Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SGEMSpKn9pbvmVzZSRdg5Nc-OJ0.roa
File: SGEMSpKn9pbvmVzZSRdg5Nc-OJ0.roa (raw, json)
Hash identifier: fGFqNqeFd4cxHfV86XjD4kFK8vDGywNEgS3GzdQRT/4=
Subject key identifier: 48:61:0C:4A:92:A7:F6:96:EF:99:5C:D9:49:17:60:E4:D7:3E:38:9D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018A210CC6EEB874FFB91C5CB4128B037B64
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SGEMSpKn9pbvmVzZSRdg5Nc-OJ0.roa
Signing time: Wed 23 Aug 2023 06:20:00 +0000
ROA not before: Wed 23 Aug 2023 06:20:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212027
IP address blocks: 2a0d:1140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:0c:c6:ee:b8:74:ff:b9:1c:5c:b4:12:8b:03:7b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 23 06:20:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48610c4a92a7f696ef995cd9491760e4d73e389d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fc:b3:72:21:77:53:b7:b1:82:c5:51:c2:46:
fa:bd:f0:e6:99:41:cf:61:8e:24:97:3c:9f:91:b2:
42:be:57:b0:e3:56:58:e4:e0:26:6e:1b:32:be:ba:
05:f5:73:a3:df:87:8a:3f:8a:c8:5b:ae:8f:33:d5:
43:53:80:a0:67:27:74:84:f3:a3:51:83:c8:21:b6:
b6:71:29:a3:83:2a:fb:52:6a:21:fd:a9:50:ea:f2:
36:a5:f0:88:71:ab:13:eb:1a:6e:56:aa:de:cc:5e:
fe:c3:5f:55:78:cb:e7:50:6b:ef:da:4f:8a:4e:8e:
9c:3a:3f:1a:39:2d:76:21:ea:25:4b:22:ea:65:88:
da:41:2c:55:af:a2:ca:87:15:0d:f5:e1:25:5d:aa:
86:08:29:90:fb:5e:e3:80:7b:ba:fc:11:f2:97:28:
6f:12:3b:90:1c:b3:e7:23:14:9f:ba:c3:70:3c:21:
e3:2d:b0:72:14:18:e9:25:47:b3:a5:d5:b7:15:c9:
8e:06:cb:a8:d5:97:50:bf:f6:90:3e:e5:75:e9:15:
b5:37:9a:5f:0a:4d:03:59:4c:72:79:bd:be:19:ee:
20:7f:36:52:a8:c9:eb:67:c2:0e:ce:3c:70:6c:56:
1e:d3:0c:82:34:74:ca:7a:0d:d8:7f:7e:46:da:23:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:61:0C:4A:92:A7:F6:96:EF:99:5C:D9:49:17:60:E4:D7:3E:38:9D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SGEMSpKn9pbvmVzZSRdg5Nc-OJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1140::/29
Signature Algorithm: sha256WithRSAEncryption
2b:7a:d3:b1:12:9d:6d:27:fd:f0:87:9c:dc:f1:4f:af:60:2d:
ff:67:89:6f:ca:e3:cc:52:2b:77:30:7a:f8:a6:43:0c:fb:2c:
4e:88:18:dd:99:1d:af:0a:2c:e4:b5:b7:d9:79:c9:7c:64:f6:
b1:6a:cf:d2:56:0a:1b:2a:a7:ec:49:09:23:43:85:00:38:9f:
36:29:d2:0c:70:5a:0e:af:c7:8e:20:eb:a9:87:9f:e2:00:64:
a9:e5:96:1e:72:cf:08:cb:e8:09:22:6d:ce:07:73:93:42:89:
56:9a:ec:c8:90:c3:04:4c:5c:0a:26:85:07:2d:6c:b3:d8:53:
ec:57:74:48:4c:ba:57:e8:79:f0:c0:43:b7:e2:af:35:53:9a:
8a:ae:8d:ca:d9:0f:43:8a:53:b6:55:fa:05:02:37:3f:e1:f2:
1b:3c:b9:2b:c1:e5:81:48:50:48:60:8a:4f:b1:be:45:39:e5:
8c:2d:25:da:54:a1:f3:fa:59:10:ba:67:50:94:57:1a:e2:e4:
e3:25:c0:0d:b2:ae:da:fe:6c:4c:8e:da:52:4b:fd:c5:7d:d5:
f0:28:a5:49:8b:26:4e:40:01:a6:73:a8:88:26:87:c9:1b:04:
a3:e8:93:56:09:a2:bb:e8:1f:9a:7c:48:10:66:09:ea:64:4d:
0c:a3:33:e7
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYohDMbuuHT/uRxctBKLA3tkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwODIzMDYyMDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODYxMGM0YTkyYTdmNjk2ZWY5OTVjZDk0OTE3NjBlNGQ3M2UzODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPyzciF3U7exgsVRwkb6vfDmmUHP
YY4klzyfkbJCvlew41ZY5OAmbhsyvroF9XOj34eKP4rIW66PM9VDU4CgZyd0hPOj
UYPIIba2cSmjgyr7Umoh/alQ6vI2pfCIcasT6xpuVqrezF7+w19VeMvnUGvv2k+K
To6cOj8aOS12IeolSyLqZYjaQSxVr6LKhxUN9eElXaqGCCmQ+17jgHu6/BHylyhv
EjuQHLPnIxSfusNwPCHjLbByFBjpJUezpdW3FcmOBsuo1ZdQv/aQPuV16RW1N5pf
Ck0DWUxyeb2+Ge4gfzZSqMnrZ8IOzjxwbFYe0wyCNHTKeg3Yf35G2iOuawIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEhhDEqSp/aW75lc2UkXYOTXPjidMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvU0dFTVNwS245cGJ2bVZ6WlNSZGc1TmMtT0owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg0RQDAN
BgkqhkiG9w0BAQsFAAOCAQEAK3rTsRKdbSf98Iec3PFPr2At/2eJb8rjzFIrdzB6
+KZDDPssTogY3Zkdrwos5LW32XnJfGT2sWrP0lYKGyqn7EkJI0OFADifNinSDHBa
Dq/HjiDrqYef4gBkqeWWHnLPCMvoCSJtzgdzk0KJVprsyJDDBExcCiaFBy1ss9hT
7Fd0SEy6V+h58MBDt+KvNVOaiq6NytkPQ4pTtlX6BQI3P+HyGzy5K8HlgUhQSGCK
T7G+RTnljC0l2lSh8/pZELpnUJRXGuLk4yXADbKu2v5sTI7aUkv9xX3V8CilSYsm
TkABpnOoiCaHyRsEo+iTVgmiu+gfmnxIEGYJ6mRNDKMz5w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:52 2025 by rpki-client