Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Z2-hSkW3CkRkWWaBU3RY0Fw_k2g.roa
File: Z2-hSkW3CkRkWWaBU3RY0Fw_k2g.roa (raw, json)
Hash identifier: Mrx28/ybVGvO3czvuVIQ3KKNtBkKMN7814ztbkob7pA=
Subject key identifier: 67:6F:A1:4A:45:B7:0A:44:64:59:66:81:53:74:58:D0:5C:3F:93:68
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01856DCAEBA3447F0E6A643428D7332EF470
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Z2-hSkW3CkRkWWaBU3RY0Fw_k2g.roa
Signing time: Sun 01 Jan 2023 14:44:53 +0000
ROA not before: Sun 01 Jan 2023 14:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28753
IP address blocks: 2a0f:2500::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:eb:a3:44:7f:0e:6a:64:34:28:d7:33:2e:f4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 14:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=676fa14a45b70a4464596681537458d05c3f9368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:2d:c0:23:77:29:e3:6d:37:39:8f:87:8e:
22:43:a8:50:f9:3a:af:c0:35:97:75:16:d3:44:60:
a0:87:87:21:0a:8a:0d:cf:9e:6b:09:30:a5:a1:0b:
3d:9b:38:2b:96:2c:3f:57:c1:aa:55:7e:cd:21:6c:
db:5d:5b:86:f2:3e:59:6f:66:1d:ec:97:52:08:ec:
08:7e:19:c5:41:04:89:91:2f:35:05:40:48:0f:66:
c9:9f:ae:54:c5:20:bb:5f:4e:e2:d2:51:8a:48:d7:
17:fd:91:f8:ca:3b:57:c6:de:c1:89:26:0b:13:d0:
bc:dd:be:f8:2c:98:73:08:7b:80:44:43:b7:c4:01:
ac:ee:35:98:69:17:ff:c0:99:87:99:4b:16:d0:92:
89:38:e9:c1:fc:07:54:36:36:b5:e7:f5:55:a9:fb:
1b:cf:a8:aa:24:bd:e2:52:cb:73:e8:bb:89:a8:3d:
8b:73:1a:68:ae:6f:1a:a7:f4:75:94:36:0b:74:09:
15:da:de:57:f3:0d:73:3c:a6:84:cb:0e:3b:55:a0:
e1:8c:d4:7b:83:89:bb:c2:67:3b:fb:db:bc:a7:ac:
2e:3c:9d:a0:46:93:62:de:2f:da:62:9a:b6:7b:cf:
06:87:09:e9:4a:44:cb:7b:c9:94:8d:30:eb:a7:9a:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6F:A1:4A:45:B7:0A:44:64:59:66:81:53:74:58:D0:5C:3F:93:68
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Z2-hSkW3CkRkWWaBU3RY0Fw_k2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2500::/29
Signature Algorithm: sha256WithRSAEncryption
82:eb:f2:d9:fe:ed:0d:51:e4:a4:01:56:1d:dd:be:a6:6f:db:
2a:d9:51:4d:ff:0c:fa:d6:4d:98:50:c4:e1:e1:93:65:66:98:
d8:7c:0d:de:9d:84:81:c4:b0:3c:5f:f3:c4:bb:99:1d:3e:a2:
b9:9f:8c:f4:8c:fa:f6:20:70:ca:d1:04:a9:c4:32:96:bb:09:
3c:eb:88:7f:06:f7:8f:19:0f:59:b8:05:dc:ce:af:d1:f3:89:
35:5b:d7:d8:c8:11:b9:0a:32:b9:8d:0d:47:37:14:2c:eb:a4:
b8:3b:57:64:d7:7b:ce:85:8c:40:8a:da:40:f6:39:fb:93:ec:
2c:24:4d:c7:09:90:b8:21:6e:01:35:76:8b:98:98:ac:53:f9:
cf:4f:72:ab:ad:7d:ba:4d:a5:4b:57:20:1b:af:db:b4:66:2a:
50:41:13:1f:d5:6f:92:cc:05:16:38:bd:11:21:56:4e:60:77:
a8:e2:66:1a:b2:42:fb:30:ee:4b:d4:ca:7a:96:82:16:3c:5d:
38:a4:c7:f3:21:88:46:81:95:2d:77:88:f2:01:56:4b:48:f5:
37:7f:7e:78:2a:d5:f2:19:96:78:09:0a:29:4c:56:f8:a2:4d:
2c:5a:8a:bc:bb:1e:01:e3:b0:af:80:d9:49:6e:5f:c1:ea:8b:
a5:63:6c:2a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVtyuujRH8OamQ0KNczLvRwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwMTAxMTQ0NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzZmYTE0YTQ1YjcwYTQ0NjQ1OTY2ODE1Mzc0NThkMDVjM2Y5MzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDwtwCN3KeNtNzmPh44iQ6hQ+Tqv
wDWXdRbTRGCgh4chCooNz55rCTCloQs9mzgrliw/V8GqVX7NIWzbXVuG8j5Zb2Yd
7JdSCOwIfhnFQQSJkS81BUBID2bJn65UxSC7X07i0lGKSNcX/ZH4yjtXxt7BiSYL
E9C83b74LJhzCHuAREO3xAGs7jWYaRf/wJmHmUsW0JKJOOnB/AdUNja15/VVqfsb
z6iqJL3iUstz6LuJqD2Lcxporm8ap/R1lDYLdAkV2t5X8w1zPKaEyw47VaDhjNR7
g4m7wmc7+9u8p6wuPJ2gRpNi3i/aYpq2e88GhwnpSkTLe8mUjTDrp5rllQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGdvoUpFtwpEZFlmgVN0WNBcP5NoMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvWjItaFNrVzNDa1JrV1dhQlUzUlkwRndfazJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg8lADAN
BgkqhkiG9w0BAQsFAAOCAQEAguvy2f7tDVHkpAFWHd2+pm/bKtlRTf8M+tZNmFDE
4eGTZWaY2HwN3p2EgcSwPF/zxLuZHT6iuZ+M9Iz69iBwytEEqcQylrsJPOuIfwb3
jxkPWbgF3M6v0fOJNVvX2MgRuQoyuY0NRzcULOukuDtXZNd7zoWMQIraQPY5+5Ps
LCRNxwmQuCFuATV2i5iYrFP5z09yq619uk2lS1cgG6/btGYqUEETH9VvkswFFji9
ESFWTmB3qOJmGrJC+zDuS9TKepaCFjxdOKTH8yGIRoGVLXeI8gFWS0j1N39+eCrV
8hmWeAkKKUxW+KJNLFqKvLseAeOwr4DZSW5fweqLpWNsKg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:40:23 2025 by rpki-client