Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JctTgZU7mnbyTSueDavj_YPs8do.roa
File: JctTgZU7mnbyTSueDavj_YPs8do.roa (raw, json)
Hash identifier: v12ZYiNg+Y0C/rrWN5hvjcHvVADFHSOAN4kfNAkEg+0=
Subject key identifier: 25:CB:53:81:95:3B:9A:76:F2:4D:2B:9E:0D:AB:E3:FD:83:EC:F1:DA
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0185CE98852A0FC3B1F950A8AD65DE7CC1AF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JctTgZU7mnbyTSueDavj_YPs8do.roa
Signing time: Fri 20 Jan 2023 09:52:59 +0000
ROA not before: Fri 20 Jan 2023 09:52:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 2a0f:7d00:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ce:98:85:2a:0f:c3:b1:f9:50:a8:ad:65:de:7c:c1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 20 09:52:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25cb5381953b9a76f24d2b9e0dabe3fd83ecf1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:54:5c:69:88:0b:f6:7f:91:78:1a:ea:ce:
5f:76:58:4a:c4:cf:3a:12:f7:bf:aa:0d:2a:d6:e1:
46:8f:3c:b7:11:27:48:f2:3f:d6:b6:d5:64:3a:d7:
e3:50:78:41:f1:28:ec:88:04:0e:8c:fc:ee:a2:72:
cc:36:ea:96:6e:00:e4:1c:2d:74:7d:67:a1:0a:38:
c9:5d:32:f3:7d:c4:ce:11:99:42:a9:14:20:dd:05:
b7:1d:12:06:7e:2a:fa:59:0f:27:d8:f2:a4:0f:cf:
52:01:b2:d9:71:57:bc:1b:1c:33:c4:a4:1f:09:63:
33:28:10:f3:d4:1a:18:7d:94:47:59:89:55:c4:fd:
8c:14:1c:e4:b1:c9:92:fe:2f:df:0b:a1:d4:05:75:
23:c8:4e:f5:cc:b3:67:c4:ac:4b:19:8d:f6:2b:9e:
38:ac:78:aa:a5:ad:77:ca:47:fd:a8:aa:e0:e6:70:
36:79:03:26:84:5c:1c:85:37:19:bb:aa:00:29:50:
33:48:9b:78:3c:8c:68:d0:ce:ce:30:69:a3:63:76:
bb:0b:8d:4f:64:27:4d:7d:ee:ac:e8:98:c8:54:50:
53:b8:eb:b8:f9:28:a5:18:59:7e:ea:d0:88:a1:81:
97:a6:5e:6e:67:6e:20:6d:a3:14:79:7e:b9:41:c7:
0b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CB:53:81:95:3B:9A:76:F2:4D:2B:9E:0D:AB:E3:FD:83:EC:F1:DA
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JctTgZU7mnbyTSueDavj_YPs8do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7d00:3::/48
Signature Algorithm: sha256WithRSAEncryption
a6:a9:47:75:e0:b6:9d:82:f3:0a:8d:9b:32:2a:56:0e:b0:5f:
f2:db:b0:b9:e4:70:c5:f7:9b:5d:14:a7:97:6e:43:bc:f8:3d:
75:b6:04:e6:f5:7b:59:85:2d:18:6f:f9:0b:e0:ce:63:bc:49:
9d:9e:e3:98:33:5f:ec:90:11:53:e0:a3:30:3b:71:4b:44:65:
ab:8c:eb:1d:a4:b5:76:2c:58:4e:12:64:5a:45:bf:4b:7a:26:
da:80:d7:f8:67:a1:26:19:b4:a8:05:3c:1f:88:a5:61:e3:83:
21:de:a3:8b:28:7c:19:20:c5:3e:4d:70:53:c1:fe:38:91:e3:
84:bc:e3:76:9d:13:e9:ba:23:5e:40:72:85:2e:41:b0:3a:c8:
7b:74:8d:7e:ef:d8:31:c7:44:ec:49:1a:29:83:d5:de:9a:0b:
43:f5:2f:bf:dc:ba:69:e0:74:e5:de:fa:17:56:27:8d:c7:22:
e4:3f:48:27:99:d9:ca:5c:1b:74:a5:5b:ff:26:23:d5:85:3b:
b3:61:44:01:ca:ee:09:56:26:86:8a:7b:3b:e9:7b:48:aa:78:
11:d5:c1:3c:3f:c3:79:51:27:7b:20:34:bd:37:f4:70:9e:c4:
35:50:6d:57:d9:3f:29:12:7d:e1:33:26:45:49:19:95:e7:b1:
6b:47:50:17
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYXOmIUqD8Ox+VCorWXefMGvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwMTIwMDk1MjU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWNiNTM4MTk1M2I5YTc2ZjI0ZDJiOWUwZGFiZTNmZDgzZWNmMWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC9UXGmIC/Z/kXga6s5fdlhKxM86
Eve/qg0q1uFGjzy3ESdI8j/WttVkOtfjUHhB8SjsiAQOjPzuonLMNuqWbgDkHC10
fWehCjjJXTLzfcTOEZlCqRQg3QW3HRIGfir6WQ8n2PKkD89SAbLZcVe8GxwzxKQf
CWMzKBDz1BoYfZRHWYlVxP2MFBzkscmS/i/fC6HUBXUjyE71zLNnxKxLGY32K544
rHiqpa13ykf9qKrg5nA2eQMmhFwchTcZu6oAKVAzSJt4PIxo0M7OMGmjY3a7C41P
ZCdNfe6s6JjIVFBTuOu4+SilGFl+6tCIoYGXpl5uZ24gbaMUeX65QccLdQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCXLU4GVO5p28k0rng2r4/2D7PHaMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvSmN0VGdaVTdtbmJ5VFN1ZURhdmpfWVBzOGRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg99AAAD
MA0GCSqGSIb3DQEBCwUAA4IBAQCmqUd14LadgvMKjZsyKlYOsF/y27C55HDF95td
FKeXbkO8+D11tgTm9XtZhS0Yb/kL4M5jvEmdnuOYM1/skBFT4KMwO3FLRGWrjOsd
pLV2LFhOEmRaRb9LeibagNf4Z6EmGbSoBTwfiKVh44Mh3qOLKHwZIMU+TXBTwf44
keOEvON2nRPpuiNeQHKFLkGwOsh7dI1+79gxx0TsSRopg9XemgtD9S+/3Lpp4HTl
3voXVieNxyLkP0gnmdnKXBt0pVv/JiPVhTuzYUQByu4JViaGins76XtIqngR1cE8
P8N5USd7IDS9N/RwnsQ1UG1X2T8pEn3hMyZFSRmV57FrR1AX
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:30 2025 by rpki-client