Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oZYAxuEGkecKqz8Me1E7KEmhe_s.roa
File: oZYAxuEGkecKqz8Me1E7KEmhe_s.roa (raw, json)
Hash identifier: MnWwG85x767M/28CXqHpn/kQNbkSBLFIFoYkWvkihEM=
Subject key identifier: A1:96:00:C6:E1:06:91:E7:0A:AB:3F:0C:7B:51:3B:28:49:A1:7B:FB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0186B3CBF1DCC8819A2C620DEFA8549D2079
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oZYAxuEGkecKqz8Me1E7KEmhe_s.roa
Signing time: Sun 05 Mar 2023 22:02:12 +0000
ROA not before: Sun 05 Mar 2023 22:02:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 2a13:2b40::/29 maxlen: 29
2a0d:1140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b3:cb:f1:dc:c8:81:9a:2c:62:0d:ef:a8:54:9d:20:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 5 22:02:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a19600c6e10691e70aab3f0c7b513b2849a17bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:ad:39:32:3a:3f:8f:67:4c:78:44:23:66:
30:56:fd:7f:f4:de:37:e9:7a:9f:7d:38:29:0f:99:
7d:f1:82:9b:ba:0a:26:48:e9:cf:07:18:3f:2e:8e:
5d:10:37:b7:1d:f5:99:ea:1c:f2:80:26:f7:8a:bc:
3c:25:59:df:e7:e7:c3:cf:b3:78:75:c9:34:dd:7d:
5b:df:8a:13:1c:df:a2:b7:4c:e7:3c:35:58:52:ea:
b6:37:1c:ac:e5:ed:93:29:f8:ea:a5:61:f2:0b:9a:
c4:58:1d:80:c8:d7:16:e8:43:3e:53:41:58:29:e5:
63:99:ef:73:8f:5b:00:b4:4c:f3:6d:ca:be:59:d3:
68:01:dd:75:2e:3f:80:a4:00:dd:1a:56:ef:ac:76:
c9:ce:36:99:e5:95:56:20:18:f6:7e:00:5d:ad:c9:
53:a2:b1:b2:3c:72:75:57:7b:f1:1a:95:32:0e:cf:
d2:93:79:36:6d:41:5a:8f:c7:95:3c:8f:37:56:e8:
c8:88:87:24:33:1c:ef:2a:14:01:4d:ab:11:b8:9e:
e2:dd:86:b8:cf:70:c9:28:0a:50:b4:d0:b4:ea:f2:
29:36:d4:53:65:c8:2b:d7:b3:24:39:4c:0a:8f:8b:
d6:fa:02:60:c4:08:2f:c0:82:99:b8:77:7b:f9:74:
c9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:96:00:C6:E1:06:91:E7:0A:AB:3F:0C:7B:51:3B:28:49:A1:7B:FB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oZYAxuEGkecKqz8Me1E7KEmhe_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1140::/29
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
8d:14:da:35:d9:90:76:c6:85:41:fb:7a:5f:6a:14:ce:62:b9:
25:b4:0e:d3:72:5a:07:8a:f1:e2:99:72:11:59:2d:75:5e:8d:
9d:1f:1d:6b:15:59:08:7c:d9:58:ca:19:53:ab:b5:39:9b:5c:
46:d6:16:a3:f0:12:ac:12:6f:b1:27:f1:87:97:1c:32:3e:74:
e7:1f:0f:90:e8:22:a6:f5:13:43:b9:a0:5c:78:bf:7d:11:eb:
68:e2:de:b8:89:e2:28:25:d0:75:37:d6:48:9c:1f:34:10:a7:
b9:dc:fc:4d:d4:a4:42:ad:3e:1b:57:3a:6e:8f:c6:fd:ea:85:
ea:b0:2f:9b:b7:6d:d8:b9:53:9e:74:5d:40:12:8a:5f:77:9f:
d8:a2:29:2b:62:1a:52:f0:32:bb:04:39:21:28:b3:76:5d:25:
76:af:eb:0a:a9:ce:e4:dc:88:5d:19:80:ff:cf:e8:c4:7a:8b:
4b:bc:d2:d8:3c:18:0f:e6:ec:dc:10:96:44:e4:a4:01:76:3f:
60:99:33:d0:27:c0:fd:f0:a8:0f:f6:ae:ab:0e:fd:56:28:af:
fc:5f:7b:b6:df:d4:d8:02:ae:b9:da:4d:72:f1:a2:c5:8d:d2:
f8:fc:20:24:09:75:f0:d0:ab:53:c8:89:65:5b:76:dd:6c:e7:
9e:d5:ec:88
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYazy/HcyIGaLGIN76hUnSB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwMzA1MjIwMjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTk2MDBjNmUxMDY5MWU3MGFhYjNmMGM3YjUxM2IyODQ5YTE3YmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoytOTI6P49nTHhEI2YwVv1/9N43
6XqffTgpD5l98YKbugomSOnPBxg/Lo5dEDe3HfWZ6hzygCb3irw8JVnf5+fDz7N4
dck03X1b34oTHN+it0znPDVYUuq2Nxys5e2TKfjqpWHyC5rEWB2AyNcW6EM+U0FY
KeVjme9zj1sAtEzzbcq+WdNoAd11Lj+ApADdGlbvrHbJzjaZ5ZVWIBj2fgBdrclT
orGyPHJ1V3vxGpUyDs/Sk3k2bUFaj8eVPI83VujIiIckMxzvKhQBTasRuJ7i3Ya4
z3DJKApQtNC06vIpNtRTZcgr17MkOUwKj4vW+gJgxAgvwIKZuHd7+XTJwwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKGWAMbhBpHnCqs/DHtROyhJoXv7MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvb1pZQXh1RUdrZWNLcXo4TWUxRTdLRW1oZV9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKg0RQAMF
AyoTK0AwDQYJKoZIhvcNAQELBQADggEBAI0U2jXZkHbGhUH7el9qFM5iuSW0DtNy
WgeK8eKZchFZLXVejZ0fHWsVWQh82VjKGVOrtTmbXEbWFqPwEqwSb7En8YeXHDI+
dOcfD5DoIqb1E0O5oFx4v30R62ji3riJ4igl0HU31kicHzQQp7nc/E3UpEKtPhtX
Om6Pxv3qheqwL5u3bdi5U550XUASil93n9iiKStiGlLwMrsEOSEos3ZdJXav6wqp
zuTciF0ZgP/P6MR6i0u80tg8GA/m7NwQlkTkpAF2P2CZM9AnwP3wqA/2rqsO/VYo
r/xfe7bf1NgCrrnaTXLxosWN0vj8ICQJdfDQq1PIiWVbdt1s557V7Ig=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:15:01 2025 by rpki-client