Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wuGmsIKbFXrsLJfKZ2QAdDHcHQo.roa
File: wuGmsIKbFXrsLJfKZ2QAdDHcHQo.roa (raw, json)
Hash identifier: e+PeqQDfKFI5anBTXXO/Se/CHeJBonm+4CFMtFJ8UJ0=
Subject key identifier: C2:E1:A6:B0:82:9B:15:7A:EC:2C:97:CA:67:64:00:74:31:DC:1D:0A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018ABD7245A1F6E5910A2A177C9692DA1958
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wuGmsIKbFXrsLJfKZ2QAdDHcHQo.roa
Signing time: Fri 22 Sep 2023 15:11:37 +0000
ROA not before: Fri 22 Sep 2023 15:11:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198231
IP address blocks: 2a13:d902::/32 maxlen: 32
2a13:2dc5::/32 maxlen: 32
2a13:2d41::/32 maxlen: 32
2a13:2d42::/32 maxlen: 32
2a13:d901::/32 maxlen: 32
2a13:2dc4::/32 maxlen: 32
2a13:2d43::/32 maxlen: 32
2a13:2dc7::/32 maxlen: 32
2a13:d900::/32 maxlen: 32
2a06:35c4::/30 maxlen: 30
2a13:d903::/32 maxlen: 32
2a13:2d40::/32 maxlen: 32
2a13:2d46::/32 maxlen: 32
2a13:2d45::/32 maxlen: 32
2a13:2dc1::/32 maxlen: 32
2a13:2dc2::/32 maxlen: 32
2a13:d906::/32 maxlen: 32
2a13:2d44::/32 maxlen: 32
2a13:d907::/32 maxlen: 32
2a13:d904::/32 maxlen: 32
2a06:35c0::/30 maxlen: 30
2a13:d700::/29 maxlen: 29
2a13:2d47::/32 maxlen: 32
2a13:2dc6::/32 maxlen: 32
2a13:d905::/32 maxlen: 32
2a13:2dc0::/32 maxlen: 32
2a13:2dc3::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bd:72:45:a1:f6:e5:91:0a:2a:17:7c:96:92:da:19:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 22 15:11:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2e1a6b0829b157aec2c97ca6764007431dc1d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:14:29:25:35:67:79:ca:94:e7:d8:64:a5:
22:ba:8c:bd:bb:ce:30:99:15:2d:33:88:51:70:8b:
77:a3:4f:72:26:4e:cd:6a:5b:96:fb:02:ca:3a:f1:
0a:ca:6f:a2:b4:2a:b6:c1:9f:2c:de:a5:e5:2a:3e:
7b:62:7b:6d:6f:e3:a4:a6:dc:64:ec:94:01:84:ff:
9c:40:5f:0e:96:83:4d:a9:53:78:e5:ce:60:b7:72:
95:fc:3b:41:d3:e9:9b:d1:d9:1b:d7:3b:ad:d9:1d:
81:4a:7b:29:f4:e6:39:0d:41:c1:c2:e5:34:df:8b:
17:bd:ca:72:6e:bf:ca:ec:c3:78:ce:92:03:e2:7a:
40:03:12:1d:f0:b5:ef:47:8e:48:63:68:b2:ba:6b:
f5:9d:2f:7c:7b:81:1a:8f:e2:58:7c:60:9f:c1:ad:
b3:0f:b3:68:63:5e:5a:70:45:6a:6d:4d:09:d0:2f:
84:c4:ff:ef:78:82:3a:31:18:c5:b1:90:fe:a3:8c:
ec:fa:1e:87:27:d6:88:4f:cd:9b:14:6b:d9:9f:e7:
37:ac:db:82:cc:66:8e:cb:c1:3f:55:ab:f9:32:29:
68:aa:db:59:af:b8:b4:e2:31:10:e6:0f:b9:7e:0e:
