Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/A2K4rpyT6s_Le5OQUsF5FhS18E0.roa
File: A2K4rpyT6s_Le5OQUsF5FhS18E0.roa (raw, json)
Hash identifier: u0ay+HbRov1BZ7cwGvIHZSQMgDPz1+cNcYz7d6kWtjc=
Subject key identifier: 03:62:B8:AE:9C:93:EA:CF:CB:7B:93:90:52:C1:79:16:14:B5:F0:4D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01AC8496
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/A2K4rpyT6s_Le5OQUsF5FhS18E0.roa
Signing time: Tue 01 Feb 2022 11:24:37 +0000
ROA not before: Tue 01 Feb 2022 11:24:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205544
IP address blocks: 2a0f:e440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28083350 (0x1ac8496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 1 11:24:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0362b8ae9c93eacfcb7b939052c1791614b5f04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:1c:76:1b:d7:71:b3:13:36:fc:da:8b:e8:
b3:84:fb:ae:25:be:71:a4:ca:e4:55:5b:25:dd:9a:
4c:71:ac:cd:39:e3:4b:7d:9e:bf:8d:e4:e0:54:1c:
3e:73:d5:3e:0c:2e:59:b9:f2:d0:a4:af:cf:44:93:
83:bc:c3:e6:49:67:69:ee:47:a9:2b:a0:3b:2d:f4:
8d:8b:19:12:2f:cb:34:46:b0:6b:76:18:be:0b:d2:
6d:68:2b:b3:07:fe:af:d7:a6:a3:c5:6e:ed:cc:a2:
d5:56:6d:25:70:a2:93:a0:7b:02:2d:23:e7:39:cd:
b0:08:35:64:9d:8d:7c:c1:4d:91:99:e2:f1:47:c2:
60:5c:76:9e:6a:72:f6:a2:f9:74:61:2c:15:c1:7c:
3c:b2:da:3e:74:3d:6c:81:05:c9:f1:9b:08:b6:37:
df:66:4b:bd:00:0b:ee:91:07:95:3c:a8:32:d2:45:
1b:6f:a2:17:6e:36:9d:9a:9a:1c:de:59:ec:d5:83:
26:4c:0c:be:79:93:c6:83:35:10:ca:c7:ac:80:d1:
11:2d:8e:6f:1f:98:8a:a3:62:c9:b0:14:e3:43:ee:
ef:eb:03:ee:0b:ef:30:cc:78:0f:41:ae:b2:76:39:
e7:a3:3c:36:5a:08:0f:88:58:47:bc:2a:dd:7d:8d:
a2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:62:B8:AE:9C:93:EA:CF:CB:7B:93:90:52:C1:79:16:14:B5:F0:4D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/A2K4rpyT6s_Le5OQUsF5FhS18E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e440::/29
Signature Algorithm: sha256WithRSAEncryption
51:85:62:39:ba:5a:9e:7c:f4:0b:d5:1c:81:ac:4f:b5:72:2d:
7d:86:f0:ee:5e:c8:cd:07:0b:3e:4c:8b:06:1e:e9:96:f9:d8:
44:36:5e:ea:7a:c9:51:24:54:ac:f8:7f:07:99:6e:9f:27:63:
c7:18:89:e7:5c:12:d8:3d:9a:66:89:9b:92:d7:44:66:a2:21:
06:01:8b:25:ff:cf:ed:84:c3:23:41:ba:bd:37:b2:2c:3a:18:
6f:9b:40:36:23:d7:57:5a:d8:9f:cd:ea:f8:ae:46:58:f5:be:
f8:1f:01:74:84:37:91:cc:2f:7e:f4:bf:64:6f:51:05:93:1a:
56:e7:2d:28:cc:32:cc:80:18:dd:5d:f8:48:5a:1a:51:1e:d0:
fe:12:9d:90:0c:de:e2:56:45:c4:75:06:33:5c:8f:61:06:2d:
f9:0a:56:ed:ee:da:e4:27:bd:aa:0a:be:4b:d3:5e:7b:60:cb:
db:c3:28:89:a9:9f:cc:15:e2:54:3d:70:4c:40:de:08:3a:dc:
07:f1:96:20:f8:7c:63:db:de:3f:91:ee:e8:7b:e2:33:01:8d:
bc:b4:43:20:99:75:cd:24:d8:7e:1f:11:10:b2:e6:4b:b0:b1:
b2:66:4d:1d:b6:14:41:c8:c4:82:54:9c:94:46:2d:37:cb:ea:
57:36:26:1d
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAayEljANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDU1OWFhZmJmYzA5MzEyNDJlMWQ2MzcyOThjZjFkZDIyM2U0YzI2MB4XDTIyMDIw
MTExMjQzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDM2MmI4YWU5Yzkz
ZWFjZmNiN2I5MzkwNTJjMTc5MTYxNGI1ZjA0ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMZBHHYb13GzEzb82ovos4T7riW+caTK5FVbJd2aTHGszTnj
S32ev43k4FQcPnPVPgwuWbny0KSvz0STg7zD5klnae5HqSugOy30jYsZEi/LNEaw
a3YYvgvSbWgrswf+r9emo8Vu7cyi1VZtJXCik6B7Ai0j5znNsAg1ZJ2NfMFNkZni
8UfCYFx2nmpy9qL5dGEsFcF8PLLaPnQ9bIEFyfGbCLY332ZLvQAL7pEHlTyoMtJF
G2+iF242nZqaHN5Z7NWDJkwMvnmTxoM1EMrHrIDRES2Obx+YiqNiybAU40Pu7+sD
7gvvMMx4D0GusnY556M8NloID4hYR7wq3X2NomsCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBQDYriunJPqz8t7k5BSwXkWFLXwTTAfBgNVHSMEGDAWgBR9VZqvv8CTEkLh
1jcpjPHdIj5MJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8x
L0EySzRycHlUNnNfTGU1T1FVc0Y1RmhTMThFMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
NDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8xL2ZWV2FyN19Ba3hK
QzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoP5EAwDQYJKoZIhvcNAQELBQAD
ggEBAFGFYjm6Wp589AvVHIGsT7VyLX2G8O5eyM0HCz5MiwYe6Zb52EQ2Xup6yVEk
VKz4fweZbp8nY8cYiedcEtg9mmaJm5LXRGaiIQYBiyX/z+2EwyNBur03siw6GG+b
QDYj11da2J/N6viuRlj1vvgfAXSEN5HML370v2RvUQWTGlbnLSjMMsyAGN1d+Eha
GlEe0P4SnZAM3uJWRcR1BjNcj2EGLfkKVu3u2uQnvaoKvkvTXntgy9vDKImpn8wV
4lQ9cExA3gg63AfxliD4fGPb3j+R7uh74jMBjby0QyCZdc0k2H4fERCy5kuwsbJm
TR22FEHIxIJUnJRGLTfL6lc2Jh0=
-----END CERTIFICATE-----
Generated at Tue Apr 22 12:03:23 2025 by rpki-client