Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/S1_8pzdcwpd-QAsUorPBoRAZoSU.roa
File: S1_8pzdcwpd-QAsUorPBoRAZoSU.roa (raw, json)
Hash identifier: X2KS6jKBMRYzA9CLvuVpqgTNxYrc5J4y/PO/+3qqBeU=
Subject key identifier: 4B:5F:FC:A7:37:5C:C2:97:7E:40:0B:14:A2:B3:C1:A1:10:19:A1:25
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018AB6AE17CEB413F612DF1C05023C3F43F5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/S1_8pzdcwpd-QAsUorPBoRAZoSU.roa
Signing time: Thu 21 Sep 2023 07:39:37 +0000
ROA not before: Thu 21 Sep 2023 07:39:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 2a0a:2d00:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:ae:17:ce:b4:13:f6:12:df:1c:05:02:3c:3f:43:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 21 07:39:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b5ffca7375cc2977e400b14a2b3c1a11019a125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:fb:80:92:b7:ed:b9:36:f4:82:d7:57:6f:
83:db:28:34:9f:da:73:54:6a:7e:ce:63:84:29:c1:
e7:03:4d:33:ba:d4:c0:cd:3a:64:22:94:bb:4a:a0:
3d:62:bc:b5:96:27:04:88:ed:f0:b6:e3:ee:0a:07:
71:6f:0d:f7:bb:c4:82:48:b1:fb:c3:00:a9:1c:13:
ce:ed:af:05:da:d4:c3:32:4c:52:91:79:94:c8:94:
dd:a8:9c:9d:2a:d7:e4:4c:88:92:7f:f1:83:49:ff:
27:2a:94:46:53:c0:da:46:4a:43:00:ae:a0:73:d8:
fc:85:04:3b:bb:df:1a:bf:0a:f1:15:11:88:38:04:
ff:f2:12:de:94:d3:f5:0c:3c:33:47:cb:e4:fd:f1:
d7:0b:2c:01:b9:c9:b8:ad:7d:db:16:2f:00:c8:48:
8d:30:ee:24:05:b0:a8:bc:00:e4:3c:7f:79:e5:ec:
c1:16:cd:ad:25:2f:c6:e2:6f:0b:a7:79:1d:c3:05:
51:e1:cf:90:50:a3:54:e5:1b:21:b3:c7:10:4c:b5:
35:bf:a1:cc:9c:a3:16:db:2f:92:e8:c0:eb:9b:ac:
4e:7e:bd:54:8b:cb:c7:b5:3d:7a:a6:b9:8f:d7:95:
31:8d:58:44:1d:09:50:c2:b7:be:1d:9e:13:9c:f7:
8f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5F:FC:A7:37:5C:C2:97:7E:40:0B:14:A2:B3:C1:A1:10:19:A1:25
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/S1_8pzdcwpd-QAsUorPBoRAZoSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d00:3::/48
Signature Algorithm: sha256WithRSAEncryption
0e:4a:ab:ba:de:83:67:3c:18:a7:49:94:f7:90:97:d4:bc:2a:
40:c6:b4:0a:83:ca:86:d4:64:55:b8:1c:aa:ed:32:43:bf:5f:
1e:fa:3d:6e:16:8b:61:0e:6f:d6:a5:3e:8b:ac:6e:3d:01:7d:
30:ba:9a:8c:42:fd:70:fa:2b:9b:a1:bf:d5:36:b4:78:2a:72:
14:30:26:81:6a:57:f8:e0:6e:99:2a:71:f4:f6:16:95:93:2c:
39:50:76:fb:d4:5b:b4:0a:2d:40:de:8e:17:6c:d1:2a:d6:30:
bf:65:53:83:5f:48:95:95:ed:b3:64:f2:7b:e1:f2:ec:62:52:
46:5f:03:45:26:26:d2:73:63:fa:7f:c6:21:c6:a7:34:73:15:
46:31:6c:c2:f1:80:14:f4:51:db:a5:0f:d4:d8:e0:21:30:e0:
e4:6f:6f:3c:9c:ed:8c:10:9e:ae:68:df:57:f2:fa:31:81:4e:
cc:fc:99:30:74:03:93:e3:57:4a:19:3b:de:70:f1:af:15:42:
20:d4:46:90:25:e1:6a:93:ec:7d:6f:c3:8d:6a:94:49:ff:04:
fe:d5:6c:e7:5e:1b:87:17:87:32:40:b4:f5:52:cf:8f:82:65:
92:e8:66:b3:f1:52:d3:98:42:a1:cb:82:ce:ed:c4:69:30:d7:
ab:5e:e4:e7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYq2rhfOtBP2Et8cBQI8P0P1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwOTIxMDczOTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjVmZmNhNzM3NWNjMjk3N2U0MDBiMTRhMmIzYzFhMTEwMTlhMTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Lv7gJK37bk29ILXV2+D2yg0n9pz
VGp+zmOEKcHnA00zutTAzTpkIpS7SqA9Yry1licEiO3wtuPuCgdxbw33u8SCSLH7
wwCpHBPO7a8F2tTDMkxSkXmUyJTdqJydKtfkTIiSf/GDSf8nKpRGU8DaRkpDAK6g
c9j8hQQ7u98avwrxFRGIOAT/8hLelNP1DDwzR8vk/fHXCywBucm4rX3bFi8AyEiN
MO4kBbCovADkPH955ezBFs2tJS/G4m8Lp3kdwwVR4c+QUKNU5Rshs8cQTLU1v6HM
nKMW2y+S6MDrm6xOfr1Ui8vHtT16prmP15UxjVhEHQlQwre+HZ4TnPeP1wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEtf/Kc3XMKXfkALFKKzwaEQGaElMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvUzFfOHB6ZGN3cGQtUUFzVW9yUEJvUkFab1NVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgotAAAD
MA0GCSqGSIb3DQEBCwUAA4IBAQAOSqu63oNnPBinSZT3kJfUvCpAxrQKg8qG1GRV
uByq7TJDv18e+j1uFothDm/WpT6LrG49AX0wupqMQv1w+iubob/VNrR4KnIUMCaB
alf44G6ZKnH09haVkyw5UHb71Fu0Ci1A3o4XbNEq1jC/ZVODX0iVle2zZPJ74fLs
YlJGXwNFJibSc2P6f8Yhxqc0cxVGMWzC8YAU9FHbpQ/U2OAhMODkb288nO2MEJ6u
aN9X8voxgU7M/JkwdAOT41dKGTvecPGvFUIg1EaQJeFqk+x9b8ONapRJ/wT+1Wzn
XhuHF4cyQLT1Us+PgmWS6Gaz8VLTmEKhy4LO7cRpMNerXuTn
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:08 2025 by rpki-client