Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/1-nZWaFy997phqv6cJVDObVeKV9o.roa
File: 1-nZWaFy997phqv6cJVDObVeKV9o.roa (raw, json)
Hash identifier: 0CuVbamgzKP0/6SIKHyQ2wjDg/w46qJuoZCrfdckD+Q=
Subject key identifier: FA:76:56:68:5C:BD:F7:BA:61:AA:FE:9C:25:50:CE:6D:57:8A:57:DA
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 0182FAF9F988DD33DA5A5CE4B17E418E4A53
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/1-nZWaFy997phqv6cJVDObVeKV9o.roa
Signing time: Thu 01 Sep 2022 21:34:22 +0000
ROA not before: Thu 01 Sep 2022 21:34:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44445
IP address blocks: 2a12:c6c0::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fa:f9:f9:88:dd:33:da:5a:5c:e4:b1:7e:41:8e:4a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Sep 1 21:34:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa7656685cbdf7ba61aafe9c2550ce6d578a57da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:68:ed:4e:5c:11:57:91:cf:46:c1:7a:69:
83:58:01:52:c1:ee:be:bb:01:38:83:a9:93:6c:47:
4a:44:2f:a6:3d:26:b1:ab:ee:9f:35:b1:19:e6:b0:
1a:1e:28:c5:b6:a5:5a:aa:9a:80:44:e7:08:ee:ca:
27:f5:4a:93:7d:b4:98:fb:d5:d4:08:c8:2d:c9:40:
a9:27:03:d9:10:40:43:24:22:5a:7c:24:02:dd:fb:
56:e7:b5:fb:1b:d9:21:a2:34:99:b8:e2:44:cd:4e:
9b:32:4c:01:e9:65:9b:8c:32:27:39:ca:13:fa:a4:
d8:68:c5:a1:fc:51:5f:27:ad:b2:dc:be:c2:43:1d:
90:ad:a8:b1:d4:a3:35:48:f9:c3:7e:7e:b4:31:e8:
95:b9:f7:58:fd:f1:aa:d0:87:bd:c8:80:02:c0:97:
5f:66:6f:04:f4:53:2f:d6:81:f9:53:8e:9f:0a:a4:
1d:34:37:90:1b:b3:04:ef:18:3b:16:ed:63:94:eb:
0c:dc:86:dd:b1:ee:48:7e:5c:6d:c2:3a:79:da:64:
3d:cd:e8:10:d8:c7:1d:64:09:c9:76:bc:69:16:4a:
72:bb:de:c0:4a:c6:80:4e:6b:b4:a5:aa:6e:6d:f0:
e9:d0:0d:73:1f:4a:09:a8:99:03:55:63:53:e4:84:
3a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:76:56:68:5C:BD:F7:BA:61:AA:FE:9C:25:50:CE:6D:57:8A:57:DA
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/1-nZWaFy997phqv6cJVDObVeKV9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c6c0::/29
Signature Algorithm: sha256WithRSAEncryption
be:b4:da:10:00:58:7d:29:07:39:f7:74:e0:ae:c9:51:b3:19:
2a:92:4f:47:2f:72:6f:c4:34:d1:2c:7c:7d:16:33:13:5e:28:
59:49:55:b0:96:7c:e6:a4:2e:74:60:35:b9:65:af:d5:16:f4:
90:d8:59:74:30:45:cc:68:9a:16:d9:5f:d8:a1:a5:bb:78:99:
91:3d:f9:7b:fe:f2:62:0f:35:d9:6c:a4:dd:d0:af:24:9b:70:
cc:20:2a:b5:b9:8c:d1:5d:bd:8d:01:b6:6c:17:5c:e2:a9:70:
1a:67:39:3a:58:c9:b6:35:5a:5a:c2:03:5a:f8:98:d3:99:a7:
31:1e:8b:a6:ed:68:6b:83:6e:0a:4f:a1:c3:b4:91:16:04:9d:
33:70:c2:6e:73:ac:55:05:89:2a:13:db:7e:66:62:8f:e7:f3:
10:3c:6e:64:38:b3:00:22:49:d4:30:54:29:b5:03:31:50:b5:
93:73:5e:5d:47:ae:30:4d:55:9e:04:44:fa:8d:d5:3c:aa:ff:
cf:3c:f6:c4:63:a3:2a:cf:ab:27:70:8c:5b:fd:1a:7c:28:25:
79:7c:ad:b8:4d:5e:eb:7e:05:40:6e:07:c0:ea:4e:61:c0:8a:
aa:16:65:cd:6d:31:de:ee:db:85:11:e7:11:61:5c:0d:32:55:
e7:a0:3f:5a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYL6+fmI3TPaWlzksX5BjkpTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YTU2ZWJmMDFlMDAzNDlmNjczMDE5MTgwNTYwYzlhMzFh
ZWE4NzEwHhcNMjIwOTAxMjEzNDIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTc2NTY2ODVjYmRmN2JhNjFhYWZlOWMyNTUwY2U2ZDU3OGE1N2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYFo7U5cEVeRz0bBemmDWAFSwe6+
uwE4g6mTbEdKRC+mPSaxq+6fNbEZ5rAaHijFtqVaqpqAROcI7son9UqTfbSY+9XU
CMgtyUCpJwPZEEBDJCJafCQC3ftW57X7G9khojSZuOJEzU6bMkwB6WWbjDInOcoT
+qTYaMWh/FFfJ62y3L7CQx2Qraix1KM1SPnDfn60MeiVufdY/fGq0Ie9yIACwJdf
Zm8E9FMv1oH5U46fCqQdNDeQG7ME7xg7Fu1jlOsM3Ibdse5Iflxtwjp52mQ9zegQ
2McdZAnJdrxpFkpyu97ASsaATmu0papubfDp0A1zH0oJqJkDVWNT5IQ68QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFPp2Vmhcvfe6Yar+nCVQzm1XilfaMB8GA1UdIwQY
MBaAFKWlbr8B4ANJ9nMBkYBWDJoxrqhxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQt
MmQ0NmQzMGRhY2JmLzEvMS1uWldhRnk5OTdwaHF2NmNKVkRPYlZlS1Y5by5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYTkvNTU0YzM1LWE4M2MtNDMyOS1hMDhkLTJkNDZkMzBkYWNi
Zi8xL3BhVnV2d0hnQTBuMmN3R1JnRllNbWpHdXFIRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoSxsAw
DQYJKoZIhvcNAQELBQADggEBAL602hAAWH0pBzn3dOCuyVGzGSqST0cvcm/ENNEs
fH0WMxNeKFlJVbCWfOakLnRgNbllr9UW9JDYWXQwRcxomhbZX9ihpbt4mZE9+Xv+
8mIPNdlspN3QrySbcMwgKrW5jNFdvY0BtmwXXOKpcBpnOTpYybY1WlrCA1r4mNOZ
pzEei6btaGuDbgpPocO0kRYEnTNwwm5zrFUFiSoT235mYo/n8xA8bmQ4swAiSdQw
VCm1AzFQtZNzXl1HrjBNVZ4ERPqN1Tyq/8889sRjoyrPqydwjFv9GnwoJXl8rbhN
Xut+BUBuB8DqTmHAiqoWZc1tMd7u24UR5xFhXA0yVeegP1o=
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:12 2025 by rpki-client