Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/s3i-mJN4ESZ4kgXs0olHi0NeaQI.roa
File: s3i-mJN4ESZ4kgXs0olHi0NeaQI.roa (raw, json)
Hash identifier: SOIZKxjm9CMkxEd513Ulup3mdzvAHyKgnCnuirEV4VQ=
Subject key identifier: B3:78:BE:98:93:78:11:26:78:92:05:EC:D2:89:47:8B:43:5E:69:02
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0183D067F272A3648E2330E3A78A5B5CDA4B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/s3i-mJN4ESZ4kgXs0olHi0NeaQI.roa
Signing time: Thu 13 Oct 2022 08:13:36 +0000
ROA not before: Thu 13 Oct 2022 08:13:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 2a12:d6c1::/32 maxlen: 32
2a12:d6c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:67:f2:72:a3:64:8e:23:30:e3:a7:8a:5b:5c:da:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 13 08:13:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b378be9893781126789205ecd289478b435e6902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:da:0c:47:50:7b:b2:a4:44:24:27:99:f8:ac:
83:30:9f:4a:38:b3:1a:01:c4:c5:25:47:09:16:1b:
88:0d:f8:bd:c1:eb:13:a1:86:f0:c3:68:b1:14:1b:
70:20:63:a5:f5:24:cc:fd:f8:f8:68:05:2c:ae:d2:
98:98:04:1a:b1:20:ed:f1:d6:97:13:58:be:03:a3:
3f:ed:b3:06:64:0d:c4:65:f0:81:4a:53:45:36:4d:
69:87:15:36:cc:bb:8c:5f:54:0b:bd:02:de:bc:3c:
81:9d:ec:ca:f6:f8:bc:9d:b4:bf:f8:3c:07:81:9b:
30:f9:c8:f6:d7:9c:18:46:ce:0d:7a:ba:87:ee:1d:
06:e1:03:52:e4:df:d9:9d:2f:37:b2:0c:34:97:6e:
ad:c6:19:5e:55:62:7b:d2:af:8b:87:59:66:a6:d4:
f5:bd:83:33:3e:d4:30:b7:17:be:ac:3a:02:98:dd:
b6:57:b1:06:9b:ac:60:69:d2:21:b0:a9:e5:1e:27:
32:df:4b:18:2a:ee:44:7b:79:56:72:85:d5:9f:be:
c1:8c:39:f8:ac:87:0a:bf:96:06:79:ac:a8:f6:a3:
73:d5:2c:72:45:42:66:37:a5:70:00:48:c9:47:a2:
eb:84:46:4f:c5:81:d7:b2:2b:22:ca:47:fc:2a:1d:
0d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:78:BE:98:93:78:11:26:78:92:05:EC:D2:89:47:8B:43:5E:69:02
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/s3i-mJN4ESZ4kgXs0olHi0NeaQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:9c:bf:a7:40:68:c1:69:e0:22:87:8c:c2:83:b0:60:2d:a4:
39:5b:1f:38:3c:e5:47:ba:18:fd:bb:f8:6f:7d:0f:54:4a:dd:
95:a3:07:dd:64:dd:ad:25:94:c6:31:53:d7:b9:b8:63:57:56:
a2:3a:44:43:70:84:93:72:c1:f8:eb:58:14:9f:29:93:e0:9a:
12:f1:a5:be:b4:c4:e6:fd:d3:53:cc:96:af:73:4d:ab:d5:e4:
62:d6:9a:75:1a:d4:29:c8:23:c8:16:d7:38:69:1b:42:d7:22:
cc:c3:4e:fb:b4:80:b3:27:2e:d8:ee:d9:2b:47:e6:1f:c9:12:
13:20:2e:b1:66:c0:50:e3:4c:e3:44:1c:69:84:29:16:bc:ec:
c6:87:8f:51:c6:91:ee:8f:7b:06:20:fe:69:ab:74:1c:e8:61:
5c:b3:e4:d3:4e:ea:d1:b6:97:f5:f0:ca:07:fc:a0:1e:c7:95:
2d:67:5e:9e:ae:33:17:26:2a:0d:c3:f9:bb:16:7f:ff:7d:d2:
24:bc:8c:07:86:76:d3:5b:9b:37:e1:57:cf:64:4f:7d:6b:50:
d0:ca:28:31:54:e0:a7:51:ad:7f:13:1e:45:43:4f:b7:dc:c1:
82:cb:62:50:c0:fa:bd:7a:94:a6:30:c7:dd:28:c9:a0:4e:0c:
a6:92:68:78
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYPQZ/Jyo2SOIzDjp4pbXNpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjIxMDEzMDgxMzM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzc4YmU5ODkzNzgxMTI2Nzg5MjA1ZWNkMjg5NDc4YjQzNWU2OTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitoMR1B7sqREJCeZ+KyDMJ9KOLMa
AcTFJUcJFhuIDfi9wesToYbww2ixFBtwIGOl9STM/fj4aAUsrtKYmAQasSDt8daX
E1i+A6M/7bMGZA3EZfCBSlNFNk1phxU2zLuMX1QLvQLevDyBnezK9vi8nbS/+DwH
gZsw+cj215wYRs4NerqH7h0G4QNS5N/ZnS83sgw0l26txhleVWJ70q+Lh1lmptT1
vYMzPtQwtxe+rDoCmN22V7EGm6xgadIhsKnlHicy30sYKu5Ee3lWcoXVn77BjDn4
rIcKv5YGeayo9qNz1SxyRUJmN6VwAEjJR6LrhEZPxYHXsisiykf8Kh0N0wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLN4vpiTeBEmeJIF7NKJR4tDXmkCMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvczNpLW1KTjRFU1o0a2dYczBvbEhpME5lYVFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLWwDAN
BgkqhkiG9w0BAQsFAAOCAQEAnJy/p0BowWngIoeMwoOwYC2kOVsfODzlR7oY/bv4
b30PVErdlaMH3WTdrSWUxjFT17m4Y1dWojpEQ3CEk3LB+OtYFJ8pk+CaEvGlvrTE
5v3TU8yWr3NNq9XkYtaadRrUKcgjyBbXOGkbQtcizMNO+7SAsycu2O7ZK0fmH8kS
EyAusWbAUONM40QcaYQpFrzsxoePUcaR7o97BiD+aat0HOhhXLPk007q0baX9fDK
B/ygHseVLWdenq4zFyYqDcP5uxZ//33SJLyMB4Z201ubN+FXz2RPfWtQ0MooMVTg
p1GtfxMeRUNPt9zBgstiUMD6vXqUpjDH3SjJoE4MppJoeA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:05:11 2025 by rpki-client