Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/Vb9LPC3zvmI_uFdF0pEeUkigtkA.roa
File: Vb9LPC3zvmI_uFdF0pEeUkigtkA.roa (raw, json)
Hash identifier: CwWuTByNqRInKHHUii7lkZwfAa9HFA9uu2c+ElsUNfE=
Subject key identifier: 55:BF:4B:3C:2D:F3:BE:62:3F:B8:57:45:D2:91:1E:52:48:A0:B6:40
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 0183A389E331CB59C89BC723CC2281CE6EDC
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/Vb9LPC3zvmI_uFdF0pEeUkigtkA.roa
Signing time: Tue 04 Oct 2022 15:07:46 +0000
ROA not before: Tue 04 Oct 2022 15:07:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 2a03:fd83::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:89:e3:31:cb:59:c8:9b:c7:23:cc:22:81:ce:6e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Oct 4 15:07:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55bf4b3c2df3be623fb85745d2911e5248a0b640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:86:75:92:e3:a0:92:a4:e2:d8:d9:b3:d5:a2:
c9:e8:44:b4:b0:25:df:6b:bf:5d:30:36:1d:9d:f1:
dd:ca:d0:ae:49:a5:2f:37:14:ea:71:7f:07:98:67:
73:ac:c5:21:99:b2:4b:73:bd:50:f5:54:3c:b8:8a:
18:74:f1:1c:0d:14:78:56:37:ef:51:ba:a2:8f:34:
9b:27:39:b0:f2:a2:e6:84:36:19:e0:35:1e:3d:50:
08:2f:26:ec:9c:84:51:41:07:c6:9d:04:67:da:13:
21:fb:52:58:05:db:03:e9:5f:e9:8f:df:d0:3c:4a:
03:cb:2c:12:50:bb:e2:88:9d:50:43:92:0b:b8:5c:
29:8e:80:42:ed:de:8f:3b:88:5c:99:25:8c:bb:85:
76:c8:8c:12:fc:38:ca:c0:53:84:ad:e4:2f:51:eb:
e6:b2:7f:b3:b5:9b:74:bd:90:25:f1:8d:8e:26:39:
d6:c3:69:46:61:0d:41:72:ca:06:b1:15:0b:c5:24:
98:39:62:54:6e:91:c0:85:5c:a4:e5:66:e0:89:03:
79:ce:cb:ca:36:a4:f7:6d:a6:16:fb:1f:61:5d:41:
37:13:03:8b:77:91:ee:ef:99:ad:3d:37:cc:94:b9:
87:ae:5b:7c:cf:49:aa:e2:10:0e:26:18:fa:3a:d6:
7a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BF:4B:3C:2D:F3:BE:62:3F:B8:57:45:D2:91:1E:52:48:A0:B6:40
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/Vb9LPC3zvmI_uFdF0pEeUkigtkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:fd83::/32
Signature Algorithm: sha256WithRSAEncryption
b0:12:fe:6d:6c:12:a9:18:fb:6e:eb:c0:bd:bb:95:6b:af:10:
ba:cf:38:64:36:fb:75:66:a4:bf:9f:b6:be:dd:a5:bf:11:1c:
f9:f7:77:74:1b:f9:62:4d:b5:c9:49:ef:ea:d3:c2:4e:7a:9c:
a6:72:b8:0e:5e:9b:22:b9:6c:03:dc:09:35:97:12:a1:0a:20:
ef:80:01:cf:49:65:29:8f:4d:18:e5:0c:4c:b2:e7:5d:fe:94:
26:32:d0:2b:1b:de:0b:29:73:2a:2a:07:c8:a8:b1:cd:a9:19:
0a:4d:c2:98:d2:0e:48:40:05:91:1f:03:f9:fb:44:1a:9e:0c:
a8:a5:91:f4:2e:57:4b:ba:68:0c:7a:93:b8:a5:65:b3:db:57:
7f:5b:d1:53:ad:32:13:4a:00:35:8b:a5:98:ac:e6:cb:b5:e4:
b6:bd:49:0f:02:18:f0:d9:30:46:ca:78:ea:44:16:fa:e3:ad:
f0:6f:97:b1:d6:98:2f:3f:3e:6c:4e:bf:cf:9d:78:35:2a:fd:
5c:d5:ac:28:ca:46:bd:40:73:0d:83:02:59:a7:5a:27:b3:cf:
9d:83:e5:3b:27:a3:1e:2d:8b:80:a1:64:23:91:58:af:12:1e:
0f:54:2c:ae:36:5c:4a:dd:ea:9b:22:a3:df:06:3f:d1:6c:04:
8a:0a:66:04
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYOjieMxy1nIm8cjzCKBzm7cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNmVhZGI4NjU5YmM3MzRkY2NiMjlmNjM4NDIxMDM2YmI5
MjJlMzYwHhcNMjIxMDA0MTUwNzQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWJmNGIzYzJkZjNiZTYyM2ZiODU3NDVkMjkxMWU1MjQ4YTBiNjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYZ1kuOgkqTi2Nmz1aLJ6ES0sCXf
a79dMDYdnfHdytCuSaUvNxTqcX8HmGdzrMUhmbJLc71Q9VQ8uIoYdPEcDRR4Vjfv
UbqijzSbJzmw8qLmhDYZ4DUePVAILybsnIRRQQfGnQRn2hMh+1JYBdsD6V/pj9/Q
PEoDyywSULviiJ1QQ5ILuFwpjoBC7d6PO4hcmSWMu4V2yIwS/DjKwFOEreQvUevm
sn+ztZt0vZAl8Y2OJjnWw2lGYQ1BcsoGsRULxSSYOWJUbpHAhVyk5WbgiQN5zsvK
NqT3baYW+x9hXUE3EwOLd5Hu75mtPTfMlLmHrlt8z0mq4hAOJhj6OtZ6WwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFW/Szwt875iP7hXRdKRHlJIoLZAMB8GA1UdIwQY
MBaAFIxurbhlm8c03Msp9jhCEDa7ki42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iZmRiYTAtMmM2MC00MDI3LWFmMGQt
NjY0NWRkM2Q2MjRiLzEvVmI5TFBDM3p2bUlfdUZkRjBwRWVVa2lndGtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iZmRiYTAtMmM2MC00MDI3LWFmMGQtNjY0NWRkM2Q2MjRi
LzEvakc2dHVHV2J4elRjeXluMk9FSVFOcnVTTGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgP9gzAN
BgkqhkiG9w0BAQsFAAOCAQEAsBL+bWwSqRj7buvAvbuVa68Qus84ZDb7dWakv5+2
vt2lvxEc+fd3dBv5Yk21yUnv6tPCTnqcpnK4Dl6bIrlsA9wJNZcSoQog74ABz0ll
KY9NGOUMTLLnXf6UJjLQKxveCylzKioHyKixzakZCk3CmNIOSEAFkR8D+ftEGp4M
qKWR9C5XS7poDHqTuKVls9tXf1vRU60yE0oANYulmKzmy7Xktr1JDwIY8NkwRsp4
6kQW+uOt8G+XsdaYLz8+bE6/z514NSr9XNWsKMpGvUBzDYMCWadaJ7PPnYPlOyej
Hi2LgKFkI5FYrxIeD1QsrjZcSt3qmyKj3wY/0WwEigpmBA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 08:07:58 2025 by rpki-client