Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QXBSZh7uTY0diTZdNnTSulqp_50.roa
File: QXBSZh7uTY0diTZdNnTSulqp_50.roa (raw, json)
Hash identifier: 33p7OiOrrPcFQJHiHWKoUz7ErAA7kQ74158/LckdimQ=
Subject key identifier: 41:70:52:66:1E:EE:4D:8D:1D:89:36:5D:36:74:D2:BA:5A:A9:FF:9D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0184581642FDB1FF686B59967AA4ADAEF680
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QXBSZh7uTY0diTZdNnTSulqp_50.roa
Signing time: Tue 08 Nov 2022 16:32:44 +0000
ROA not before: Tue 08 Nov 2022 16:32:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50340
IP address blocks: 2a0f:2e80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:58:16:42:fd:b1:ff:68:6b:59:96:7a:a4:ad:ae:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 8 16:32:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=417052661eee4d8d1d89365d3674d2ba5aa9ff9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:28:a3:d4:ba:f4:e3:ed:a8:e3:dc:3f:f2:40:
96:df:78:71:c2:54:42:7c:2b:dc:ac:35:82:da:e9:
18:a5:4b:77:32:be:bf:41:18:68:2c:ef:b4:3e:51:
af:e5:92:9b:50:2b:78:0a:56:7a:c4:7a:4d:00:a8:
e5:a9:8c:7d:a5:0f:4b:f6:f6:6f:f1:8b:d8:ff:dd:
41:e4:3c:70:35:a0:f3:2f:ff:fa:5f:2e:26:6a:88:
9a:18:72:d9:7b:d4:09:4d:65:df:79:00:e8:32:c3:
5a:ba:8c:b9:3f:a1:75:37:4e:2d:27:56:23:94:54:
b9:ed:f6:60:14:fe:47:ba:4f:8e:d1:81:8e:bb:9b:
88:7e:60:38:d1:f6:13:85:00:1e:9a:57:bf:58:13:
5e:e0:4e:87:b1:93:c3:ab:43:66:ca:fe:f5:78:5a:
14:70:14:47:40:db:2b:c0:a1:fa:dc:2d:59:79:09:
21:fb:14:33:51:c4:65:a2:29:5e:cf:83:ab:a1:e9:
23:76:5e:e5:87:03:62:c2:80:57:81:ca:2b:7e:df:
f4:63:9c:0b:12:c1:d5:f8:98:14:54:ea:d8:0e:dd:
72:6b:15:37:18:8b:0e:68:bb:cc:df:44:88:41:7c:
e0:c0:5b:7b:0c:0c:c7:ad:c8:0f:00:c5:54:ba:7d:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:70:52:66:1E:EE:4D:8D:1D:89:36:5D:36:74:D2:BA:5A:A9:FF:9D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QXBSZh7uTY0diTZdNnTSulqp_50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2e80::/29
Signature Algorithm: sha256WithRSAEncryption
b9:07:46:87:0d:75:d7:c5:ca:8c:d1:b9:62:28:c5:f4:27:4e:
86:7e:67:28:4c:be:0d:16:2a:a6:4b:44:81:19:a5:e8:77:79:
69:a2:02:86:df:94:c4:a7:79:af:2b:2b:52:dd:32:d9:c1:02:
c1:1f:69:93:cb:32:51:c1:bf:fc:e7:73:46:99:83:5c:8f:dd:
79:1b:4b:85:58:f6:5f:27:fc:5b:fa:bd:e9:31:63:88:9f:c0:
2c:2d:cf:30:fd:ba:d7:35:21:a5:e1:af:ff:e6:cb:e6:22:a0:
19:30:59:51:35:ba:0a:5f:50:ed:74:cb:31:27:c6:d7:b2:99:
31:ad:db:80:20:c5:98:a6:af:0a:10:42:dc:97:cf:38:c9:75:
d5:4b:69:99:8c:c6:dd:c5:3d:e8:ca:af:6a:09:84:d9:c8:1e:
7e:c5:ba:bb:60:c1:d8:00:71:b8:dc:33:7b:69:5c:bd:d4:b8:
93:a0:14:14:8e:2b:ad:d8:2f:ec:87:c3:13:01:7e:f6:b3:a3:
88:bf:63:91:6e:14:2a:e7:bd:93:6c:14:6f:51:d3:90:ca:a3:
51:14:0c:23:b7:73:e6:04:21:19:b4:09:1d:8f:00:e5:35:30:
82:e3:33:e2:7e:f1:11:6d:16:2c:3a:ae:34:66:d1:55:7f:e0:
47:36:c0:22
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYRYFkL9sf9oa1mWeqStrvaAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjIxMTA4MTYzMjQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTcwNTI2NjFlZWU0ZDhkMWQ4OTM2NWQzNjc0ZDJiYTVhYTlmZjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyij1Lr04+2o49w/8kCW33hxwlRC
fCvcrDWC2ukYpUt3Mr6/QRhoLO+0PlGv5ZKbUCt4ClZ6xHpNAKjlqYx9pQ9L9vZv
8YvY/91B5DxwNaDzL//6Xy4maoiaGHLZe9QJTWXfeQDoMsNauoy5P6F1N04tJ1Yj
lFS57fZgFP5Huk+O0YGOu5uIfmA40fYThQAemle/WBNe4E6HsZPDq0Nmyv71eFoU
cBRHQNsrwKH63C1ZeQkh+xQzUcRloilez4Oroekjdl7lhwNiwoBXgcorft/0Y5wL
EsHV+JgUVOrYDt1yaxU3GIsOaLvM30SIQXzgwFt7DAzHrcgPAMVUun2TQQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEFwUmYe7k2NHYk2XTZ00rpaqf+dMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvUVhCU1poN3VUWTBkaVRaZE5uVFN1bHFwXzUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg8ugDAN
BgkqhkiG9w0BAQsFAAOCAQEAuQdGhw1118XKjNG5YijF9CdOhn5nKEy+DRYqpktE
gRml6Hd5aaICht+UxKd5rysrUt0y2cECwR9pk8syUcG//OdzRpmDXI/deRtLhVj2
Xyf8W/q96TFjiJ/ALC3PMP261zUhpeGv/+bL5iKgGTBZUTW6Cl9Q7XTLMSfG17KZ
Ma3bgCDFmKavChBC3JfPOMl11UtpmYzG3cU96MqvagmE2cgefsW6u2DB2ABxuNwz
e2lcvdS4k6AUFI4rrdgv7IfDEwF+9rOjiL9jkW4UKue9k2wUb1HTkMqjURQMI7dz
5gQhGbQJHY8A5TUwguMz4n7xEW0WLDquNGbRVX/gRzbAIg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:10 2025 by rpki-client