Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/F67xodOPjJt6v0tQaj92yed-vCU.roa
File: F67xodOPjJt6v0tQaj92yed-vCU.roa (raw, json)
Hash identifier: 8hC5eC4AOXgUC0OLRKjFAQoN6dvJsSoa9NbnOxyh04I=
Subject key identifier: 17:AE:F1:A1:D3:8F:8C:9B:7A:BF:4B:50:6A:3F:76:C9:E7:7E:BC:25
Certificate issuer: /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial: 01853FAFC41B0F448075996E874D70A5B442
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/F67xodOPjJt6v0tQaj92yed-vCU.roa
Signing time: Fri 23 Dec 2022 15:52:41 +0000
ROA not before: Fri 23 Dec 2022 15:52:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200305
IP address blocks: 2001:67c:b4c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3f:af:c4:1b:0f:44:80:75:99:6e:87:4d:70:a5:b4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Validity
Not Before: Dec 23 15:52:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17aef1a1d38f8c9b7abf4b506a3f76c9e77ebc25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c2:72:2b:2e:55:2d:6f:e2:d6:17:fc:2a:7c:
75:f7:ee:73:4d:db:5d:b6:d9:e4:6a:b7:4b:de:a4:
9f:fb:32:e6:52:33:73:03:55:0c:eb:b7:42:61:75:
6d:ca:09:78:6d:6a:4a:3a:c8:b7:a1:8d:b9:06:cc:
9e:00:3e:45:67:24:4b:88:8b:12:04:c6:27:a8:ef:
59:1e:17:7d:71:85:f2:4a:dd:72:19:18:aa:a1:71:
19:18:b9:1e:dc:73:38:bf:bc:da:ab:57:b3:67:f1:
5e:1f:ee:a6:b1:df:3d:56:d3:28:f4:cd:19:25:7f:
95:a6:44:bd:b4:92:f9:2b:bf:b1:fc:4d:32:7a:98:
36:26:1d:6d:5c:5c:cf:03:e7:31:85:a9:9e:a6:d8:
cd:02:46:d1:80:e1:51:ae:47:9d:d4:f3:a4:5e:e4:
e2:56:97:19:39:26:64:17:91:2f:9e:b0:30:86:a4:
c1:83:c0:d3:bc:d4:cf:9d:90:92:29:5c:f9:de:ca:
cf:89:8c:33:57:81:fd:bb:df:38:89:97:31:ae:5f:
97:ce:f3:61:81:c9:1f:ee:c4:09:2a:97:8c:cb:2b:
7c:c0:ab:36:47:79:0d:45:e9:8f:2d:54:2c:aa:eb:
83:34:0d:76:3f:b5:20:73:a8:f6:be:94:43:e6:c7:
7a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AE:F1:A1:D3:8F:8C:9B:7A:BF:4B:50:6A:3F:76:C9:E7:7E:BC:25
X509v3 Authority Key Identifier:
keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/F67xodOPjJt6v0tQaj92yed-vCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b4c::/48
Signature Algorithm: sha256WithRSAEncryption
a1:f0:12:22:41:0b:4d:ac:7f:60:db:b8:cd:70:88:eb:7d:43:
93:f7:83:b4:94:9b:63:69:ac:57:db:c6:b6:ed:a4:d3:fe:91:
23:bb:43:7b:95:2c:0f:0d:d6:6f:c1:43:17:d4:0f:5d:f7:16:
e3:a1:a7:53:bb:63:2f:b2:a2:79:ce:6d:11:11:cc:c2:f6:67:
24:b2:6f:4f:25:29:73:0c:96:57:5e:83:aa:a4:28:01:78:76:
ae:88:09:08:08:0b:13:b7:ae:be:a9:5e:6a:d4:0f:bd:c2:0d:
d5:ad:d1:04:b1:95:e1:06:cf:64:69:cc:87:b7:5e:b2:4b:76:
70:f9:24:1c:d8:70:79:28:c8:68:c7:41:9c:bb:5c:b6:3d:fc:
e5:ca:1c:a6:52:81:64:17:47:18:c2:a8:78:4f:9d:4f:37:dd:
98:78:74:98:6f:4e:29:ea:e4:74:56:44:56:79:cc:60:03:c6:
88:95:2b:fb:30:ee:0e:c3:c6:aa:89:e5:c8:03:e5:b6:ea:84:
bd:a4:7a:90:5d:2f:5d:fc:64:11:35:e7:f6:b8:2d:ee:d8:cb:
44:9b:9f:70:fc:74:fa:e3:e5:db:1f:4d:b5:da:07:a2:7d:12:
31:59:48:7c:c0:7b:30:ff:04:30:a8:ab:f9:fb:aa:8d:6a:c8:
2a:80:eb:62
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYU/r8QbD0SAdZluh01wpbRCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZTI1MzRkZjUwOWM5NmVjYjgxMWJjODVkNzZkNjJiYWFk
ZjNkMjkwHhcNMjIxMjIzMTU1MjQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2FlZjFhMWQzOGY4YzliN2FiZjRiNTA2YTNmNzZjOWU3N2ViYzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sJyKy5VLW/i1hf8Knx19+5zTdtd
ttnkardL3qSf+zLmUjNzA1UM67dCYXVtygl4bWpKOsi3oY25BsyeAD5FZyRLiIsS
BMYnqO9ZHhd9cYXySt1yGRiqoXEZGLke3HM4v7zaq1ezZ/FeH+6msd89VtMo9M0Z
JX+VpkS9tJL5K7+x/E0yepg2Jh1tXFzPA+cxhameptjNAkbRgOFRrked1POkXuTi
VpcZOSZkF5EvnrAwhqTBg8DTvNTPnZCSKVz53srPiYwzV4H9u984iZcxrl+XzvNh
gckf7sQJKpeMyyt8wKs2R3kNRemPLVQsquuDNA12P7Ugc6j2vpRD5sd6QQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBeu8aHTj4yber9LUGo/dsnnfrwlMB8GA1UdIwQY
MBaAFJriU031Ccluy4EbyF121iuq3z0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ZjVkYzItMzBjYi00YzBjLWFhNjIt
ODIyNjUyNGU0YWNmLzEvRjY3eG9kT1BqSnQ2djB0UWFqOTJ5ZWQtdkNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82ZjVkYzItMzBjYi00YzBjLWFhNjItODIyNjUyNGU0YWNm
LzEvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAtM
MA0GCSqGSIb3DQEBCwUAA4IBAQCh8BIiQQtNrH9g27jNcIjrfUOT94O0lJtjaaxX
28a27aTT/pEju0N7lSwPDdZvwUMX1A9d9xbjoadTu2MvsqJ5zm0REczC9mcksm9P
JSlzDJZXXoOqpCgBeHauiAkICAsTt66+qV5q1A+9wg3VrdEEsZXhBs9kacyHt16y
S3Zw+SQc2HB5KMhox0Gcu1y2PfzlyhymUoFkF0cYwqh4T51PN92YeHSYb04p6uR0
VkRWecxgA8aIlSv7MO4Ow8aqieXIA+W26oS9pHqQXS9d/GQRNef2uC3u2MtEm59w
/HT64+XbH0212geifRIxWUh8wHsw/wQwqKv5+6qNasgqgOti
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:16 2025 by rpki-client