Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0NGkPJjLMYsdxpLCNR7EGGdJ-eo.roa
File: 0NGkPJjLMYsdxpLCNR7EGGdJ-eo.roa (raw, json)
Hash identifier: C9wepMSTfFH8DcxEqDdmwoPH15dyMbdnJ0WAkYTxDhA=
Subject key identifier: D0:D1:A4:3C:98:CB:31:8B:1D:C6:92:C2:35:1E:C4:18:67:49:F9:EA
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0184289914578639922DAAD9E8E2DD46C740
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0NGkPJjLMYsdxpLCNR7EGGdJ-eo.roa
Signing time: Sun 30 Oct 2022 11:13:51 +0000
ROA not before: Sun 30 Oct 2022 11:13:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30633
IP address blocks: 2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0f:e940::/29 maxlen: 29
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0f:3d84::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:3d80:123::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a12:f540::/29 maxlen: 29
2a12:ac40::/29 maxlen: 29
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0c:9240::/29 maxlen: 29
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:e842::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:28:99:14:57:86:39:92:2d:aa:d9:e8:e2:dd:46:c7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 30 11:13:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0d1a43c98cb318b1dc692c2351ec4186749f9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:70:7b:d2:e0:ab:b5:dc:1b:f7:4f:f2:cb:
34:7b:81:df:ca:0e:92:4d:08:c4:31:82:fa:1c:4f:
d0:01:10:84:77:b7:88:e1:1b:46:ba:c3:c2:89:7f:
b4:b9:52:80:80:1b:b5:85:26:98:d1:10:6c:3e:b8:
46:7b:2c:c5:45:38:32:8a:34:45:8d:40:f2:b7:c7:
fd:58:70:6e:8c:00:0b:8b:dc:a5:eb:a0:fc:dc:a9:
3a:e2:03:62:6c:c9:5b:26:58:00:12:ae:72:d6:4d:
f3:e7:3f:f6:44:8d:2e:fa:2b:1e:af:e4:0d:05:a2:
53:19:87:bc:64:69:1b:34:11:45:19:93:ff:fe:54:
db:2a:c0:65:55:fa:58:d9:7a:20:e9:08:eb:91:61:
69:9f:cb:5a:4e:4b:39:23:95:40:76:45:8a:ad:0c:
13:5c:f1:9a:bd:f0:74:bf:75:dd:23:8a:8b:52:c6:
56:83:6c:31:a6:02:83:72:08:0e:ba:78:97:a2:50:
80:51:1d:cf:4d:b7:3e:17:3b:4b:c4:a6:19:a7:10:
13:b4:5a:0a:64:87:f0:d0:ea:a3:3b:b9:f7:19:54:
e5:1f:53:1c:c7:26:e3:ce:27:f5:db:c4:66:35:f4:
3c:73:be:70:a9:b2:2a:c1:02:1e:c5:85:cf:57:35:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D1:A4:3C:98:CB:31:8B:1D:C6:92:C2:35:1E:C4:18:67:49:F9:EA
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0NGkPJjLMYsdxpLCNR7EGGdJ-eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f300::/29
2a0c:9240::/29
2a0e:1a80::/32
2a0e:5a80::/29
2a0e:c780::/32
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:e842::/32
