Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/27FYdwlsUHzv650kjlTKg8yDUOE.roa
File: 27FYdwlsUHzv650kjlTKg8yDUOE.roa (raw, json)
Hash identifier: GCwxeILNq2HfAqnXWhMR1O1tUGRqz/eBgT0dCLhJOgA=
Subject key identifier: DB:B1:58:77:09:6C:50:7C:EF:EB:9D:24:8E:54:CA:83:CC:83:50:E1
Certificate issuer: /CN=6bc4b3b741bb5b5b61721ad306c71147c4df2bc1
Certificate serial: 0185735F13DB693B41E00F2EC98463B4FD71
Authority key identifier: 6B:C4:B3:B7:41:BB:5B:5B:61:72:1A:D3:06:C7:11:47:C4:DF:2B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Szt0G7W1thchrTBscRR8TfK8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/27FYdwlsUHzv650kjlTKg8yDUOE.roa
Signing time: Mon 02 Jan 2023 16:44:48 +0000
ROA not before: Mon 02 Jan 2023 16:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209933
IP address blocks: 2001:678:888::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:5f:13:db:69:3b:41:e0:0f:2e:c9:84:63:b4:fd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc4b3b741bb5b5b61721ad306c71147c4df2bc1
Validity
Not Before: Jan 2 16:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbb15877096c507cefeb9d248e54ca83cc8350e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a6:33:7a:6e:db:85:a5:f4:8e:06:ec:26:05:
79:a0:c0:0d:fd:b0:95:e1:9b:c5:99:8b:99:9c:b8:
1b:25:b9:55:14:89:9a:89:11:5d:50:90:d0:bd:a6:
a2:55:7b:ff:1b:56:f5:0a:3b:96:98:a3:dc:0d:bf:
02:b9:91:87:c0:f2:73:0c:50:1d:ef:8f:fd:dc:01:
59:70:08:7a:d5:b7:e8:27:03:71:cc:53:df:3f:6e:
51:98:db:07:56:74:5e:66:23:28:24:d4:ae:62:c7:
85:47:99:dc:c0:f6:ee:d6:28:51:cb:66:e4:06:87:
b1:f8:bd:3d:d2:27:72:f4:7e:f6:02:a2:46:34:60:
eb:05:04:9a:8d:f4:d7:38:a2:f1:d9:27:9b:46:8a:
e8:5f:cd:65:74:91:1f:6a:15:fe:d6:b4:35:5d:57:
e3:8f:58:6a:ea:8a:36:67:08:8c:c6:29:e1:b8:55:
39:ad:53:68:34:f3:49:2e:11:ff:2c:bf:61:ef:59:
9e:3d:8f:62:8c:5f:df:42:a3:66:dd:2b:dc:bf:ed:
f2:e2:20:0a:c9:d4:87:a7:ea:35:c7:cd:35:05:99:
b1:8f:34:75:a9:05:05:5a:f7:dc:7b:9a:91:88:58:
82:86:11:de:4f:8d:fd:cd:e1:cb:27:d1:17:87:e2:
5e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B1:58:77:09:6C:50:7C:EF:EB:9D:24:8E:54:CA:83:CC:83:50:E1
X509v3 Authority Key Identifier:
keyid:6B:C4:B3:B7:41:BB:5B:5B:61:72:1A:D3:06:C7:11:47:C4:DF:2B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Szt0G7W1thchrTBscRR8TfK8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/27FYdwlsUHzv650kjlTKg8yDUOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd17a1-bc5f-49cd-8aed-cb727b4fc379/1/a8Szt0G7W1thchrTBscRR8TfK8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:888::/48
