Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mAQK6gi3gcaPEDsu8Bgs3-vSGPs.roa
File: mAQK6gi3gcaPEDsu8Bgs3-vSGPs.roa (raw, json)
Hash identifier: aXwsLC3CKP0re6HwdP8fngkMIocWysQl1W6tnXfBsAE=
Subject key identifier: 98:04:0A:EA:08:B7:81:C6:8F:10:3B:2E:F0:18:2C:DF:EB:D2:18:FB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01880A525D36C8436CE8EC00D81FB508773B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mAQK6gi3gcaPEDsu8Bgs3-vSGPs.roa
Signing time: Thu 11 May 2023 10:19:09 +0000
ROA not before: Thu 11 May 2023 10:19:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 395954
IP address blocks: 2a0f:e847:ffff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:52:5d:36:c8:43:6c:e8:ec:00:d8:1f:b5:08:77:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 11 10:19:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98040aea08b781c68f103b2ef0182cdfebd218fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5e:d6:42:e3:12:fe:22:0a:10:4e:96:ac:bd:
97:70:fb:95:34:78:ec:9a:c7:7f:ae:54:5d:9f:6d:
4d:dc:57:4d:ea:fe:c7:bf:f8:f3:7a:1a:b7:0a:53:
e3:d3:c4:b6:d8:2d:f7:8b:c3:9a:7d:de:da:47:9b:
f1:f3:d9:b6:bb:db:91:27:f8:db:a2:b4:5a:18:86:
8c:b3:ca:b4:41:f4:0a:dc:6c:23:d0:8a:8c:3b:c7:
75:f6:ed:77:2a:22:c9:a9:e5:5c:2f:a4:da:cb:15:
ea:5a:93:94:3c:c4:3e:26:f2:33:16:b4:05:03:b8:
ad:70:e9:de:ba:be:ce:7d:55:f1:c4:81:04:df:e6:
11:39:41:b3:60:4b:e5:50:c6:de:a4:31:5f:83:c3:
05:1a:95:d3:1f:86:5e:7e:39:85:3e:fe:52:d4:f7:
dc:d5:f7:d9:43:57:f2:1c:09:8a:82:33:0c:53:69:
3b:74:4f:48:9f:b5:91:58:4d:3f:f1:34:3a:a5:ca:
14:21:80:87:c8:ca:79:38:2e:31:14:b9:e7:fa:cd:
82:2c:81:c6:c7:04:bf:8e:09:68:9d:50:d9:ad:4e:
5e:34:a5:50:34:b3:e4:20:d1:44:fa:e2:87:d5:f5:
53:97:e7:d3:33:46:58:43:91:0c:29:bc:da:ec:15:
31:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:04:0A:EA:08:B7:81:C6:8F:10:3B:2E:F0:18:2C:DF:EB:D2:18:FB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mAQK6gi3gcaPEDsu8Bgs3-vSGPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e847:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
cd:a0:51:50:ec:a5:26:a0:07:b4:c3:0f:d6:58:93:7b:16:02:
e8:00:b3:e1:88:e5:9d:4f:1a:6e:f7:d2:72:5c:12:b2:ea:ef:
f5:6e:76:55:2f:fb:5f:3d:bf:a0:34:5b:d0:63:56:09:02:03:
92:d9:db:f1:aa:8f:e5:b8:b5:a2:bf:b2:d6:f8:fb:0f:3a:33:
8c:9a:82:d9:ff:66:7c:67:5d:4a:a7:cc:9f:e3:6b:11:36:2b:
cf:6e:a3:59:91:54:77:aa:5e:c6:ef:39:56:63:f9:46:42:d7:
32:55:a2:30:f4:fd:e8:a1:21:3b:ec:b2:f5:58:51:75:15:e3:
f4:e9:17:79:7b:d5:7f:49:ca:5f:34:65:8e:45:1c:03:14:ac:
34:3b:7c:26:45:c9:e2:51:3f:6d:db:81:19:b8:e6:d1:ec:bc:
a2:95:51:18:82:c3:4b:0e:92:d0:03:a6:4d:56:11:56:ce:5f:
63:31:c9:59:4d:e8:da:6d:6a:0f:38:46:88:69:af:75:06:94:
19:dd:af:00:2e:04:81:99:3b:8b:28:56:dd:2d:da:96:64:cf:
ed:6d:85:65:d8:05:42:f4:94:11:68:e8:10:02:3d:87:40:ad:
4a:e1:90:c2:6d:55:ae:92:bd:41:55:2e:bf:42:8f:b1:20:64:
bb:95:7d:7e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYgKUl02yENs6OwA2B+1CHc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwNTExMTAxOTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODA0MGFlYTA4Yjc4MWM2OGYxMDNiMmVmMDE4MmNkZmViZDIxOGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V7WQuMS/iIKEE6WrL2XcPuVNHjs
msd/rlRdn21N3FdN6v7Hv/jzehq3ClPj08S22C33i8Oafd7aR5vx89m2u9uRJ/jb
orRaGIaMs8q0QfQK3Gwj0IqMO8d19u13KiLJqeVcL6TayxXqWpOUPMQ+JvIzFrQF
A7itcOneur7OfVXxxIEE3+YROUGzYEvlUMbepDFfg8MFGpXTH4ZefjmFPv5S1Pfc
1ffZQ1fyHAmKgjMMU2k7dE9In7WRWE0/8TQ6pcoUIYCHyMp5OC4xFLnn+s2CLIHG
xwS/jglonVDZrU5eNKVQNLPkINFE+uKH1fVTl+fTM0ZYQ5EMKbza7BUxbwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJgECuoIt4HGjxA7LvAYLN/r0hj7MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvbUFRSzZnaTNnY2FQRURzdThCZ3MzLXZTR1BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg/oR///
MA0GCSqGSIb3DQEBCwUAA4IBAQDNoFFQ7KUmoAe0ww/WWJN7FgLoALPhiOWdTxpu
99JyXBKy6u/1bnZVL/tfPb+gNFvQY1YJAgOS2dvxqo/luLWiv7LW+PsPOjOMmoLZ
/2Z8Z11Kp8yf42sRNivPbqNZkVR3ql7G7zlWY/lGQtcyVaIw9P3ooSE77LL1WFF1
FeP06Rd5e9V/ScpfNGWORRwDFKw0O3wmRcniUT9t24EZuObR7LyilVEYgsNLDpLQ
A6ZNVhFWzl9jMclZTejabWoPOEaIaa91BpQZ3a8ALgSBmTuLKFbdLdqWZM/tbYVl
2AVC9JQRaOgQAj2HQK1K4ZDCbVWukr1BVS6/Qo+xIGS7lX1+
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:56 2025 by rpki-client