlen: 48
2a0e:46c4:101::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:04:83:46:5d:e1:75:86:19:51:3c:b1:ea:1a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 08:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a41ad0b30fa992de58b7f33ab920f7163e9e10d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bd:14:11:ba:42:fc:f3:ff:15:a0:94:14:78:
de:36:d2:48:01:7a:a3:db:92:32:6b:32:9f:19:cf:
da:7a:ec:76:e6:b5:9b:82:2c:2c:5f:d9:49:98:ef:
4f:ab:41:bd:4d:32:80:03:54:c5:65:d9:e2:5f:be:
bd:6f:3d:cd:5d:0c:bb:9e:2c:92:dc:a7:f7:86:65:
e3:7f:2e:4b:35:19:44:bc:4d:63:98:09:43:e0:ab:
d5:2b:10:a9:20:88:aa:4d:e3:b1:26:18:2d:bc:84:
ea:87:04:05:2c:11:25:0a:f3:d6:14:25:dc:11:18:
75:4e:73:5f:ec:e3:2b:f5:f6:1d:39:cc:ee:3d:0a:
f6:41:88:40:15:c4:61:81:7a:85:d1:f4:60:3d:af:
8a:c6:2a:a0:5c:e3:c6:73:c3:6d:ba:35:fc:d8:36:
38:fe:fc:ab:c1:1c:ca:e7:8b:5c:09:84:55:41:df:
d6:c5:6a:a0:e6:bb:89:28:0d:76:e4:cb:fe:c8:6b:
fa:23:69:ef:c7:73:f7:e6:8e:01:27:75:af:fb:99:
54:b9:9b:7a:54:dc:e5:b5:2d:17:b7:a6:90:ba:31:
4e:dd:2a:b8:5b:7f:31:38:e9:10:b9:83:25:b8:b9:
9f:58:d1:72:76:8f:40:82:e6:af:19:14:47:44:36:
8f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1A:D0:B3:0F:A9:92:DE:58:B7:F3:3A:B9:20:F7:16:3E:9E:10:D3
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/pBrQsw-pkt5Yt_M6uSD3Fj6eENM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:101::/48
2a0e:46c4:110::/48
2a0e:46c4:200::/48
Signature Algorithm: sha256WithRSAEncryption
78:89:3b:a9:cd:df:e0:29:74:98:63:13:66:fa:95:e9:2b:8d:
9e:f6:b2:87:ac:bc:2d:7e:f2:75:4b:fb:92:d5:02:67:b6:43:
f9:8a:36:2e:36:25:c3:88:ba:3e:69:c9:de:06:b3:40:07:04:
81:0a:fb:e2:d3:27:0f:26:be:db:d3:03:07:b7:52:05:f5:3e:
62:f9:3b:07:bb:f3:38:81:71:48:dc:b8:b1:41:c6:17:0c:78:
ed:8c:dc:7a:82:ed:aa:6e:14:92:0d:4c:7f:b2:9c:d3:81:cc:
72:9c:19:96:6f:78:62:0e:b9:7f:ce:04:d9:ae:0e:36:9e:6c:
70:44:b8:35:08:c7:5f:a8:9c:78:93:c6:f3:98:a2:ac:e2:67:
c9:7d:ad:db:c5:80:62:6b:82:91:d0:46:5a:c2:89:18:03:fc:
a6:12:3c:9c:63:d5:5e:89:cd:72:44:33:63:eb:76:05:bd:e5:
58:eb:07:0a:9a:f5:87:e2:9d:f6:19:86:81:2a:61:b4:89:ac:
b5:3a:99:00:43:3c:00:9a:dc:d1:3d:73:13:42:ab:ef:6a:e4:
a2:17:04:13:a8:59:d6:79:a7:26:ec:6b:79:fe:05:a8:06:86:
dd:59:18:ab:92:bf:92:b2:27:df:ad:3f:68:c6:67:23:cb:08:
35:b8:70:6f
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVsbwSDRl3hdYYZUTyx6hqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm
MGI0ZjcwHhcNMjMwMTAxMDgyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDFhZDBiMzBmYTk5MmRlNThiN2YzM2FiOTIwZjcxNjNlOWUxMGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh70UEbpC/PP/FaCUFHjeNtJIAXqj
25IyazKfGc/aeux25rWbgiwsX9lJmO9Pq0G9TTKAA1TFZdniX769bz3NXQy7niyS
3Kf3hmXjfy5LNRlEvE1jmAlD4KvVKxCpIIiqTeOxJhgtvITqhwQFLBElCvPWFCXc
ERh1TnNf7OMr9fYdOczuPQr2QYhAFcRhgXqF0fRgPa+KxiqgXOPGc8NtujX82DY4
/vyrwRzK54tcCYRVQd/WxWqg5ruJKA125Mv+yGv6I2nvx3P35o4BJ3Wv+5lUuZt6
VNzltS0Xt6aQujFO3Sq4W38xOOkQuYMluLmfWNFydo9AguavGRRHRDaPwwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFKQa0LMPqZLeWLfzOrkg9xY+nhDTMB8GA1UdIwQY
MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt
ODU4ZGNlNTdmY2RiLzEvcEJyUXN3LXBrdDVZdF9NNnVTRDNGajZlRU5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri
LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKg5GxAEB
AwcAKg5GxAEQAwcAKg5GxAIAMA0GCSqGSIb3DQEBCwUAA4IBAQB4iTupzd/gKXSY
YxNm+pXpK42e9rKHrLwtfvJ1S/uS1QJntkP5ijYuNiXDiLo+acneBrNABwSBCvvi
0ycPJr7b0wMHt1IF9T5i+TsHu/M4gXFI3LixQcYXDHjtjNx6gu2qbhSSDUx/spzT
gcxynBmWb3hiDrl/zgTZrg42nmxwRLg1CMdfqJx4k8bzmKKs4mfJfa3bxYBia4KR
0EZawokYA/ymEjycY9Veic1yRDNj63YFveVY6wcKmvWH4p32GYaBKmG0iay1OpkA
QzwAmtzRPXMTQqvvauSiFwQTqFnWeacm7Gt5/gWoBobdWRirkr+SsiffrT9oxmcj
ywg1uHBv
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:51 2025 by rpki-client