Signature Algorithm: sha256WithRSAEncryption
b3:02:9b:6c:4c:3e:33:3c:5d:8b:e2:03:65:d4:64:31:f7:56:
47:cf:9d:f2:ab:18:7d:f2:95:40:6c:d9:f4:c7:39:e9:7d:db:
2d:75:11:51:52:42:f4:00:e7:f1:fe:73:9a:32:46:52:06:d5:
a6:15:fa:48:da:e4:90:5f:fa:1c:8b:23:70:ee:2a:99:63:f3:
89:01:6d:8c:9a:8a:62:66:2f:b6:c9:42:41:f8:e8:69:35:52:
7b:7b:1f:f5:70:81:79:49:e8:84:9e:c5:a5:79:ce:a0:0a:b0:
88:3a:85:b7:94:35:fd:3e:46:d8:af:fb:65:32:6a:6c:c2:4b:
0a:50:a6:21:32:ce:7d:c2:2c:a5:e1:88:b0:d8:f7:97:dd:3e:
1a:79:38:69:f4:aa:12:66:5b:8e:68:1b:43:d1:75:8c:78:28:
6c:91:af:ed:d7:41:ad:22:c6:6c:66:ca:de:ca:ee:cd:fc:b9:
98:50:b0:f9:fe:d3:e1:0a:9b:df:40:02:3a:4d:26:b2:56:10:
10:f3:ee:be:08:5c:62:1e:ff:3f:b7:37:ab:43:27:e1:e5:ad:
db:0f:43:f3:a1:b4:78:f8:c1:2b:b5:e4:8c:fe:98:62:84:0f:
c8:e2:58:78:13:e4:f1:89:f5:e0:66:d9:c4:ad:e6:7f:aa:ce:
6f:2b:49:ce
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVzXxPbaTtB4A8uyYRjtP1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzRiM2I3NDFiYjViNWI2MTcyMWFkMzA2YzcxMTQ3YzRk
ZjJiYzEwHhcNMjMwMTAyMTY0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmIxNTg3NzA5NmM1MDdjZWZlYjlkMjQ4ZTU0Y2E4M2NjODM1MGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKYzem7bhaX0jgbsJgV5oMAN/bCV
4ZvFmYuZnLgbJblVFImaiRFdUJDQvaaiVXv/G1b1CjuWmKPcDb8CuZGHwPJzDFAd
74/93AFZcAh61bfoJwNxzFPfP25RmNsHVnReZiMoJNSuYseFR5ncwPbu1ihRy2bk
Boex+L090idy9H72AqJGNGDrBQSajfTXOKLx2SebRoroX81ldJEfahX+1rQ1XVfj
j1hq6oo2ZwiMxinhuFU5rVNoNPNJLhH/LL9h71mePY9ijF/fQqNm3Svcv+3y4iAK
ydSHp+o1x801BZmxjzR1qQUFWvfce5qRiFiChhHeT439zeHLJ9EXh+JexwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNuxWHcJbFB87+udJI5UyoPMg1DhMB8GA1UdIwQY
MBaAFGvEs7dBu1tbYXIa0wbHEUfE3yvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThTenQwRzdXMXRoY2hyVEJzY1JSOFRmSzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mZDE3YTEtYmM1Zi00OWNkLThhZWQt
Y2I3MjdiNGZjMzc5LzEvMjdGWWR3bHNVSHp2NjUwa2psVEtnOHlEVU9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9mZDE3YTEtYmM1Zi00OWNkLThhZWQtY2I3MjdiNGZjMzc5
LzEvYThTenQwRzdXMXRoY2hyVEJzY1JSOFRmSzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAiI
MA0GCSqGSIb3DQEBCwUAA4IBAQCzAptsTD4zPF2L4gNl1GQx91ZHz53yqxh98pVA
bNn0xznpfdstdRFRUkL0AOfx/nOaMkZSBtWmFfpI2uSQX/ociyNw7iqZY/OJAW2M
mopiZi+2yUJB+OhpNVJ7ex/1cIF5SeiEnsWlec6gCrCIOoW3lDX9PkbYr/tlMmps
wksKUKYhMs59wiyl4Yiw2PeX3T4aeThp9KoSZluOaBtD0XWMeChska/t10GtIsZs
Zsreyu7N/LmYULD5/tPhCpvfQAI6TSayVhAQ8+6+CFxiHv8/tzerQyfh5a3bD0Pz
obR4+MErteSM/phihA/I4lh4E+TxifXgZtnEreZ/qs5vK0nO
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:44 2025 by rpki-client