Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/P6DM_U4seU1tVEsMXXtFyEqc1-Q.roa
File: P6DM_U4seU1tVEsMXXtFyEqc1-Q.roa (raw, json)
Hash identifier: mEP0tIfgPkIFKgiQj7vDmI2zY6GH64MOZx4zzIJQgNI=
Subject key identifier: 3F:A0:CC:FD:4E:2C:79:4D:6D:54:4B:0C:5D:7B:45:C8:4A:9C:D7:E4
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 018BA614170B45EFB1A23D0135F842C078E6
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/P6DM_U4seU1tVEsMXXtFyEqc1-Q.roa
Signing time: Mon 06 Nov 2023 19:20:16 +0000
ROA not before: Mon 06 Nov 2023 19:20:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197706
IP address blocks: 2a0d:4941::/32 maxlen: 48
2a0d:4943::/32 maxlen: 48
2a0d:4947::/32 maxlen: 32
2a0d:4940::/29 maxlen: 48
2a0d:4944::/32 maxlen: 48
2a0e:abc0::/29 maxlen: 48
2a0d:1dc0::/29 maxlen: 48
2a0f:4780::/29 maxlen: 48
2a0d:4946::/32 maxlen: 48
2a0d:4945::/32 maxlen: 48
2a0d:4942::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a6:14:17:0b:45:ef:b1:a2:3d:01:35:f8:42:c0:78:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Nov 6 19:20:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fa0ccfd4e2c794d6d544b0c5d7b45c84a9cd7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:ff:15:a6:8e:7e:49:6d:c7:8a:06:1f:67:
1f:72:09:20:d4:80:a7:0f:19:33:57:e5:1c:50:24:
ac:1c:57:1f:37:59:eb:a9:ce:03:d7:d3:0c:67:8d:
5c:24:a5:ab:c2:b2:1c:22:5e:f5:28:de:ab:50:e4:
67:ce:34:86:9a:b4:f0:0b:ec:40:50:2d:09:ff:b6:
08:38:90:13:67:50:c3:dc:0d:12:3b:e8:de:7f:18:
f0:9e:a5:32:e3:0d:2b:bc:50:7d:19:4e:ed:01:47:
fc:23:8f:67:11:7f:6f:bb:7f:4b:03:3b:01:d3:fa:
5d:1f:c5:d6:be:98:dc:0a:9b:27:34:f4:ae:e6:30:
ed:a9:7e:32:67:c7:9c:e7:64:22:77:4b:c8:db:1a:
a6:db:09:22:cb:0f:85:ce:e8:db:11:7f:45:86:1b:
5d:1e:d2:ed:a3:19:af:ef:c5:7a:af:33:30:f9:1c:
83:34:9e:52:c9:8e:68:f4:82:1a:c6:89:2b:fd:ee:
4e:06:ee:bb:d1:cc:0a:23:f2:40:48:f3:a1:02:84:
57:36:a9:c2:7f:5b:0c:f6:1e:a5:18:df:34:17:6c:
c8:a8:b2:b4:c0:a4:cb:c9:e2:9b:01:66:f4:06:61:
36:fa:0f:a0:73:df:a2:c3:c3:13:00:3b:9d:74:f6:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A0:CC:FD:4E:2C:79:4D:6D:54:4B:0C:5D:7B:45:C8:4A:9C:D7:E4
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/P6DM_U4seU1tVEsMXXtFyEqc1-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1dc0::/29
2a0d:4940::/29
2a0e:abc0::/29
2a0f:4780::/29
Signature Algorithm: sha256WithRSAEncryption
a2:77:94:60:56:4f:88:9e:9c:59:52:45:7d:a0:9b:ff:3e:c7:
f7:83:94:c0:a9:4f:1c:d8:b2:78:87:8d:e4:2e:53:90:93:6c:
8b:4a:fc:db:1a:a8:1d:b4:33:be:ce:aa:f4:6e:1e:fb:ab:1b:
7a:a5:47:01:9f:d3:d3:c9:b5:0d:ae:b2:e0:de:b0:71:c1:0a:
f7:4e:b1:10:85:89:2f:68:98:e7:6b:c4:9f:2b:51:bb:33:07:
e8:15:c4:3e:bf:77:83:96:a4:c7:05:79:d9:20:7b:98:d7:24:
fc:77:9c:0a:2b:fb:80:07:94:b6:ab:bf:78:aa:9b:4f:71:dc:
47:94:87:95:fe:51:ad:07:27:eb:59:a4:5b:dd:d9:69:da:20:
4e:41:87:b1:33:a8:9e:33:44:5a:fe:ef:e4:20:69:f0:97:f9:
05:6c:9c:92:66:fb:d7:4e:13:5f:d2:46:5e:5f:46:26:ab:e9:
8b:28:8f:0f:a0:e0:96:45:69:c9:97:61:3e:08:6a:0d:12:9f:
73:c6:69:f4:80:f5:4b:74:e7:94:53:3d:72:a1:b7:19:fb:be:
81:c5:17:a4:55:f6:13:55:c5:67:c8:55:48:1b:84:ee:70:61:
1f:d0:d2:a3:2c:ff:6b:39:2a:f7:76:4b:59:ad:54:ad:3f:2f:
56:cd:13:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:22:43 2025 by rpki-client