58:e5:84:c7:cc:c5:6f:c3:44:bc:67:a3:2c:db:b3:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E1:A6:B0:82:9B:15:7A:EC:2C:97:CA:67:64:00:74:31:DC:1D:0A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wuGmsIKbFXrsLJfKZ2QAdDHcHQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:35c0::/29
2a13:2d40::/29
2a13:2dc0::/29
2a13:d700::/29
2a13:d900::/29
Signature Algorithm: sha256WithRSAEncryption
a2:af:4e:fd:5c:58:96:fc:f5:19:d3:2a:38:b7:33:ca:4f:cd:
09:d6:dc:0d:2d:f6:cf:80:1f:d0:21:f6:3c:37:4e:f7:67:3a:
fb:e3:e0:3a:d3:66:40:3e:37:12:32:d1:8e:c0:18:79:b9:3f:
2a:69:6d:2c:6e:bd:c4:28:a0:b5:62:19:62:bf:5f:3a:29:94:
ee:b1:99:61:80:d6:99:43:95:a5:e1:e0:2d:62:c1:e5:07:ba:
6b:3f:e7:b1:4c:f9:ba:37:18:e3:a2:a0:2d:8e:56:fe:b9:e4:
77:72:28:5f:a3:46:74:f7:2f:86:71:32:50:7a:00:96:9a:f4:
0b:2a:08:1e:9b:ee:00:e2:5e:5d:33:bc:c0:96:27:43:82:1a:
e3:f5:b5:40:0d:54:89:45:21:8a:42:80:a2:66:00:4f:63:9d:
18:b5:04:d9:60:1a:55:77:91:2b:a1:95:cd:f1:10:70:a7:70:
5a:9a:7e:02:f3:a9:13:c7:79:c6:76:ea:2d:34:fa:8b:5c:8b:
bf:d1:29:55:3a:8b:f4:65:d7:d8:f4:09:f1:45:f4:99:54:46:
2b:98:79:33:3d:60:b3:38:fc:56:2f:a5:3f:ff:c7:8f:3a:14:
70:bf:91:47:71:0a:50:2f:32:24:99:82:f5:f5:e5:94:89:d0:
43:6c:e9:e2
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYq9ckWh9uWRCioXfJaS2hlYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwOTIyMTUxMTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmUxYTZiMDgyOWIxNTdhZWMyYzk3Y2E2NzY0MDA3NDMxZGMxZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q4UKSU1Z3nKlOfYZKUiuoy9u84w
mRUtM4hRcIt3o09yJk7NaluW+wLKOvEKym+itCq2wZ8s3qXlKj57Ynttb+Okptxk
7JQBhP+cQF8OloNNqVN45c5gt3KV/DtB0+mb0dkb1zut2R2BSnsp9OY5DUHBwuU0
34sXvcpybr/K7MN4zpID4npAAxId8LXvR45IY2iyumv1nS98e4Eaj+JYfGCfwa2z
D7NoY15acEVqbU0J0C+ExP/veII6MRjFsZD+o4zs+h6HJ9aIT82bFGvZn+c3rNuC
zGaOy8E/Vav5MiloqttZr7i04jEQ5g+5fg5Y5YTHzMVvw0S8Z6Ms27OaUwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFMLhprCCmxV67CyXymdkAHQx3B0KMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvd3VHbXNJS2JGWHJzTEpmS1oyUUFkREhjSFFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUDKgY1wAMF
AyoTLUADBQMqEy3AAwUDKhPXAAMFAyoT2QAwDQYJKoZIhvcNAQELBQADggEBAKKv
Tv1cWJb89RnTKji3M8pPzQnW3A0t9s+AH9Ah9jw3TvdnOvvj4DrTZkA+NxIy0Y7A
GHm5PyppbSxuvcQooLViGWK/XzoplO6xmWGA1plDlaXh4C1iweUHums/57FM+bo3
GOOioC2OVv655HdyKF+jRnT3L4ZxMlB6AJaa9AsqCB6b7gDiXl0zvMCWJ0OCGuP1
tUANVIlFIYpCgKJmAE9jnRi1BNlgGlV3kSuhlc3xEHCncFqafgLzqRPHecZ26i00
+otci7/RKVU6i/Rl19j0CfFF9JlURiuYeTM9YLM4/FYvpT//x486FHC/kUdxClAv
MiSZgvX15ZSJ0ENs6eI=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:35 2025 by rpki-client