Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DS2XYWzLgxxodE760qZtSy7OrrA.roa
File: DS2XYWzLgxxodE760qZtSy7OrrA.roa (raw, json)
Hash identifier: n3GeOBM58oaDrg0zU2akCkm7hAiG4gOg3/qupI39taI=
Subject key identifier: 0D:2D:97:61:6C:CB:83:1C:68:74:4E:FA:D2:A6:6D:4B:2E:CE:AE:B0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018695627EB0125F83CCAEFF5CB0B1D80EE8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DS2XYWzLgxxodE760qZtSy7OrrA.roa
Signing time: Tue 28 Feb 2023 00:18:25 +0000
ROA not before: Tue 28 Feb 2023 00:18:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a0f:7d00:1::/48 maxlen: 48
2a0e:15c1::/32 maxlen: 32
2a12:d6c1::/32 maxlen: 32
2a0a:2d00:1::/48 maxlen: 48
2a0c:7884::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:95:62:7e:b0:12:5f:83:cc:ae:ff:5c:b0:b1:d8:0e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 28 00:18:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d2d97616ccb831c68744efad2a66d4b2eceaeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:9d:1c:fb:1d:1a:c6:24:64:cf:c7:af:c1:
40:cf:3f:a8:48:99:84:2d:1f:35:5b:1c:25:ee:a8:
58:9e:27:42:75:2c:c6:6c:d3:74:30:6c:d7:7c:94:
a0:db:24:5d:2e:14:e3:e3:e6:a6:23:7c:f4:30:0c:
6d:2d:e8:15:3f:ff:6c:45:24:32:0d:07:cc:7d:a4:
4f:84:53:07:13:95:f6:fd:47:dc:6a:be:b7:e0:89:
3a:12:51:22:68:86:b8:d2:9f:f8:02:64:bd:d8:ae:
0d:3f:ba:b4:d5:e1:ef:56:c9:45:ab:e4:ff:c6:8e:
29:9a:b3:bd:f4:bf:86:3b:f1:e1:8b:e6:c7:fe:c1:
ef:a5:8f:1f:f7:a9:e5:af:d4:99:aa:a5:c1:93:0e:
68:a8:1b:e1:15:23:e9:a6:a4:af:0f:cd:ef:ea:ad:
b9:a1:47:a8:16:38:dd:73:d8:0c:1e:74:c8:ac:f7:
75:59:45:96:58:0d:99:59:c9:e2:88:1a:18:30:93:
2d:8e:52:e7:7c:74:a9:82:aa:a7:db:c3:a6:d4:ce:
7e:24:30:b5:6c:03:30:cf:fd:31:f6:23:25:20:3e:
58:ea:ac:e7:57:8d:8a:e3:2d:1b:dd:bb:d6:15:ab:
7c:e2:24:b3:4a:49:71:b1:57:cf:2d:63:8e:29:0e:
b2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2D:97:61:6C:CB:83:1C:68:74:4E:FA:D2:A6:6D:4B:2E:CE:AE:B0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DS2XYWzLgxxodE760qZtSy7OrrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d00:1::/48
2a0c:7884::/32
2a0e:15c1::/32
2a0f:7d00:1::/48
2a12:d6c1::/32
Signature Algorithm: sha256WithRSAEncryption
5a:2c:71:f7:57:8f:ef:ca:57:e4:e8:79:a6:48:a7:49:8a:68:
d8:3a:63:01:08:3b:d9:17:d2:1a:0a:ab:9d:78:2b:bc:ea:fb:
0c:8c:82:ed:ca:32:b5:9e:62:cc:bc:8d:34:87:da:13:e6:13:
6a:ab:95:89:b2:a1:2e:bd:ee:5c:b2:7c:70:2c:f1:87:9c:ca:
e5:15:3a:8c:db:cc:d7:02:65:f3:5c:58:67:b4:99:44:ae:e6:
22:14:37:92:12:d2:29:67:66:07:83:8c:64:f7:f5:4c:b7:d8:
f4:d9:ae:ba:31:76:d9:13:42:81:52:d7:36:c1:f9:75:aa:0e:
b2:b7:12:52:cf:62:e8:6e:3f:31:cd:34:ca:e9:75:5f:9e:2c:
ed:06:21:3f:1e:a1:8d:74:64:62:a2:d0:bb:a2:8b:65:a8:29:
51:c1:cb:fc:41:b0:6b:50:38:a9:dc:0f:f0:b9:ed:9d:fc:99:
e5:7a:73:03:e6:f0:67:24:b4:e6:21:e0:8f:2b:eb:b3:4f:31:
6b:4b:0a:3d:bd:24:c3:7a:7a:2d:76:ed:b6:12:4a:ef:ca:58:
d6:13:d3:e6:98:05:86:a4:ce:1a:74:43:af:78:d8:41:90:ab:
7d:89:a1:21:4a:7f:5b:78:52:95:3a:64:a2:a3:ad:39:bb:64:
d8:ad:51:e1
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYaVYn6wEl+DzK7/XLCx2A7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwMjI4MDAxODI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDJkOTc2MTZjY2I4MzFjNjg3NDRlZmFkMmE2NmQ0YjJlY2VhZWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh+dHPsdGsYkZM/Hr8FAzz+oSJmE
LR81Wxwl7qhYnidCdSzGbNN0MGzXfJSg2yRdLhTj4+amI3z0MAxtLegVP/9sRSQy
DQfMfaRPhFMHE5X2/Ufcar634Ik6ElEiaIa40p/4AmS92K4NP7q01eHvVslFq+T/
xo4pmrO99L+GO/Hhi+bH/sHvpY8f96nlr9SZqqXBkw5oqBvhFSPppqSvD83v6q25
oUeoFjjdc9gMHnTIrPd1WUWWWA2ZWcniiBoYMJMtjlLnfHSpgqqn28Om1M5+JDC1
bAMwz/0x9iMlID5Y6qznV42K4y0b3bvWFat84iSzSklxsVfPLWOOKQ6yiwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFA0tl2Fsy4McaHRO+tKmbUsuzq6wMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvRFMyWFlXekxneHhvZEU3NjBxWnRTeTdPcnJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAtBAIAAjAnAwcAKgotAAAB
AwUAKgx4hAMFACoOFcEDBwAqD30AAAEDBQAqEtbBMA0GCSqGSIb3DQEBCwUAA4IB
AQBaLHH3V4/vylfk6HmmSKdJimjYOmMBCDvZF9IaCqudeCu86vsMjILtyjK1nmLM
vI00h9oT5hNqq5WJsqEuve5csnxwLPGHnMrlFTqM28zXAmXzXFhntJlEruYiFDeS
EtIpZ2YHg4xk9/VMt9j02a66MXbZE0KBUtc2wfl1qg6ytxJSz2Lobj8xzTTK6XVf
niztBiE/HqGNdGRiotC7ootlqClRwcv8QbBrUDip3A/wue2d/JnlenMD5vBnJLTm
IeCPK+uzTzFrSwo9vSTDenotdu22EkrvyljWE9PmmAWGpM4adEOveNhBkKt9iaEh
Sn9beFKVOmSio605u2TYrVHh
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:53 2025 by rpki-client