Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/V2nDq6JdrCUAXc8xFCtNyCXsde0.roa
File: V2nDq6JdrCUAXc8xFCtNyCXsde0.roa (raw, json)
Hash identifier: fiAxcWQf7SiZXeSlDEeDwbOfSJZBYdQfG91dKbMnV6g=
Subject key identifier: 57:69:C3:AB:A2:5D:AC:25:00:5D:CF:31:14:2B:4D:C8:25:EC:75:ED
Certificate issuer: /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Certificate serial: 01856CE63891876ADD3C03180E207E1F4881
Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/V2nDq6JdrCUAXc8xFCtNyCXsde0.roa
Signing time: Sun 01 Jan 2023 10:35:05 +0000
ROA not before: Sun 01 Jan 2023 10:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212378
IP address blocks: 2001:678:ec0::/48 maxlen: 48
2001:678:ec4::/48 maxlen: 48
2001:678:9e4::/48 maxlen: 48
2001:67c:11f0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:38:91:87:6a:dd:3c:03:18:0e:20:7e:1f:48:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Validity
Not Before: Jan 1 10:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5769c3aba25dac25005dcf31142b4dc825ec75ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d9:63:aa:2f:cb:f5:92:0c:b6:2a:1d:66:28:
d3:2a:b6:92:31:9f:42:ac:b7:d7:40:79:71:12:4f:
f5:2c:71:26:77:f3:87:56:96:65:68:b8:91:87:71:
de:55:e5:1c:e2:29:46:d7:6b:c6:96:c2:99:d7:6d:
a7:2f:01:95:4e:30:5f:42:8b:62:95:5d:6d:11:ba:
63:b5:b1:8c:7e:54:83:00:f1:7c:f2:a6:48:ef:cc:
2e:a0:23:3f:01:b2:a9:8b:df:2f:3e:f2:49:6f:6d:
8b:0c:d5:e2:d1:31:e5:bd:93:8e:ea:4c:d7:aa:bd:
d1:f1:5a:ae:ca:1e:27:bd:46:1f:d8:5c:bd:26:bb:
28:e3:26:05:02:a6:4e:f5:99:dc:99:e3:cd:a2:fe:
0a:c4:df:7a:ae:dd:61:82:36:b9:b2:2d:55:1b:72:
69:01:10:e4:0a:85:bd:97:d7:e6:65:44:11:ec:b1:
0e:62:57:52:fe:ed:a4:3b:fe:ad:64:e4:12:e5:10:
87:18:30:3e:f5:d8:dc:2a:f1:7d:d9:6f:a3:dd:63:
21:1e:da:1f:51:1c:8a:12:75:df:b3:94:ed:ee:c9:
08:15:64:19:81:1a:5e:82:41:1e:7e:37:38:d0:0f:
af:56:86:c6:e6:42:a7:86:f3:d1:76:94:e4:24:ec:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:69:C3:AB:A2:5D:AC:25:00:5D:CF:31:14:2B:4D:C8:25:EC:75:ED
X509v3 Authority Key Identifier:
keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/V2nDq6JdrCUAXc8xFCtNyCXsde0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:9e4::/48
2001:678:ec0::/48
2001:678:ec4::/48
2001:67c:11f0::/48
Signature Algorithm: sha256WithRSAEncryption
15:3b:fc:68:43:2f:74:c9:7f:45:e5:dd:a4:30:00:33:60:69:
f1:51:1d:cc:90:f2:ca:e5:ec:1c:6f:c0:87:37:bd:93:87:50:
6f:67:86:c7:b1:f8:f5:26:da:6e:66:69:31:63:30:86:3a:0c:
37:16:d1:da:07:29:5d:6f:9a:07:90:b1:03:0e:05:d2:59:3e:
25:cc:8b:fc:4a:9a:ac:d7:39:a9:56:2e:da:db:fa:f1:25:73:
f7:1c:32:b0:dc:d2:26:5c:50:f3:aa:60:3c:51:bf:64:2f:5c:
be:45:1e:28:92:46:f5:1d:f4:b4:da:a7:4c:1f:ce:a8:e8:2a:
b9:89:2d:94:6d:0f:f2:a5:07:af:75:28:d1:1b:f9:63:7c:e3:
bf:3c:fa:30:21:47:a9:76:69:b6:7f:98:70:9d:ac:22:5e:4a:
63:a3:b0:09:45:80:02:ba:b5:63:66:a0:3e:44:68:fb:7c:6d:
0e:85:49:9b:e1:02:a1:ef:ea:69:a4:5a:d6:98:51:f3:7c:5f:
2d:a2:a3:d0:b3:e8:1b:a8:86:40:34:88:61:73:15:5e:b2:67:
88:5e:14:56:a6:07:14:98:74:da:15:2a:e2:70:52:1a:de:9a:
12:71:ad:00:f0:a1:76:dd:21:8e:fc:8a:4e:22:0b:8d:dd:75:
29:5f:9f:1a
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYVs5jiRh2rdPAMYDiB+H0iBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOGQ3ZWE0N2QxYjcwMGMzZDZiNzk5MzU4YWE3ZWE1ZWNh
OGIzZDIwHhcNMjMwMTAxMTAzNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzY5YzNhYmEyNWRhYzI1MDA1ZGNmMzExNDJiNGRjODI1ZWM3NWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9ljqi/L9ZIMtiodZijTKraSMZ9C
rLfXQHlxEk/1LHEmd/OHVpZlaLiRh3HeVeUc4ilG12vGlsKZ122nLwGVTjBfQoti
lV1tEbpjtbGMflSDAPF88qZI78wuoCM/AbKpi98vPvJJb22LDNXi0THlvZOO6kzX
qr3R8Vquyh4nvUYf2Fy9Jrso4yYFAqZO9ZncmePNov4KxN96rt1hgja5si1VG3Jp
ARDkCoW9l9fmZUQR7LEOYldS/u2kO/6tZOQS5RCHGDA+9djcKvF92W+j3WMhHtof
URyKEnXfs5Tt7skIFWQZgRpegkEefjc40A+vVobG5kKnhvPRdpTkJOwhVwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFFdpw6uiXawlAF3PMRQrTcgl7HXtMB8GA1UdIwQY
MBaAFI+NfqR9G3AMPWt5k1iqfqXsqLPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MzE0ZTUtYTk2NC00NGY2LWFkYTEt
MjA1MjBlNmI2MTdhLzEvVjJuRHE2SmRyQ1VBWGM4eEZDdE55Q1hzZGUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82MzE0ZTUtYTk2NC00NGY2LWFkYTEtMjA1MjBlNmI2MTdh
LzEvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAIAEGeAnk
AwcAIAEGeA7AAwcAIAEGeA7EAwcAIAEGfBHwMA0GCSqGSIb3DQEBCwUAA4IBAQAV
O/xoQy90yX9F5d2kMAAzYGnxUR3MkPLK5ewcb8CHN72Th1BvZ4bHsfj1JtpuZmkx
YzCGOgw3FtHaByldb5oHkLEDDgXSWT4lzIv8Spqs1zmpVi7a2/rxJXP3HDKw3NIm
XFDzqmA8Ub9kL1y+RR4okkb1HfS02qdMH86o6Cq5iS2UbQ/ypQevdSjRG/ljfOO/
PPowIUepdmm2f5hwnawiXkpjo7AJRYACurVjZqA+RGj7fG0OhUmb4QKh7+pppFrW
mFHzfF8toqPQs+gbqIZANIhhcxVesmeIXhRWpgcUmHTaFSricFIa3poSca0A8KF2
3SGO/IpOIguN3XUpX58a
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:01 2025 by rpki-client