Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/DCj3Aihyct4tKxqgJHNpN9AQzkI.roa
File: DCj3Aihyct4tKxqgJHNpN9AQzkI.roa (raw, json)
Hash identifier: s6aUNc1QbOLiBtEGFxoaNB/bm6MaNxcmLdigJgRTRaY=
Subject key identifier: 0C:28:F7:02:28:72:72:DE:2D:2B:1A:A0:24:73:69:37:D0:10:CE:42
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 0185718C24A8537060902A2B5079FC6A8E0B
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/DCj3Aihyct4tKxqgJHNpN9AQzkI.roa
Signing time: Mon 02 Jan 2023 08:14:47 +0000
ROA not before: Mon 02 Jan 2023 08:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47316
IP address blocks: 2a12:c6c3::/32 maxlen: 48
2a12:c6c2::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:24:a8:53:70:60:90:2a:2b:50:79:fc:6a:8e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Jan 2 08:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c28f702287272de2d2b1aa024736937d010ce42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ed:fe:aa:2d:f9:8d:06:fe:ee:ec:8d:98:d0:
c8:c1:e8:a1:27:a2:69:ac:dd:0b:8b:7b:9e:5f:2c:
76:60:e4:cb:f2:21:61:af:05:73:cc:ee:af:42:3e:
e4:2a:b1:d1:d4:87:4a:ee:fa:e1:55:85:21:52:ed:
6c:88:7a:fc:45:20:64:b4:76:11:33:d1:2f:84:6d:
b8:52:93:25:c3:79:d4:52:9a:04:0a:6f:82:39:39:
57:cc:7e:3d:74:2a:4c:a1:3e:08:2a:dc:12:31:e8:
5a:72:d8:f5:82:e9:0c:0f:d7:8b:fb:af:1a:71:5c:
d7:48:9b:21:c3:cd:38:25:75:7d:7c:93:53:07:ea:
99:cd:5a:70:0d:f0:f2:f4:cc:f3:5c:f8:df:0c:58:
c3:40:ac:bc:98:50:58:71:95:a5:09:44:fa:bd:51:
69:e3:d7:1b:ef:b5:81:92:8a:c3:66:86:5e:cf:ea:
c6:1b:31:74:dc:48:87:5a:ce:76:9d:2c:a8:16:56:
8f:cb:85:d8:f0:fa:9c:c2:8a:42:e0:e5:b5:80:5e:
1b:a1:00:57:92:f3:d6:5d:c5:9e:84:14:a8:53:c2:
b4:63:d2:86:e7:f7:22:0c:9a:31:a5:f3:ed:17:9d:
5e:bc:55:b2:22:02:f1:54:a8:ce:64:21:e0:56:34:
0c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:28:F7:02:28:72:72:DE:2D:2B:1A:A0:24:73:69:37:D0:10:CE:42
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/DCj3Aihyct4tKxqgJHNpN9AQzkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c6c2::/31
Signature Algorithm: sha256WithRSAEncryption
a3:46:5d:0f:53:9c:65:6c:2d:6d:62:44:1d:95:8d:a1:9b:b7:
31:6b:c9:e3:cd:bd:d8:c7:0d:08:d1:ad:3d:60:38:4c:2d:36:
23:bb:52:ca:d6:58:73:03:37:2d:aa:98:c7:f6:9e:40:d8:26:
e4:d7:01:5a:70:44:dc:81:38:14:9a:61:83:40:35:fc:2c:53:
25:c2:15:f7:56:b9:81:3f:b6:bc:1e:1d:a0:05:d0:99:86:4b:
68:9e:0e:e2:39:db:29:e7:18:1b:d9:54:aa:77:09:b4:ea:cc:
40:3e:46:44:2a:46:20:67:9e:01:9e:0e:15:a0:99:87:b5:95:
a7:ec:e4:47:f6:b3:13:43:d6:c5:94:d1:e3:08:ce:ca:fe:7d:
d0:82:14:18:5e:a7:c2:f6:1f:f8:77:16:b2:90:c1:82:70:98:
13:19:55:fd:58:5b:d0:61:7e:65:3d:c3:1b:05:88:d5:8f:fa:
3d:2d:4a:d8:08:b5:20:78:43:04:a1:e5:47:05:a9:0c:b4:72:
fd:f4:2f:55:df:99:ff:b3:a5:70:d5:f6:e8:6e:b2:cc:14:14:
43:c2:dc:1f:25:df:d2:10:e4:93:9b:00:38:fb:0e:9e:7c:37:
c5:9f:56:87:23:dd:89:82:a6:7d:72:3f:38:c2:a7:6d:bb:8a:
62:6e:0c:c2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVxjCSoU3BgkCorUHn8ao4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YTU2ZWJmMDFlMDAzNDlmNjczMDE5MTgwNTYwYzlhMzFh
ZWE4NzEwHhcNMjMwMTAyMDgxNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzI4ZjcwMjI4NzI3MmRlMmQyYjFhYTAyNDczNjkzN2QwMTBjZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge3+qi35jQb+7uyNmNDIweihJ6Jp
rN0Li3ueXyx2YOTL8iFhrwVzzO6vQj7kKrHR1IdK7vrhVYUhUu1siHr8RSBktHYR
M9EvhG24UpMlw3nUUpoECm+COTlXzH49dCpMoT4IKtwSMehactj1gukMD9eL+68a
cVzXSJshw804JXV9fJNTB+qZzVpwDfDy9MzzXPjfDFjDQKy8mFBYcZWlCUT6vVFp
49cb77WBkorDZoZez+rGGzF03EiHWs52nSyoFlaPy4XY8PqcwopC4OW1gF4boQBX
kvPWXcWehBSoU8K0Y9KG5/ciDJoxpfPtF51evFWyIgLxVKjOZCHgVjQM7wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFAwo9wIocnLeLSsaoCRzaTfQEM5CMB8GA1UdIwQY
MBaAFKWlbr8B4ANJ9nMBkYBWDJoxrqhxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQt
MmQ0NmQzMGRhY2JmLzEvRENqM0FpaHljdDR0S3hxZ0pITnBOOUFRemtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQtMmQ0NmQzMGRhY2Jm
LzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKhLGwjAN
BgkqhkiG9w0BAQsFAAOCAQEAo0ZdD1OcZWwtbWJEHZWNoZu3MWvJ48292McNCNGt
PWA4TC02I7tSytZYcwM3LaqYx/aeQNgm5NcBWnBE3IE4FJphg0A1/CxTJcIV91a5
gT+2vB4doAXQmYZLaJ4O4jnbKecYG9lUqncJtOrMQD5GRCpGIGeeAZ4OFaCZh7WV
p+zkR/azE0PWxZTR4wjOyv590IIUGF6nwvYf+HcWspDBgnCYExlV/Vhb0GF+ZT3D
GwWI1Y/6PS1K2Ai1IHhDBKHlRwWpDLRy/fQvVd+Z/7OlcNX26G6yzBQUQ8LcHyXf
0hDkk5sAOPsOnnw3xZ9WhyPdiYKmfXI/OMKnbbuKYm4Mwg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:19:44 2025 by rpki-client