Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/2upr5lz8961mVKr4L4JAcLtuJ2M.roa
File: 2upr5lz8961mVKr4L4JAcLtuJ2M.roa (raw, json)
Hash identifier: 6bY5yfey5kozVnimsbsa8jaN+H+Q3NRGajhLoLr7k5U=
Subject key identifier: DA:EA:6B:E6:5C:FC:F7:AD:66:54:AA:F8:2F:82:40:70:BB:6E:27:63
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 0185718C24EA9E643C1DF07E341C17B0B975
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/2upr5lz8961mVKr4L4JAcLtuJ2M.roa
Signing time: Mon 02 Jan 2023 08:14:48 +0000
ROA not before: Mon 02 Jan 2023 08:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399976
IP address blocks: 2a12:c6c0::/29 maxlen: 64
2a12:c6c4::/32 maxlen: 48
2a12:c6c7::/32 maxlen: 48
2a12:c6c6::/32 maxlen: 48
2a12:c6c5::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:24:ea:9e:64:3c:1d:f0:7e:34:1c:17:b0:b9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Jan 2 08:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=daea6be65cfcf7ad6654aaf82f824070bb6e2763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:c8:1e:9b:91:bc:b9:fb:cb:d9:bd:c5:ae:
aa:d1:25:ac:f0:7a:3e:be:2e:15:0b:f6:21:c2:03:
43:3f:d1:39:b1:52:cb:4f:36:30:c6:96:6b:46:4e:
62:7a:89:d5:e8:f3:bc:cc:fc:07:38:31:e6:38:3c:
90:89:18:48:72:40:fb:40:88:cd:fc:e9:dd:b0:ea:
d7:c3:35:8e:da:39:52:3a:74:51:b9:4b:04:36:bb:
93:ad:db:69:bc:6c:21:1b:b3:72:3e:f4:9d:e9:ba:
b3:2f:46:95:40:c6:42:aa:5f:8f:73:fb:78:23:0e:
98:69:f4:c3:a5:14:fa:09:06:1f:db:83:64:98:5f:
37:5f:e1:2a:dd:b7:24:0c:cb:a2:63:af:60:cd:71:
53:b3:d0:a3:bf:20:a3:e6:3f:0d:9f:77:32:e7:88:
7a:e0:be:c8:f4:d4:19:30:e4:ca:ed:1b:70:6e:17:
d3:64:ef:8c:eb:7d:84:a2:c2:61:db:39:91:02:da:
a8:43:3a:fc:c6:48:69:ab:33:1c:ac:f9:8a:61:09:
62:f2:de:68:e8:19:9d:19:56:37:67:98:e2:d8:0e:
6e:58:8d:91:fc:a3:f9:db:db:a9:91:4e:12:0e:de:
dd:46:90:c5:c8:51:59:4d:40:4f:a4:7d:f0:b7:f4:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EA:6B:E6:5C:FC:F7:AD:66:54:AA:F8:2F:82:40:70:BB:6E:27:63
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/2upr5lz8961mVKr4L4JAcLtuJ2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c6c0::/29
Signature Algorithm: sha256WithRSAEncryption
a5:b5:bd:90:7b:fb:31:33:32:f1:ac:73:d8:f2:83:6e:4a:bc:
b3:96:88:34:c8:3b:cf:1c:4b:19:d9:35:4d:4b:81:4b:43:97:
57:88:c8:00:84:eb:fb:2a:22:ad:73:2c:a7:93:7b:dd:4b:b7:
48:73:fa:e0:6c:30:c6:30:e9:34:7e:db:1c:39:e0:18:58:75:
b3:6d:c3:71:bd:3d:d7:c8:e0:41:95:42:dd:46:3e:ae:b6:86:
fc:5f:7a:62:76:ad:8d:ee:05:05:8f:88:9c:dc:5e:36:28:b3:
91:9b:fc:64:ee:d3:bb:d9:5a:c9:3e:b2:c8:c0:96:15:17:3a:
e2:52:9e:90:26:cb:58:df:9c:d9:5e:5e:2f:34:a9:44:8b:cc:
28:be:8e:04:52:c9:92:dc:35:30:91:85:cf:5a:6f:66:2a:cf:
0d:99:78:27:0d:43:e2:3f:86:fc:a5:e6:cb:a6:76:f3:0a:65:
6b:10:cc:99:f0:ec:3c:57:d9:6f:dd:b7:5c:8a:dd:c9:9d:4e:
a8:6b:10:f0:c5:ca:ae:89:b0:8a:2b:4f:2b:40:9f:10:57:4e:
dd:f0:71:2e:8d:05:b1:6b:0b:d5:d1:c9:f3:f1:74:09:07:9c:
c6:bb:3f:68:c4:27:8c:4d:19:ad:8b:a4:99:cf:3d:b4:02:40:
f9:ed:be:a7
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVxjCTqnmQ8HfB+NBwXsLl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YTU2ZWJmMDFlMDAzNDlmNjczMDE5MTgwNTYwYzlhMzFh
ZWE4NzEwHhcNMjMwMTAyMDgxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWVhNmJlNjVjZmNmN2FkNjY1NGFhZjgyZjgyNDA3MGJiNmUyNzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUXIHpuRvLn7y9m9xa6q0SWs8Ho+
vi4VC/YhwgNDP9E5sVLLTzYwxpZrRk5ieonV6PO8zPwHODHmODyQiRhIckD7QIjN
/OndsOrXwzWO2jlSOnRRuUsENruTrdtpvGwhG7NyPvSd6bqzL0aVQMZCql+Pc/t4
Iw6YafTDpRT6CQYf24NkmF83X+Eq3bckDMuiY69gzXFTs9CjvyCj5j8Nn3cy54h6
4L7I9NQZMOTK7RtwbhfTZO+M632EosJh2zmRAtqoQzr8xkhpqzMcrPmKYQli8t5o
6BmdGVY3Z5ji2A5uWI2R/KP529upkU4SDt7dRpDFyFFZTUBPpH3wt/TmeQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNrqa+Zc/PetZlSq+C+CQHC7bidjMB8GA1UdIwQY
MBaAFKWlbr8B4ANJ9nMBkYBWDJoxrqhxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQt
MmQ0NmQzMGRhY2JmLzEvMnVwcjVsejg5NjFtVktyNEw0SkFjTHR1SjJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQtMmQ0NmQzMGRhY2Jm
LzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLGwDAN
BgkqhkiG9w0BAQsFAAOCAQEApbW9kHv7MTMy8axz2PKDbkq8s5aINMg7zxxLGdk1
TUuBS0OXV4jIAITr+yoirXMsp5N73Uu3SHP64GwwxjDpNH7bHDngGFh1s23Dcb09
18jgQZVC3UY+rraG/F96Ynatje4FBY+InNxeNiizkZv8ZO7Tu9layT6yyMCWFRc6
4lKekCbLWN+c2V5eLzSpRIvMKL6OBFLJktw1MJGFz1pvZirPDZl4Jw1D4j+G/KXm
y6Z28wplaxDMmfDsPFfZb923XIrdyZ1OqGsQ8MXKromwiitPK0CfEFdO3fBxLo0F
sWsL1dHJ8/F0CQecxrs/aMQnjE0ZrYukmc89tAJA+e2+pw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:04 2025 by rpki-client