Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/ZzF70X6nQS6LCWDawq0qbOjRT74.roa
File: ZzF70X6nQS6LCWDawq0qbOjRT74.roa (raw, json)
Hash identifier: AA93nwXl+ApJTVeiZUM4W90be7Fmd21TlZXewfaYs6w=
Subject key identifier: 67:31:7B:D1:7E:A7:41:2E:8B:09:60:DA:C2:AD:2A:6C:E8:D1:4F:BE
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 0188DF1CF5ADBB58DBDC7BD1E93C29E10852
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/ZzF70X6nQS6LCWDawq0qbOjRT74.roa
Signing time: Wed 21 Jun 2023 17:59:57 +0000
ROA not before: Wed 21 Jun 2023 17:59:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212722
IP address blocks: 2a10:500::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:df:1c:f5:ad:bb:58:db:dc:7b:d1:e9:3c:29:e1:08:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Jun 21 17:59:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67317bd17ea7412e8b0960dac2ad2a6ce8d14fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:7a:51:4f:4d:a6:46:c0:ef:9f:0b:ad:9c:
a7:c0:e5:56:9c:9e:60:78:66:f0:b4:d7:6d:f2:c3:
9c:45:eb:c7:dd:65:32:8f:2c:bc:d1:f2:22:2b:79:
cb:c1:d4:3c:d8:c6:bf:e2:89:bc:6a:98:75:e6:4f:
1c:dc:98:fc:f0:e2:1a:d9:76:9e:3d:e8:30:ad:60:
4d:c4:a6:1a:1b:c1:c1:04:a8:dc:9a:cd:49:30:74:
5f:16:ad:f6:94:90:63:e7:3b:39:c1:4d:81:ac:9d:
0a:1c:60:31:55:77:66:5a:dd:48:9a:e5:bc:94:20:
7f:df:38:79:76:77:7d:86:12:30:5c:9c:1b:88:c2:
d3:ad:bf:23:3a:fa:3e:c3:a9:3a:a2:78:f4:17:05:
f1:1a:b1:ea:10:a3:32:9a:5d:5d:0e:26:6f:6f:5e:
0b:01:e4:f0:8f:dc:09:ca:8c:41:ec:e0:e9:a6:f5:
3f:ac:b3:54:ee:a2:06:cb:a1:47:6b:e8:be:b2:01:
53:9e:1b:d5:d4:f3:4a:7d:f2:88:a5:50:92:90:6c:
3f:6e:11:f1:27:3b:6e:55:16:0a:fa:fb:72:cf:07:
31:19:54:8b:ea:33:9e:8c:fd:00:c4:fb:24:25:17:
ae:85:87:92:c6:ff:44:08:56:71:90:49:b5:0f:e0:
75:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:31:7B:D1:7E:A7:41:2E:8B:09:60:DA:C2:AD:2A:6C:E8:D1:4F:BE
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/ZzF70X6nQS6LCWDawq0qbOjRT74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:500::/32
Signature Algorithm: sha256WithRSAEncryption
9c:36:99:1b:d4:31:09:1e:ad:2b:c5:2f:ed:9d:c3:3e:48:40:
9a:52:d6:c4:05:84:3d:94:6b:eb:db:20:bc:5f:62:2d:d1:47:
36:3f:ef:fc:71:94:fb:e5:ab:47:2c:05:9a:a6:f3:26:7b:80:
82:0c:15:cd:bb:0a:0e:4e:8f:16:65:80:09:14:f6:df:fb:f5:
4a:18:60:eb:51:06:6f:8a:e5:91:d8:2c:ad:0b:9a:24:d6:32:
40:b3:83:6a:76:ed:69:9d:5d:57:95:e2:f0:6e:61:02:a8:5b:
3c:72:7e:fc:4c:ba:fb:dd:7c:8f:c1:43:d7:28:3e:01:82:0a:
a3:d2:6a:f8:b0:08:d0:7a:34:7b:c2:d7:fb:e9:62:68:34:a6:
22:1e:f7:42:47:7d:22:80:c1:35:40:aa:46:fb:e4:2a:6f:d6:
d0:7f:61:7a:51:ef:99:23:29:98:eb:ed:0a:33:0c:4e:72:fd:
70:2a:50:a1:11:03:d6:97:b0:9c:b1:bd:1a:59:2a:5c:88:0b:
57:c3:b5:f6:1e:d4:3c:79:cb:6e:c3:ea:58:cf:2c:e3:90:42:
de:ae:4d:e3:70:65:74:db:e7:6f:4c:74:42:4a:42:09:5a:e9:
ef:59:13:4b:d2:4d:49:f1:b8:43:80:1c:1e:b2:3b:ad:61:4b:
ce:a7:80:2f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYjfHPWtu1jb3HvR6Twp4QhSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzN2I0ODQ0OWJhMWNhZTE1YmRlMmMyZjA4NmQ5NDIxOGUw
NzIwYmIwHhcNMjMwNjIxMTc1OTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzMxN2JkMTdlYTc0MTJlOGIwOTYwZGFjMmFkMmE2Y2U4ZDE0ZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJd6UU9NpkbA758LrZynwOVWnJ5g
eGbwtNdt8sOcRevH3WUyjyy80fIiK3nLwdQ82Ma/4om8aph15k8c3Jj88OIa2Xae
PegwrWBNxKYaG8HBBKjcms1JMHRfFq32lJBj5zs5wU2BrJ0KHGAxVXdmWt1ImuW8
lCB/3zh5dnd9hhIwXJwbiMLTrb8jOvo+w6k6onj0FwXxGrHqEKMyml1dDiZvb14L
AeTwj9wJyoxB7ODppvU/rLNU7qIGy6FHa+i+sgFTnhvV1PNKffKIpVCSkGw/bhHx
JztuVRYK+vtyzwcxGVSL6jOejP0AxPskJReuhYeSxv9ECFZxkEm1D+B1rQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGcxe9F+p0Euiwlg2sKtKmzo0U++MB8GA1UdIwQY
MBaAFAN7SESbocrhW94sLwhtlCGOByC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYt
NzQwM2UxMzY3NWFiLzEvWnpGNzBYNm5RUzZMQ1dEYXdxMHFiT2pSVDc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81ZmY3OGUtZGIxNC00YjA1LTljYzYtNzQwM2UxMzY3NWFi
LzEvQTN0SVJKdWh5dUZiM2l3dkNHMlVJWTRISUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhAFADAN
BgkqhkiG9w0BAQsFAAOCAQEAnDaZG9QxCR6tK8Uv7Z3DPkhAmlLWxAWEPZRr69sg
vF9iLdFHNj/v/HGU++WrRywFmqbzJnuAggwVzbsKDk6PFmWACRT23/v1Shhg61EG
b4rlkdgsrQuaJNYyQLODanbtaZ1dV5Xi8G5hAqhbPHJ+/Ey6+918j8FD1yg+AYIK
o9Jq+LAI0Ho0e8LX++liaDSmIh73Qkd9IoDBNUCqRvvkKm/W0H9helHvmSMpmOvt
CjMMTnL9cCpQoRED1pewnLG9GlkqXIgLV8O19h7UPHnLbsPqWM8s45BC3q5N43Bl
dNvnb0x0QkpCCVrp71kTS9JNSfG4Q4AcHrI7rWFLzqeALw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:22:37 2025 by rpki-client