Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eClwIyaaHNLceP7fO8XjFgPs91U.roa
File: eClwIyaaHNLceP7fO8XjFgPs91U.roa (raw, json)
Hash identifier: s4ZWpZvRR7SP88YD3goa5SluWFFfSoGi9WSkhbXm+Ic=
Subject key identifier: 78:29:70:23:26:9A:1C:D2:DC:78:FE:DF:3B:C5:E3:16:03:EC:F7:55
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018A3AABE94BF3B805E5A32A362AB7D86387
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eClwIyaaHNLceP7fO8XjFgPs91U.roa
Signing time: Mon 28 Aug 2023 05:44:19 +0000
ROA not before: Mon 28 Aug 2023 05:44:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198231
IP address blocks: 2a13:d700::/29 maxlen: 29
2a13:2d40::/29 maxlen: 29
2a13:2dc0::/29 maxlen: 29
2a13:c700::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3a:ab:e9:4b:f3:b8:05:e5:a3:2a:36:2a:b7:d8:63:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 28 05:44:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78297023269a1cd2dc78fedf3bc5e31603ecf755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:10:0c:b5:7a:53:cf:6e:bd:49:84:a3:e3:
c3:c9:4b:0a:21:b0:4a:5e:a6:8a:62:8d:1c:70:d6:
ad:d5:7d:0a:b5:f2:81:51:a0:10:4a:f7:9d:64:fc:
c2:8b:d2:92:4a:71:08:10:75:6a:c5:f2:15:ec:12:
5f:fc:ab:7a:3f:e8:b7:54:aa:47:93:15:4d:60:36:
61:f2:d8:15:2b:ba:7f:86:af:71:b4:f0:67:72:ef:
ef:17:83:17:12:c1:fd:b4:eb:f1:30:f3:33:cb:68:
7f:a8:4a:a9:93:31:8a:35:b8:80:af:7b:1a:b0:b5:
45:f5:43:7f:93:ef:ad:79:eb:ed:d4:18:81:e3:a3:
44:01:d6:87:70:66:24:5d:5c:3e:13:95:f8:81:23:
a7:62:fe:90:74:59:f7:a2:0d:f1:cb:4b:ed:0c:ea:
42:78:e2:64:ef:d8:ab:f4:ad:83:18:58:9a:e9:66:
ad:c1:ad:97:3a:1b:d9:43:cf:3b:b5:53:e3:ce:1a:
0e:46:57:29:9b:8a:b7:b9:be:ce:df:2d:29:fa:7b:
d9:6a:2e:c4:1d:8d:cd:a2:39:ee:f8:03:26:a8:54:
2e:55:c7:47:a7:27:08:15:4f:6d:91:0d:8f:bd:78:
7d:67:38:bf:65:6e:21:05:0f:94:da:0b:7d:bf:99:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:29:70:23:26:9A:1C:D2:DC:78:FE:DF:3B:C5:E3:16:03:EC:F7:55
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eClwIyaaHNLceP7fO8XjFgPs91U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2d40::/29
2a13:2dc0::/29
2a13:c700::/29
2a13:d700::/29
Signature Algorithm: sha256WithRSAEncryption
2b:d7:45:20:ec:ec:74:af:94:3a:d7:aa:62:ae:80:b1:e4:6c:
11:c1:49:d5:c0:f8:d6:90:ee:c5:0e:35:6f:a2:67:14:20:14:
e3:c4:e1:d7:34:26:bd:e1:26:fc:0b:a3:45:26:9a:d6:59:6c:
da:eb:1a:09:e3:d9:05:c1:90:4b:f7:44:d3:8e:e4:70:94:1c:
53:7f:e5:06:b6:87:82:fb:e2:43:95:98:91:1f:6b:e1:ea:22:
8c:18:e8:be:a9:b4:b2:3a:b9:4d:ad:35:26:3d:ce:27:c9:7a:
d7:f1:cf:72:7e:a6:cb:6a:99:6a:e4:98:32:c7:6e:33:2a:38:
cd:37:22:58:7f:9d:ca:03:3c:57:ac:9f:ea:90:08:4c:0e:c6:
11:70:6c:2c:15:d0:a9:c3:e2:b5:dd:77:27:45:79:fd:94:d8:
0b:6a:cd:05:88:56:95:8f:2d:14:bf:f8:79:78:c7:ae:01:85:
5e:58:5c:77:5c:e8:c3:63:02:e8:fc:65:ae:56:4c:f0:fc:26:
d6:1e:51:60:92:52:c2:54:fb:a0:27:e2:0c:99:36:c4:1d:56:
cf:a6:a0:26:65:12:27:1b:1b:bf:36:32:26:db:ab:83:c2:b4:
d9:1d:ee:f2:8f:be:07:33:fa:b1:08:e6:5a:0d:82:00:74:b7:
6d:42:0e:2f
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYo6q+lL87gF5aMqNiq32GOHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwODI4MDU0NDE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODI5NzAyMzI2OWExY2QyZGM3OGZlZGYzYmM1ZTMxNjAzZWNmNzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobsQDLV6U89uvUmEo+PDyUsKIbBK
XqaKYo0ccNat1X0KtfKBUaAQSvedZPzCi9KSSnEIEHVqxfIV7BJf/Kt6P+i3VKpH
kxVNYDZh8tgVK7p/hq9xtPBncu/vF4MXEsH9tOvxMPMzy2h/qEqpkzGKNbiAr3sa
sLVF9UN/k++teevt1BiB46NEAdaHcGYkXVw+E5X4gSOnYv6QdFn3og3xy0vtDOpC
eOJk79ir9K2DGFia6Watwa2XOhvZQ887tVPjzhoORlcpm4q3ub7O3y0p+nvZai7E
HY3Nojnu+AMmqFQuVcdHpycIFU9tkQ2PvXh9Zzi/ZW4hBQ+U2gt9v5kBcwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFHgpcCMmmhzS3Hj+3zvF4xYD7PdVMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvZUNsd0l5YWFITkxjZVA3Zk84WGpGZ1BzOTFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKhMtQAMF
AyoTLcADBQMqE8cAAwUDKhPXADANBgkqhkiG9w0BAQsFAAOCAQEAK9dFIOzsdK+U
OteqYq6AseRsEcFJ1cD41pDuxQ41b6JnFCAU48Th1zQmveEm/AujRSaa1lls2usa
CePZBcGQS/dE047kcJQcU3/lBraHgvviQ5WYkR9r4eoijBjovqm0sjq5Ta01Jj3O
J8l61/HPcn6my2qZauSYMsduMyo4zTciWH+dygM8V6yf6pAITA7GEXBsLBXQqcPi
td13J0V5/ZTYC2rNBYhWlY8tFL/4eXjHrgGFXlhcd1zow2MC6PxlrlZM8Pwm1h5R
YJJSwlT7oCfiDJk2xB1Wz6agJmUSJxsbvzYyJturg8K02R3u8o++BzP6sQjmWg2C
AHS3bUIOLw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:50 2025 by rpki-client