Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RrA879FHnNgtpf22Ilv1iZyAEvc.roa
File: RrA879FHnNgtpf22Ilv1iZyAEvc.roa (raw, json)
Hash identifier: bvOCLILWT9aA48ce4kSW2QqBw0Lgi94O7PIiBVlF+LQ=
Subject key identifier: 46:B0:3C:EF:D1:47:9C:D8:2D:A5:FD:B6:22:5B:F5:89:9C:80:12:F7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01850B43DADE8F60E3B66C9DBA014BEA4918
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RrA879FHnNgtpf22Ilv1iZyAEvc.roa
Signing time: Tue 13 Dec 2022 11:34:34 +0000
ROA not before: Tue 13 Dec 2022 11:34:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8772
IP address blocks: 2a0c:9240::/29 maxlen: 29
2a0f:e7c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:43:da:de:8f:60:e3:b6:6c:9d:ba:01:4b:ea:49:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 13 11:34:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46b03cefd1479cd82da5fdb6225bf5899c8012f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:2b:3f:55:5c:42:a6:7a:74:9f:26:e0:a6:
84:28:52:bb:f1:f0:7e:9c:27:4c:68:f2:2b:7d:8b:
b8:f0:d8:a6:b1:71:9b:9a:85:4a:dd:7b:63:2e:c8:
e9:99:37:c8:8d:eb:03:45:f2:68:4d:00:0f:92:b6:
80:30:e6:f8:f4:19:8d:cb:96:97:37:0c:80:64:06:
73:0e:96:1e:74:a8:6c:b6:fd:1e:e0:7c:31:33:84:
fa:e4:fa:b3:22:3a:38:da:13:1e:d0:63:c9:b5:dd:
af:14:31:7e:72:e3:06:b3:5c:d9:57:c7:58:04:d7:
8c:0e:e5:9c:da:1c:d4:5a:b4:d3:96:0a:dd:1f:be:
d2:fc:0c:96:f3:e7:de:f9:ab:7e:db:19:cb:e9:cf:
e7:2d:6e:02:16:28:23:73:d4:f1:2e:89:01:9d:05:
1a:7a:4b:45:d4:5e:66:51:bd:42:25:7e:a0:98:88:
21:53:a5:7f:f9:27:3e:dc:80:b3:37:1b:a4:3e:0d:
22:1a:e8:c0:1d:08:d4:e5:48:0f:0b:d4:24:a5:c2:
f4:7f:26:4f:b3:2d:c8:5c:96:6b:f1:8c:fc:79:16:
78:23:3a:5f:bc:a3:80:b2:fd:2f:91:7c:ed:6f:8c:
1f:41:f2:b6:08:d7:43:ed:35:72:aa:f5:c7:46:93:
63:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B0:3C:EF:D1:47:9C:D8:2D:A5:FD:B6:22:5B:F5:89:9C:80:12:F7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RrA879FHnNgtpf22Ilv1iZyAEvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9240::/29
2a0f:e7c0::/29
Signature Algorithm: sha256WithRSAEncryption
a9:46:fe:7e:21:ac:6a:f5:4c:13:97:cf:fe:a7:6c:8a:77:f3:
7d:be:f9:4a:e0:08:ab:31:1b:f2:b4:5a:c0:36:01:c0:41:d6:
93:5e:d0:04:c2:b1:1b:46:23:40:f6:c6:50:c4:c8:e4:71:36:
f6:d4:0b:70:0d:54:4a:6d:b1:84:9c:bf:f8:f9:a1:1e:11:d2:
e8:21:ba:69:91:f4:18:8c:63:02:3c:b9:5e:74:08:fb:88:12:
bb:b0:6a:68:b2:8e:ed:87:58:d5:c7:77:a6:13:db:cd:1c:25:
dd:fd:d1:de:81:0e:6a:0b:d6:9e:a0:72:e5:94:fe:dd:ef:6c:
48:6b:f5:37:f6:81:65:67:20:86:f3:30:89:6b:d3:c1:d0:44:
16:2b:a0:7a:b4:ab:90:0b:5c:72:c1:74:06:c7:41:89:5d:a0:
fa:26:d8:e2:50:34:b7:05:bd:16:6f:68:b9:43:21:e3:d0:05:
7f:5c:3c:af:78:dc:2a:75:ab:d9:7f:8f:77:92:8c:6d:7b:c1:
9f:15:9b:cc:16:20:36:1e:e7:d0:d5:68:d5:7b:ba:07:3b:d1:
68:d6:ab:7b:35:f9:ca:f0:6e:72:5e:3e:2b:64:8e:0e:04:b0:
59:5b:56:99:e4:64:29:14:ae:68:78:4c:4a:de:47:c3:ac:92:
d4:60:50:d1
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYULQ9rej2DjtmydugFL6kkYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjIxMjEzMTEzNDM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmIwM2NlZmQxNDc5Y2Q4MmRhNWZkYjYyMjViZjU4OTljODAxMmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWYrP1VcQqZ6dJ8m4KaEKFK78fB+
nCdMaPIrfYu48NimsXGbmoVK3XtjLsjpmTfIjesDRfJoTQAPkraAMOb49BmNy5aX
NwyAZAZzDpYedKhstv0e4HwxM4T65PqzIjo42hMe0GPJtd2vFDF+cuMGs1zZV8dY
BNeMDuWc2hzUWrTTlgrdH77S/AyW8+fe+at+2xnL6c/nLW4CFigjc9TxLokBnQUa
ektF1F5mUb1CJX6gmIghU6V/+Sc+3ICzNxukPg0iGujAHQjU5UgPC9QkpcL0fyZP
sy3IXJZr8Yz8eRZ4IzpfvKOAsv0vkXztb4wfQfK2CNdD7TVyqvXHRpNjDQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEawPO/RR5zYLaX9tiJb9YmcgBL3MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvUnJBODc5RkhuTmd0cGYyMklsdjFpWnlBRXZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgySQAMF
AyoP58AwDQYJKoZIhvcNAQELBQADggEBAKlG/n4hrGr1TBOXz/6nbIp3832++Urg
CKsxG/K0WsA2AcBB1pNe0ATCsRtGI0D2xlDEyORxNvbUC3ANVEptsYScv/j5oR4R
0ughummR9BiMYwI8uV50CPuIEruwamiyju2HWNXHd6YT280cJd390d6BDmoL1p6g
cuWU/t3vbEhr9Tf2gWVnIIbzMIlr08HQRBYroHq0q5ALXHLBdAbHQYldoPom2OJQ
NLcFvRZvaLlDIePQBX9cPK943Cp1q9l/j3eSjG17wZ8Vm8wWIDYe59DVaNV7ugc7
0WjWq3s1+crwbnJePitkjg4EsFlbVpnkZCkUrmh4TEreR8OsktRgUNE=
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:41 2025 by rpki-client