Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-TUB9RDcng7SyTnLJ1VHx-Tbe7c.roa
File: 1-TUB9RDcng7SyTnLJ1VHx-Tbe7c.roa (raw, json)
Hash identifier: y1333l+7Fy5jLFh3obxD005/C3jeRGKDGY0ZKxyLNHA=
Subject key identifier: F9:35:01:F5:10:DC:9E:0E:D2:C9:39:CB:27:55:47:C7:E4:DB:7B:B7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0184289913D21441C1C3A264C26DFB868F6B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-TUB9RDcng7SyTnLJ1VHx-Tbe7c.roa
Signing time: Sun 30 Oct 2022 11:13:51 +0000
ROA not before: Sun 30 Oct 2022 11:13:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29632
IP address blocks: 2a0f:2100::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:28:99:13:d2:14:41:c1:c3:a2:64:c2:6d:fb:86:8f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 30 11:13:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f93501f510dc9e0ed2c939cb275547c7e4db7bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:49:9e:91:c5:8c:59:7e:3b:2b:4a:37:9c:
99:ad:95:ae:36:8a:f9:cb:19:aa:0e:f1:d7:90:66:
ff:ba:83:30:44:92:a1:26:6f:01:a6:40:fc:ad:1b:
fb:f2:d6:e7:20:2b:a6:6d:d2:e7:93:10:9d:a3:15:
12:f4:29:84:e5:99:44:56:df:6c:2a:99:01:f9:fc:
23:9a:93:3b:41:a2:40:59:46:40:1d:68:d9:27:ea:
b3:43:35:19:3d:8b:96:7d:a6:f9:cf:1d:ad:f8:92:
6d:9e:d1:09:39:08:9a:50:68:eb:96:c4:20:2e:5b:
b9:7f:16:e0:c7:7d:38:62:da:ef:ac:28:64:7c:7a:
54:d7:29:28:15:e6:b9:eb:7e:56:8e:97:17:66:1b:
d9:69:df:37:1a:c0:15:d9:07:79:1d:07:c1:4a:3e:
52:6e:8a:05:52:d9:49:3c:e3:62:76:18:39:de:33:
d6:10:b7:62:cd:0e:b5:4e:5e:02:f6:3b:d8:6b:fb:
27:04:09:08:fc:50:0a:5c:07:27:03:64:d7:dd:45:
3e:62:4b:44:e6:50:5f:c8:1e:22:a0:fb:09:b7:84:
23:6c:76:6e:64:4d:b5:75:bd:ff:4a:14:d9:57:b7:
be:70:b2:69:42:76:a4:e5:1d:62:91:36:81:99:0f:
51:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:35:01:F5:10:DC:9E:0E:D2:C9:39:CB:27:55:47:C7:E4:DB:7B:B7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-TUB9RDcng7SyTnLJ1VHx-Tbe7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2100::/29
Signature Algorithm: sha256WithRSAEncryption
cf:ea:24:e0:20:16:ec:32:c7:e6:e1:82:01:d6:8a:9d:4d:37:
03:79:d5:05:7f:65:c2:43:a6:a2:d5:7d:4f:3c:30:48:84:5b:
ef:de:fe:d9:a3:5e:f0:8b:ef:db:94:4d:d7:43:39:57:ee:3d:
0b:1f:cb:5c:37:95:79:d0:3f:24:cc:4a:cc:54:bf:7f:db:0e:
25:16:2c:00:0a:4f:b2:f1:03:00:e1:78:f6:f6:d8:39:69:e5:
99:d5:7e:f0:7f:81:71:81:79:c1:b8:e1:0f:1a:a8:74:f1:f4:
d7:cf:68:9c:cc:6d:49:34:2b:9c:01:4a:b7:3f:1a:66:69:0b:
33:4c:a5:b9:23:e7:1e:ce:e0:ab:47:98:4c:eb:96:1f:d2:3d:
8a:3d:bc:80:83:b1:71:99:55:35:c4:9f:b5:e9:50:f0:84:0f:
b7:a2:1a:15:4d:da:4e:c9:19:21:3c:86:f3:f3:0b:df:b5:3e:
96:eb:f6:a1:44:1f:16:3b:d6:f2:96:49:e3:4e:3c:7c:1d:53:
d1:51:6a:62:07:5c:53:9c:45:9b:7f:ec:1c:f0:9e:d9:1f:6c:
c4:78:5e:df:52:ad:0e:fb:25:32:72:42:93:b0:5d:59:9c:46:
3d:f3:16:71:a8:57:f1:92:4d:ce:93:90:92:bd:e4:89:67:80:
a7:fa:f9:07
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYQomRPSFEHBw6Jkwm37ho9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjIxMDMwMTExMzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTM1MDFmNTEwZGM5ZTBlZDJjOTM5Y2IyNzU1NDdjN2U0ZGI3YmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR9JnpHFjFl+OytKN5yZrZWuNor5
yxmqDvHXkGb/uoMwRJKhJm8BpkD8rRv78tbnICumbdLnkxCdoxUS9CmE5ZlEVt9s
KpkB+fwjmpM7QaJAWUZAHWjZJ+qzQzUZPYuWfab5zx2t+JJtntEJOQiaUGjrlsQg
Llu5fxbgx304YtrvrChkfHpU1ykoFea5635WjpcXZhvZad83GsAV2Qd5HQfBSj5S
booFUtlJPONidhg53jPWELdizQ61Tl4C9jvYa/snBAkI/FAKXAcnA2TX3UU+YktE
5lBfyB4ioPsJt4QjbHZuZE21db3/ShTZV7e+cLJpQnak5R1ikTaBmQ9RWQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFPk1AfUQ3J4O0sk5yydVR8fk23u3MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvMS1UVUI5UkRjbmc3U3lUbkxKMVZIeC1UYmU3Yy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRi
Ni8xL2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoPIQAw
DQYJKoZIhvcNAQELBQADggEBAM/qJOAgFuwyx+bhggHWip1NNwN51QV/ZcJDpqLV
fU88MEiEW+/e/tmjXvCL79uUTddDOVfuPQsfy1w3lXnQPyTMSsxUv3/bDiUWLAAK
T7LxAwDhePb22Dlp5ZnVfvB/gXGBecG44Q8aqHTx9NfPaJzMbUk0K5wBSrc/GmZp
CzNMpbkj5x7O4KtHmEzrlh/SPYo9vICDsXGZVTXEn7XpUPCED7eiGhVN2k7JGSE8
hvPzC9+1Ppbr9qFEHxY71vKWSeNOPHwdU9FRamIHXFOcRZt/7BzwntkfbMR4Xt9S
rQ77JTJyQpOwXVmcRj3zFnGoV/GSTc6TkJK95IlngKf6+Qc=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:16 2025 by rpki-client