Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/q85uAfdDoIX6cAulc_zpBVH6coA.roa
File: q85uAfdDoIX6cAulc_zpBVH6coA.roa (raw, json)
Hash identifier: mYNPcZ90G/9T32GavfSZkJ2bie8ImRHM8e+pvjBfifc=
Subject key identifier: AB:CE:6E:01:F7:43:A0:85:FA:70:0B:A5:73:FC:E9:05:51:FA:72:80
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 0A678B
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/q85uAfdDoIX6cAulc_zpBVH6coA.roa
Signing time: Tue 03 May 2022 17:46:07 +0000
ROA not before: Tue 03 May 2022 17:46:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44445
IP address blocks: 2a12:c6c0::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 681867 (0xa678b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: May 3 17:46:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abce6e01f743a085fa700ba573fce90551fa7280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:fa:0a:9c:13:40:7c:3a:e5:05:67:cd:4c:
e1:f1:08:2a:d4:13:a8:96:57:12:4a:09:4b:13:4c:
13:95:0e:64:e3:64:5a:81:8f:50:81:f0:2a:1e:93:
5c:49:e5:86:00:f4:d0:c2:0d:c6:7e:e6:7a:ea:23:
48:2a:c2:48:aa:ea:74:03:82:0d:ac:29:0e:f4:29:
03:23:21:b6:50:a1:ba:2e:28:a7:05:61:f1:d7:1b:
1a:20:6f:4c:5c:30:0e:df:9b:d2:79:fa:00:31:08:
94:c4:20:36:54:8c:e5:97:1b:3f:c7:b8:14:d6:24:
2a:fd:81:6a:af:99:8c:42:19:be:3a:45:59:25:83:
7f:89:a9:de:b7:a0:b9:f8:c9:b1:fd:fc:e4:e6:8b:
ef:ba:b5:2f:90:d0:09:14:d2:e0:8d:a2:a5:62:54:
d2:26:b5:9e:41:37:0d:a0:c8:ac:8b:69:6d:51:a1:
09:a7:34:6c:44:e9:63:86:1a:11:f0:54:f1:4d:c6:
6b:65:a9:d6:a0:4f:90:b3:38:3f:37:b6:95:8a:b6:
c1:70:d1:76:f2:fc:be:e0:fd:48:8d:ee:ca:00:5c:
36:41:c5:6e:54:0c:b4:7d:e1:eb:de:de:27:a7:09:
0b:f2:4a:e2:7a:1a:4f:eb:e9:e7:db:b6:f9:64:01:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CE:6E:01:F7:43:A0:85:FA:70:0B:A5:73:FC:E9:05:51:FA:72:80
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/q85uAfdDoIX6cAulc_zpBVH6coA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c6c0::/29
Signature Algorithm: sha256WithRSAEncryption
aa:9b:78:cf:8c:5f:f5:76:0e:40:5c:b1:7a:be:9b:e5:c3:93:
b7:37:59:13:13:35:55:15:a7:0b:35:7f:14:82:87:ba:42:ab:
2e:06:10:d3:25:3c:d1:17:23:4e:57:aa:06:9d:4e:a7:60:71:
ea:f7:34:78:6c:82:b3:ae:80:8d:d5:cf:ca:fd:8d:50:4d:ec:
3e:c0:76:65:98:4f:9b:20:d5:bd:23:e5:a9:d2:8a:a4:2b:c0:
b2:50:77:9b:c4:45:49:7c:6b:2a:53:be:5c:0a:3a:ab:84:bd:
47:b2:bb:5f:13:61:95:55:86:75:0b:a4:17:d7:f3:09:80:3f:
4e:66:13:96:84:e1:af:5f:42:0d:78:b5:84:2f:9e:ea:5f:a8:
ba:81:c0:43:c9:23:c6:3a:e1:da:df:5f:1e:2e:32:69:60:28:
4b:48:17:95:c6:cd:70:04:78:1d:45:61:fc:28:44:3f:56:d8:
62:d8:9c:87:4f:43:e0:20:81:26:51:c7:7e:4e:38:4b:39:39:
85:7e:d1:9f:94:cc:55:75:39:b7:a3:4e:13:06:67:ad:2f:10:
bb:a6:1a:cb:34:75:5d:cd:3f:33:f1:3a:34:49:9b:43:ef:33:
54:80:e2:a4:e6:6f:a5:b9:26:74:94:85:33:1b:de:c6:78:f7:
b5:8a:32:e0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIDCmeLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE1
YTU2ZWJmMDFlMDAzNDlmNjczMDE5MTgwNTYwYzlhMzFhZWE4NzEwHhcNMjIwNTAz
MTc0NjA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhhYmNlNmUwMWY3NDNh
MDg1ZmE3MDBiYTU3M2ZjZTkwNTUxZmE3MjgwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoZD6CpwTQHw65QVnzUzh8Qgq1BOollcSSglLE0wTlQ5k42Ra
gY9QgfAqHpNcSeWGAPTQwg3GfuZ66iNIKsJIqup0A4INrCkO9CkDIyG2UKG6Liin
BWHx1xsaIG9MXDAO35vSefoAMQiUxCA2VIzllxs/x7gU1iQq/YFqr5mMQhm+OkVZ
JYN/ianet6C5+Mmx/fzk5ovvurUvkNAJFNLgjaKlYlTSJrWeQTcNoMisi2ltUaEJ
pzRsROljhhoR8FTxTcZrZanWoE+Qszg/N7aVirbBcNF28vy+4P1Ije7KAFw2QcVu
VAy0feHr3t4npwkL8kriehpP6+nn27b5ZAHpNwIDAQABo4ICCjCCAgYwHQYDVR0O
BBYEFKvObgH3Q6CF+nALpXP86QVR+nKAMB8GA1UdIwQYMBaAFKWlbr8B4ANJ9nMB
kYBWDJoxrqhxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQtMmQ0NmQzMGRhY2JmLzEv
cTg1dUFmZERvSVg2Y0F1bGNfenBCVkg2Y29BLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81
NTRjMzUtYTgzYy00MzI5LWEwOGQtMmQ0NmQzMGRhY2JmLzEvcGFWdXZ3SGdBMG4y
Y3dHUmdGWU1takd1cUhFLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAG
CCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLGwDANBgkqhkiG9w0BAQsFAAOC
AQEAqpt4z4xf9XYOQFyxer6b5cOTtzdZExM1VRWnCzV/FIKHukKrLgYQ0yU80Rcj
TleqBp1Op2Bx6vc0eGyCs66AjdXPyv2NUE3sPsB2ZZhPmyDVvSPlqdKKpCvAslB3
m8RFSXxrKlO+XAo6q4S9R7K7XxNhlVWGdQukF9fzCYA/TmYTloThr19CDXi1hC+e
6l+ouoHAQ8kjxjrh2t9fHi4yaWAoS0gXlcbNcAR4HUVh/ChEP1bYYtich09D4CCB
JlHHfk44Szk5hX7Rn5TMVXU5t6NOEwZnrS8Qu6YayzR1Xc0/M/E6NEmbQ+8zVIDi
pOZvpbkmdJSFMxvexnj3tYoy4A==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:31 2025 by rpki-client