2a0f:e940::/29
2a12:ac40::/29
2a12:d540::/29
2a12:f540::/29
Signature Algorithm: sha256WithRSAEncryption
85:5f:c1:cf:7b:e3:f8:fc:8f:bb:cd:7c:a0:dc:de:83:44:08:
41:2d:9e:74:9c:c5:7a:a1:23:06:6d:af:af:48:27:a2:b4:79:
03:e8:01:d7:7c:84:e4:a8:fa:d3:75:22:cd:e8:62:44:1b:e8:
a7:53:4a:f2:8a:54:1c:8a:fd:d1:36:9c:cf:1c:ec:79:10:85:
bf:c8:b0:e6:39:f0:7a:33:4d:18:c8:1c:44:62:92:24:f3:14:
d5:40:cd:72:4a:2d:82:2e:30:6c:46:93:08:88:a9:a0:35:92:
8c:9a:68:fe:92:f0:72:66:cb:56:72:42:2a:f7:3c:0f:1d:7a:
34:5b:88:42:58:63:54:1f:f5:28:de:e4:bc:b0:6c:fb:0e:e0:
ea:4d:c5:d1:04:4f:9a:a7:7c:f6:9f:32:63:7f:06:46:a4:8e:
d3:f1:5d:a5:39:76:46:5b:19:05:ab:c6:d6:66:61:66:6f:39:
ce:86:37:c0:61:b0:04:5d:77:93:cb:d5:39:1b:67:7e:79:70:
cd:9a:51:46:45:33:91:e8:16:38:2a:b6:a2:97:fb:00:9f:2f:
1b:e3:b9:77:0e:08:67:3e:e6:58:62:75:39:85:3e:1a:8f:ba:
5d:82:af:6b:56:af:a9:a8:38:ff:39:7a:ba:f5:77:22:6e:d8:
c6:95:f0:04
-----BEGIN CERTIFICATE-----
MIIFwTCCBKmgAwIBAgISAYQomRRXhjmSLarZ6OLdRsdAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjIxMDMwMTExMzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGQxYTQzYzk4Y2IzMThiMWRjNjkyYzIzNTFlYzQxODY3NDlmOWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q9we9Lgq7XcG/dP8ss0e4Hfyg6S
TQjEMYL6HE/QARCEd7eI4RtGusPCiX+0uVKAgBu1hSaY0RBsPrhGeyzFRTgyijRF
jUDyt8f9WHBujAALi9yl66D83Kk64gNibMlbJlgAEq5y1k3z5z/2RI0u+iser+QN
BaJTGYe8ZGkbNBFFGZP//lTbKsBlVfpY2Xog6QjrkWFpn8taTks5I5VAdkWKrQwT
XPGavfB0v3XdI4qLUsZWg2wxpgKDcggOuniXolCAUR3PTbc+FztLxKYZpxATtFoK
ZIfw0OqjO7n3GVTlH1Mcxybjzif128RmNfQ8c75wqbIqwQIexYXPVzVwaQIDAQAB
o4ICzTCCAskwHQYDVR0OBBYEFNDRpDyYyzGLHcaSwjUexBhnSfnqMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvME5Ha1BKakxNWXNkeHBMQ05SN0VHR2RKLWVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHiBggrBgEFBQcBBwEB/wSB0jCBzzCBzAQCAAIwgcUDBQMq
B/MAAwUDKgySQAMFACoOGoADBQMqDlqAAwUAKg7HgAMFASoPCgADBwAqDx4AASMD
BwAqDx4ABFYDBwAqDx4ACYcDBwAqDx4ACrwDBwAqDx4A3vkDBwAqDx6BEpMDBwAq
Dx6BQxkDBwAqDx6BkugDBwAqDx6Bo9ADBwAqDx6Bza4DBwAqDz2AASMDBQAqDz2C
AwUAKg89hAMFACoPPYcDBQAqD+hCAwUDKg/pQAMFAyoSrEADBQMqEtVAAwUDKhL1
QDANBgkqhkiG9w0BAQsFAAOCAQEAhV/Bz3vj+PyPu818oNzeg0QIQS2edJzFeqEj
Bm2vr0gnorR5A+gB13yE5Kj603UizehiRBvop1NK8opUHIr90TaczxzseRCFv8iw
5jnwejNNGMgcRGKSJPMU1UDNckotgi4wbEaTCIipoDWSjJpo/pLwcmbLVnJCKvc8
Dx16NFuIQlhjVB/1KN7kvLBs+w7g6k3F0QRPmqd89p8yY38GRqSO0/FdpTl2RlsZ
BavG1mZhZm85zoY3wGGwBF13k8vVORtnfnlwzZpRRkUzkegWOCq2opf7AJ8vG+O5
dw4IZz7mWGJ1OYU+Go+6XYKva1avqag4/zl6uvV3Im7YxpXwBA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:25 2025 by rpki-client