Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/M60aEMLKqdCIMPg1BrTieuleVJM.roa
File: M60aEMLKqdCIMPg1BrTieuleVJM.roa (raw, json)
Hash identifier: J5j/6umiOE5ugfwCGnsuxAyDigTcxuvQLZ+C+9Xrw+g=
Subject key identifier: 33:AD:1A:10:C2:CA:A9:D0:88:30:F8:35:06:B4:E2:7A:E9:5E:54:93
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 02D1B712
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/M60aEMLKqdCIMPg1BrTieuleVJM.roa
Signing time: Tue 19 Apr 2022 13:10:35 +0000
ROA not before: Tue 19 Apr 2022 13:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15924
IP address blocks: 2a10:67c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47298322 (0x2d1b712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 19 13:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33ad1a10c2caa9d08830f83506b4e27ae95e5493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:4e:87:44:97:08:be:46:58:5d:48:55:dd:
f5:6a:81:e2:bc:69:6f:d7:fb:b7:b4:c1:eb:01:68:
c0:0c:b2:fb:ce:4a:7b:40:7e:ae:65:fb:fb:15:de:
42:d9:f1:7c:66:8b:6b:8e:be:e0:1c:fc:6e:69:22:
38:95:bf:90:31:aa:e3:2e:91:51:fd:ad:e3:2b:cc:
48:36:df:3d:89:a3:f3:c3:9b:b4:84:53:23:95:3e:
69:97:0f:ec:da:b7:5d:48:9c:24:a0:f4:37:ae:78:
b4:32:16:be:a4:28:84:35:15:79:50:17:a8:cf:72:
e8:08:e6:df:58:56:62:24:76:cd:46:35:af:3d:d7:
15:82:ec:ae:33:99:83:33:3e:bd:06:b4:7c:81:41:
44:c3:b7:62:b0:aa:9e:9f:e9:6e:52:a9:1c:85:d7:
7d:d7:5f:e6:47:0d:43:cd:53:c5:66:c7:e2:86:e7:
bd:90:11:a9:65:75:4f:2e:e9:e0:c6:18:88:23:3c:
a1:fc:5d:0c:99:c7:6f:f3:1b:7c:63:ca:75:61:62:
2d:17:63:9c:65:27:89:c7:44:44:f6:fe:2c:94:04:
07:61:46:f4:74:a2:cf:01:69:2f:6c:0c:1b:c1:db:
95:29:7b:12:c0:a2:ed:f9:13:76:b4:b6:71:d4:91:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AD:1A:10:C2:CA:A9:D0:88:30:F8:35:06:B4:E2:7A:E9:5E:54:93
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/M60aEMLKqdCIMPg1BrTieuleVJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:67c0::/29
Signature Algorithm: sha256WithRSAEncryption
75:62:0b:5d:44:c3:d6:7f:9a:38:b8:a6:d5:1a:6c:46:1f:d3:
b1:88:5d:11:4b:53:dd:2b:38:00:fd:78:e7:8b:fc:c5:2b:bf:
f9:f8:51:85:d0:18:03:17:6e:b2:8e:b9:78:bf:23:50:f5:e3:
99:e6:29:74:b5:90:a9:25:d3:61:01:13:c5:e5:0c:d9:3f:b9:
6f:2a:c5:4a:08:3f:8a:2c:87:68:e6:d1:1c:13:4d:2e:77:2d:
c7:4d:66:0f:0a:53:02:47:fd:41:ca:db:18:d7:27:5d:60:9b:
a7:3c:06:86:74:a4:7b:3a:2e:0f:8d:e4:ee:29:40:62:23:ef:
86:63:85:33:3d:b1:01:0e:de:65:f0:f8:51:91:35:00:9f:2c:
c4:6c:89:de:7c:3e:88:fa:0f:00:08:fd:e2:7b:a5:0d:5f:9f:
ca:29:51:11:67:52:01:66:b3:9f:84:66:2b:5a:55:b9:4a:42:
00:b2:99:c9:e7:77:c6:6d:4f:0e:4a:4e:62:02:03:5d:e2:2c:
74:4e:9f:d6:82:3f:00:ee:b0:fb:8e:e5:35:d5:74:39:38:15:
58:2b:90:e6:3f:99:f9:0a:07:1c:f2:27:9b:3c:1d:7d:fd:69:
c2:69:62:0c:0b:d5:0d:02:3d:e5:be:25:55:35:f1:8c:c4:8c:
8c:76:61:ed
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAtG3EjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDU1OWFhZmJmYzA5MzEyNDJlMWQ2MzcyOThjZjFkZDIyM2U0YzI2MB4XDTIyMDQx
OTEzMTAzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzNhZDFhMTBjMmNh
YTlkMDg4MzBmODM1MDZiNGUyN2FlOTVlNTQ5MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALH4TodElwi+RlhdSFXd9WqB4rxpb9f7t7TB6wFowAyy+85K
e0B+rmX7+xXeQtnxfGaLa46+4Bz8bmkiOJW/kDGq4y6RUf2t4yvMSDbfPYmj88Ob
tIRTI5U+aZcP7Nq3XUicJKD0N654tDIWvqQohDUVeVAXqM9y6Ajm31hWYiR2zUY1
rz3XFYLsrjOZgzM+vQa0fIFBRMO3YrCqnp/pblKpHIXXfddf5kcNQ81TxWbH4obn
vZARqWV1Ty7p4MYYiCM8ofxdDJnHb/MbfGPKdWFiLRdjnGUnicdERPb+LJQEB2FG
9HSizwFpL2wMG8HblSl7EsCi7fkTdrS2cdSRn+ECAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBQzrRoQwsqp0Igw+DUGtOJ66V5UkzAfBgNVHSMEGDAWgBR9VZqvv8CTEkLh
1jcpjPHdIj5MJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8x
L002MGFFTUxLcWRDSU1QZzFCclRpZXVsZVZKTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
NDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8xL2ZWV2FyN19Ba3hK
QzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoQZ8AwDQYJKoZIhvcNAQELBQAD
ggEBAHViC11Ew9Z/mji4ptUabEYf07GIXRFLU90rOAD9eOeL/MUrv/n4UYXQGAMX
brKOuXi/I1D145nmKXS1kKkl02EBE8XlDNk/uW8qxUoIP4osh2jm0RwTTS53LcdN
Zg8KUwJH/UHK2xjXJ11gm6c8BoZ0pHs6Lg+N5O4pQGIj74ZjhTM9sQEO3mXw+FGR
NQCfLMRsid58Poj6DwAI/eJ7pQ1fn8opURFnUgFms5+EZitaVblKQgCymcnnd8Zt
Tw5KTmICA13iLHROn9aCPwDusPuO5TXVdDk4FVgrkOY/mfkKBxzyJ5s8HX39acJp
YgwL1Q0CPeW+JVU18YzEjIx2Ye0=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:22 2025 by rpki-client