Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/niIRJC75Gh0anSvJLuo3MUZjjUA.roa
File: niIRJC75Gh0anSvJLuo3MUZjjUA.roa (raw, json)
Hash identifier: zO5AyQDupPkAJ189o/xog3ydTAdSM1ww8XOvDD6LoJg=
Subject key identifier: 9E:22:11:24:2E:F9:1A:1D:1A:9D:2B:C9:2E:EA:37:31:46:63:8D:40
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 17F5CCFD
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/niIRJC75Gh0anSvJLuo3MUZjjUA.roa
Signing time: Sat 01 Jan 2022 04:00:14 +0000
ROA not before: Sat 01 Jan 2022 04:00:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50013
IP address blocks: 2a01:5a8:2:2::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401984765 (0x17f5ccfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 04:00:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e2211242ef91a1d1a9d2bc92eea373146638d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:84:58:bc:c6:78:50:02:dc:f3:e4:b2:6c:
7c:2d:18:f7:8d:67:0d:a9:e0:84:69:da:6a:87:e8:
c7:e6:df:4a:1a:a6:67:a0:37:73:62:ec:64:6c:6d:
07:35:7c:67:45:df:2f:f1:15:a5:ba:d4:4d:fb:5f:
8a:10:62:da:c7:55:ba:f5:7c:85:89:80:85:1c:8d:
ee:32:82:61:db:ac:11:1c:b5:53:58:be:a0:11:19:
17:b5:52:f0:04:2d:71:8c:1b:c3:ec:2b:36:b1:e6:
51:28:cd:64:f0:39:73:2e:2b:65:26:f1:7e:87:90:
df:72:d8:0f:61:dd:cf:38:ec:70:0c:c6:24:ad:10:
a7:13:b0:e4:39:e7:a7:8a:cf:4c:ef:b4:71:99:a9:
02:53:71:73:2d:74:80:08:61:c8:1f:c3:7e:9e:89:
a3:38:79:7a:11:b6:c0:9d:3c:00:05:e9:95:d8:66:
e4:20:06:fd:40:de:b4:4f:d5:f9:87:af:78:a6:29:
5d:12:53:c0:b8:24:a4:73:ea:3c:58:9f:41:b5:26:
db:4f:c2:92:6a:68:ed:79:c2:0d:eb:4f:96:21:29:
cf:fa:1d:04:fb:c9:d0:eb:8e:81:46:33:78:3f:5a:
32:b0:7f:5d:c8:26:57:92:25:b8:f4:f5:1b:1b:6d:
b5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:22:11:24:2E:F9:1A:1D:1A:9D:2B:C9:2E:EA:37:31:46:63:8D:40
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/niIRJC75Gh0anSvJLuo3MUZjjUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:5a8:2:2::/64
Signature Algorithm: sha256WithRSAEncryption
6a:de:0b:62:af:6c:0f:77:71:91:5d:5c:b3:65:1e:77:29:37:
59:35:51:c7:36:cb:23:d4:24:50:86:ad:ff:8d:b7:58:17:69:
0c:f4:f6:dd:42:6a:f7:dc:2d:94:c5:f3:c4:d3:0a:b6:f1:bf:
8f:2a:24:85:0c:23:ab:ee:65:24:be:45:9a:b6:9f:9d:82:31:
8e:ef:ac:c7:6a:de:22:b0:bc:5f:73:38:f2:13:05:b3:46:9d:
0e:cb:ba:3d:44:09:94:e7:76:f5:39:e6:0e:c2:e3:b8:52:60:
55:8f:66:a6:52:c3:31:9c:e5:5c:97:00:59:0c:f8:60:23:79:
3a:60:f1:fa:8c:25:b3:61:23:ab:29:df:ae:8c:8e:82:2d:77:
8a:e4:06:36:1b:6c:23:72:96:bd:9f:b8:55:46:1c:e7:ad:81:
8d:43:3c:fb:9b:b8:66:fa:a5:16:8c:66:02:c9:2d:b0:8e:0d:
5f:88:57:2a:63:87:11:6c:6f:d7:2f:47:4e:70:19:b9:ae:78:
61:bc:74:4d:de:9e:c8:c0:91:24:a2:64:bb:e4:1e:68:fb:a5:
9f:70:fd:a9:1d:79:ff:b6:2e:f2:dc:11:47:f7:2a:a3:69:b3:
1e:fa:2d:50:f0:c8:c9:73:0b:3d:4c:8f:21:b6:b9:b2:42:44:
00:a7:dd:34
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIEF/XM/TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NGIyZjRmYTUxNjNhZjk2MTY4ZTg4ZmJmOWNiNGVkMWVkOGZiNGM0MB4XDTIyMDEw
MTA0MDAxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWUyMjExMjQyZWY5
MWExZDFhOWQyYmM5MmVlYTM3MzE0NjYzOGQ0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL7KhFi8xnhQAtzz5LJsfC0Y941nDanghGnaaofox+bfShqm
Z6A3c2LsZGxtBzV8Z0XfL/EVpbrUTftfihBi2sdVuvV8hYmAhRyN7jKCYdusERy1
U1i+oBEZF7VS8AQtcYwbw+wrNrHmUSjNZPA5cy4rZSbxfoeQ33LYD2HdzzjscAzG
JK0QpxOw5Dnnp4rPTO+0cZmpAlNxcy10gAhhyB/Dfp6Jozh5ehG2wJ08AAXpldhm
5CAG/UDetE/V+YeveKYpXRJTwLgkpHPqPFifQbUm20/Ckmpo7XnCDetPliEpz/od
BPvJ0OuOgUYzeD9aMrB/XcgmV5IluPT1Gxtttd0CAwEAAaOCAg4wggIKMB0GA1Ud
DgQWBBSeIhEkLvkaHRqdK8ku6jcxRmONQDAfBgNVHSMEGDAWgBSEsvT6UWOvlhaO
iPv5y07R7Y+0xDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hMTDAtbEZqcjVZV2pvajctY3RPMGUyUHRNUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvNGFhNzg5LTg3OGItNDcyYi1iODQ3LTg3MmJhMmQ5ZjQ0Yy8x
L25pSVJKQzc1R2gwYW5TdkpMdW8zTVVaampVQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
NGFhNzg5LTg3OGItNDcyYi1iODQ3LTg3MmJhMmQ5ZjQ0Yy8xL2hMTDAtbEZqcjVZ
V2pvajctY3RPMGUyUHRNUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAk
BggrBgEFBQcBBwEB/wQVMBMwEQQCAAIwCwMJACoBBagAAgACMA0GCSqGSIb3DQEB
CwUAA4IBAQBq3gtir2wPd3GRXVyzZR53KTdZNVHHNssj1CRQhq3/jbdYF2kM9Pbd
Qmr33C2UxfPE0wq28b+PKiSFDCOr7mUkvkWatp+dgjGO76zHat4isLxfczjyEwWz
Rp0Oy7o9RAmU53b1OeYOwuO4UmBVj2amUsMxnOVclwBZDPhgI3k6YPH6jCWzYSOr
Kd+ujI6CLXeK5AY2G2wjcpa9n7hVRhznrYGNQzz7m7hm+qUWjGYCyS2wjg1fiFcq
Y4cRbG/XL0dOcBm5rnhhvHRN3p7IwJEkomS75B5o+6WfcP2pHXn/ti7y3BFH9yqj
abMe+i1Q8MjJcws9TI8htrmyQkQAp900
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:24 2025 by rpki-client