Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/L8ZWt4mqrNHfU-eUsS940uf-Epg.roa
File: L8ZWt4mqrNHfU-eUsS940uf-Epg.roa (raw, json)
Hash identifier: JTqwLbjBIMw0w6RU2urBHBv8miHXwEWIlVMlJ+ErUp8=
Subject key identifier: 2F:C6:56:B7:89:AA:AC:D1:DF:53:E7:94:B1:2F:78:D2:E7:FE:12:98
Certificate issuer: /CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Certificate serial: 018640718B8E7CDA3B1D912AB521CD7047E6
Authority key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/L8ZWt4mqrNHfU-eUsS940uf-Epg.roa
Signing time: Sat 11 Feb 2023 12:27:08 +0000
ROA not before: Sat 11 Feb 2023 12:27:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201634
IP address blocks: 2a05:c180::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:40:71:8b:8e:7c:da:3b:1d:91:2a:b5:21:cd:70:47:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Validity
Not Before: Feb 11 12:27:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fc656b789aaacd1df53e794b12f78d2e7fe1298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:40:d5:d9:c9:34:08:59:76:09:6f:1e:ac:52:
9b:c2:53:0c:99:de:c0:f6:a9:d8:ee:d7:70:90:45:
f7:83:9e:27:32:3d:36:75:51:39:e3:77:a3:b8:70:
42:ad:5d:e6:3e:e0:1c:ca:d2:7d:7d:a3:20:51:56:
b4:39:f3:42:81:ba:4c:57:8f:b1:2f:1d:8d:30:8a:
79:32:fb:7d:d7:c5:6e:61:55:c9:be:37:79:e8:6e:
47:14:a2:9c:8f:4d:05:42:0f:6b:8f:4c:dd:0d:fc:
64:8a:42:e3:f5:42:dd:df:a2:a9:d6:ce:8c:e4:ff:
e6:c7:7c:ef:75:6b:73:67:42:47:71:59:ee:ac:97:
44:66:e0:5d:4c:d8:f8:0e:5f:49:27:77:59:43:a1:
12:39:52:9a:68:d6:d6:c9:dd:8e:3a:d3:0d:fd:25:
ab:ed:1f:65:ab:e1:53:2d:fb:9f:c9:ff:3c:e6:a1:
43:5b:55:5c:a9:ba:87:73:41:76:d9:3e:e5:67:f6:
ea:d2:8c:78:84:43:05:ef:d6:90:98:13:82:65:0b:
2f:84:93:e2:e2:7a:94:3f:80:a0:87:15:cb:ae:9f:
2a:82:bc:d3:57:9c:ba:8f:03:77:e8:84:ac:fc:45:
c2:34:47:f0:2b:f4:cf:f5:9d:c0:7b:b4:ab:f6:6d:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C6:56:B7:89:AA:AC:D1:DF:53:E7:94:B1:2F:78:D2:E7:FE:12:98
X509v3 Authority Key Identifier:
keyid:8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/L8ZWt4mqrNHfU-eUsS940uf-Epg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:c180::/32
Signature Algorithm: sha256WithRSAEncryption
9a:40:d6:ec:b5:8d:d9:3f:ad:77:84:a1:0a:b8:56:de:d6:66:
cd:3b:f0:6e:d7:48:a2:b1:4d:37:fa:50:6c:a0:ca:d4:89:e5:
c3:87:37:a3:c5:51:07:af:d6:0b:00:f8:5b:4e:50:d4:4f:4c:
6a:b5:c7:66:22:bc:4d:b4:b1:dd:03:a9:87:d5:0b:1a:45:79:
2a:97:e9:46:94:d6:6f:84:91:5b:50:c0:89:e6:91:f2:8a:2b:
4d:6b:6f:a4:cc:e4:89:9a:b8:d2:2c:32:b1:a9:c5:f9:7b:06:
f5:ab:e3:8c:63:97:56:01:fc:90:6c:5f:ff:8f:33:e5:be:91:
3e:7b:6a:26:29:d1:c0:37:d2:08:80:49:6e:dc:5b:e6:4e:2a:
48:93:dc:e9:df:7d:8f:9f:4b:d3:1d:8b:df:0e:d5:e2:05:c3:
ea:88:15:3f:d1:f8:b5:6a:93:e3:7d:25:32:98:fb:ab:75:72:
ea:9b:8e:e9:f6:8a:6e:59:c8:24:06:ca:2d:10:5b:ba:e5:b6:
a4:d0:a3:b8:45:a3:d8:4e:c1:df:a6:d9:19:fc:4f:a2:cb:2d:
25:a2:b4:6f:26:d2:c3:fb:46:fc:08:5d:87:cf:ba:81:c9:11:
6c:42:ea:92:b7:1f:ef:a1:a8:46:32:40:2e:cd:fa:89:d7:0d:
ff:66:0b:5b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYZAcYuOfNo7HZEqtSHNcEfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWYwYWQ1NTcyYmFlMjZlMzljODc0MGM2OGE4ZmJiNDZl
ZTQ4NjQwHhcNMjMwMjExMTIyNzA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmM2NTZiNzg5YWFhY2QxZGY1M2U3OTRiMTJmNzhkMmU3ZmUxMjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUDV2ck0CFl2CW8erFKbwlMMmd7A
9qnY7tdwkEX3g54nMj02dVE543ejuHBCrV3mPuAcytJ9faMgUVa0OfNCgbpMV4+x
Lx2NMIp5Mvt918VuYVXJvjd56G5HFKKcj00FQg9rj0zdDfxkikLj9ULd36Kp1s6M
5P/mx3zvdWtzZ0JHcVnurJdEZuBdTNj4Dl9JJ3dZQ6ESOVKaaNbWyd2OOtMN/SWr
7R9lq+FTLfufyf885qFDW1VcqbqHc0F22T7lZ/bq0ox4hEMF79aQmBOCZQsvhJPi
4nqUP4CghxXLrp8qgrzTV5y6jwN36ISs/EXCNEfwK/TP9Z3Ae7Sr9m1BvwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFC/GVreJqqzR31PnlLEveNLn/hKYMB8GA1UdIwQY
MBaAFIofCtVXK64m45yHQMaKj7tG7khkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8yZmQyMGEtNTNhZS00YmVhLTgwYzkt
MDNmMjNhNzM5NDFkLzEvTDhaV3Q0bXFyTkhmVS1lVXNTOTQwdWYtRXBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8yZmQyMGEtNTNhZS00YmVhLTgwYzktMDNmMjNhNzM5NDFk
LzEvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgXBgDAN
BgkqhkiG9w0BAQsFAAOCAQEAmkDW7LWN2T+td4ShCrhW3tZmzTvwbtdIorFNN/pQ
bKDK1Inlw4c3o8VRB6/WCwD4W05Q1E9MarXHZiK8TbSx3QOph9ULGkV5KpfpRpTW
b4SRW1DAieaR8oorTWtvpMzkiZq40iwysanF+XsG9avjjGOXVgH8kGxf/48z5b6R
PntqJinRwDfSCIBJbtxb5k4qSJPc6d99j59L0x2L3w7V4gXD6ogVP9H4tWqT430l
Mpj7q3Vy6puO6faKblnIJAbKLRBbuuW2pNCjuEWj2E7B36bZGfxPosstJaK0bybS
w/tG/Ahdh8+6gckRbELqkrcf76GoRjJALs36idcN/2YLWw==
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:52:04 2025 by rpki-client