Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/AZPL5eN8KsE-IGPzFezNYPIt5sU.roa
File: AZPL5eN8KsE-IGPzFezNYPIt5sU.roa (raw, json)
Hash identifier: +h7kx8DpcD/lLfvAlPD6XgA44Nm8JfXJ3+nxggudDbM=
Subject key identifier: 01:93:CB:E5:E3:7C:2A:C1:3E:20:63:F3:15:EC:CD:60:F2:2D:E6:C5
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 0185558B7807DB7E235E9F6309C257DE79F5
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/AZPL5eN8KsE-IGPzFezNYPIt5sU.roa
Signing time: Tue 27 Dec 2022 21:44:41 +0000
ROA not before: Tue 27 Dec 2022 21:44:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44445
IP address blocks: 2a12:c6c1::/32 maxlen: 48
2a12:c6c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:55:8b:78:07:db:7e:23:5e:9f:63:09:c2:57:de:79:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Dec 27 21:44:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0193cbe5e37c2ac13e2063f315eccd60f22de6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:60:a5:99:5e:cf:8d:79:b6:4a:95:3c:c2:
72:af:a0:34:7d:ca:65:1e:34:61:16:22:d5:d4:3a:
35:a0:4e:75:01:d0:d9:20:17:dc:9d:c4:c5:63:41:
1a:16:40:23:9e:e3:b1:89:f1:af:55:dd:0b:3a:f0:
f6:ee:49:b1:cc:eb:8a:53:15:8c:0c:af:a6:66:93:
0a:f7:e9:d5:86:2b:cf:95:5e:9f:77:db:76:4f:3c:
39:87:cc:30:54:33:af:21:81:d2:8d:5a:5b:16:2e:
76:2e:9d:80:7c:7b:f4:c1:6e:b1:06:bc:cd:52:45:
55:2a:f2:8c:71:1a:5c:ec:49:de:f0:07:4a:0c:a1:
f3:0f:69:44:50:f1:a5:8f:57:4b:5f:66:c1:1d:35:
87:58:7d:7f:19:70:dc:cc:ec:79:a5:2c:d7:b8:09:
a4:23:3d:a3:77:77:69:27:71:75:8e:72:11:bf:fd:
1f:d2:b8:52:0c:44:66:13:1f:46:db:01:46:ec:be:
53:bd:b0:24:d8:68:ab:73:58:15:5b:25:61:e0:25:
49:ae:b6:61:29:5c:43:19:b2:75:0c:87:3b:bc:60:
0b:a9:80:d9:be:32:66:aa:e1:fb:5f:27:92:c3:16:
af:19:79:2e:34:09:4c:ea:47:ab:41:a1:79:b0:e0:
3a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:93:CB:E5:E3:7C:2A:C1:3E:20:63:F3:15:EC:CD:60:F2:2D:E6:C5
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/AZPL5eN8KsE-IGPzFezNYPIt5sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c6c0::/31
Signature Algorithm: sha256WithRSAEncryption
84:31:f5:f7:01:2e:94:1c:c8:d7:8f:81:61:d4:9b:d3:38:5b:
b0:35:bd:98:a1:9f:c8:94:5f:03:62:e3:65:bf:24:43:88:7e:
d3:ca:71:70:7a:b4:1b:6c:0b:b0:8f:82:cf:c2:27:0c:bc:a4:
76:b6:49:7d:53:32:cd:18:37:f9:3d:3e:77:8b:71:55:c6:5f:
67:d0:d3:19:b5:61:2f:44:0a:7b:1a:5d:58:6d:ff:b2:28:5c:
c5:aa:d4:45:df:53:bb:82:bd:4c:8a:fb:c1:8b:1d:f6:fa:9b:
8a:fb:11:85:32:ce:8c:06:ec:53:38:06:7c:31:25:70:94:b0:
7f:8c:08:e5:b9:82:af:1f:8a:53:b5:86:a4:23:b2:b3:c5:52:
01:23:9d:12:f6:df:f1:06:cd:f6:cc:27:93:73:08:5b:06:4e:
62:66:58:83:54:61:e5:b2:7e:ff:4c:54:04:35:08:b8:e6:e6:
b9:4a:b9:19:98:00:a7:14:11:cd:0d:b1:1e:d3:9a:bd:01:a0:
82:aa:d4:2f:bc:3e:21:32:8b:06:ad:a1:70:93:b7:ea:0f:98:
40:35:e9:d1:44:33:bd:31:c4:8a:ba:72:17:b7:0b:21:07:44:
0b:ad:c0:75:6d:87:92:65:a2:70:5a:59:97:25:f7:4b:a6:77:
31:40:47:14
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVVi3gH234jXp9jCcJX3nn1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YTU2ZWJmMDFlMDAzNDlmNjczMDE5MTgwNTYwYzlhMzFh
ZWE4NzEwHhcNMjIxMjI3MjE0NDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTkzY2JlNWUzN2MyYWMxM2UyMDYzZjMxNWVjY2Q2MGYyMmRlNmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJdgpZlez415tkqVPMJyr6A0fcpl
HjRhFiLV1Do1oE51AdDZIBfcncTFY0EaFkAjnuOxifGvVd0LOvD27kmxzOuKUxWM
DK+mZpMK9+nVhivPlV6fd9t2Tzw5h8wwVDOvIYHSjVpbFi52Lp2AfHv0wW6xBrzN
UkVVKvKMcRpc7Ene8AdKDKHzD2lEUPGlj1dLX2bBHTWHWH1/GXDczOx5pSzXuAmk
Iz2jd3dpJ3F1jnIRv/0f0rhSDERmEx9G2wFG7L5TvbAk2Girc1gVWyVh4CVJrrZh
KVxDGbJ1DIc7vGALqYDZvjJmquH7XyeSwxavGXkuNAlM6kerQaF5sOA6ZQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFAGTy+XjfCrBPiBj8xXszWDyLebFMB8GA1UdIwQY
MBaAFKWlbr8B4ANJ9nMBkYBWDJoxrqhxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQt
MmQ0NmQzMGRhY2JmLzEvQVpQTDVlTjhLc0UtSUdQekZlek5ZUEl0NXNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQtMmQ0NmQzMGRhY2Jm
LzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKhLGwDAN
BgkqhkiG9w0BAQsFAAOCAQEAhDH19wEulBzI14+BYdSb0zhbsDW9mKGfyJRfA2Lj
Zb8kQ4h+08pxcHq0G2wLsI+Cz8InDLykdrZJfVMyzRg3+T0+d4txVcZfZ9DTGbVh
L0QKexpdWG3/sihcxarURd9Tu4K9TIr7wYsd9vqbivsRhTLOjAbsUzgGfDElcJSw
f4wI5bmCrx+KU7WGpCOys8VSASOdEvbf8QbN9swnk3MIWwZOYmZYg1Rh5bJ+/0xU
BDUIuObmuUq5GZgApxQRzQ2xHtOavQGggqrUL7w+ITKLBq2hcJO36g+YQDXp0UQz
vTHEirpyF7cLIQdEC63AdW2HkmWicFpZlyX3S6Z3MUBHFA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:48:28 2025 by rpki-client