Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/d9xRDNvxin7k4HQ-sk_neqqQsow.roa
File: d9xRDNvxin7k4HQ-sk_neqqQsow.roa (raw, json)
Hash identifier: T4uD3TqoLLngn0pWzAvb6CBtMWIUqkbrfBbGjMapHHE=
Subject key identifier: 77:DC:51:0C:DB:F1:8A:7E:E4:E0:74:3E:B2:4F:E7:7A:AA:90:B2:8C
Certificate issuer: /CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Certificate serial: 0186DA2266F39D461F373258A1D892E63F88
Authority key identifier: 96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/d9xRDNvxin7k4HQ-sk_neqqQsow.roa
Signing time: Mon 13 Mar 2023 08:42:13 +0000
ROA not before: Mon 13 Mar 2023 08:42:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199700
IP address blocks: 2a13:8d80::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:22:66:f3:9d:46:1f:37:32:58:a1:d8:92:e6:3f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d95fe2d90943c92f6c28f3b329f82015cd92ae
Validity
Not Before: Mar 13 08:42:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77dc510cdbf18a7ee4e0743eb24fe77aaa90b28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:84:aa:36:4b:be:bd:30:a9:4c:e9:87:b7:36:
da:12:5f:21:cb:91:6f:aa:be:fb:f5:e5:33:ac:4d:
78:91:12:5b:0e:1f:bc:16:bd:62:bb:1f:08:ef:df:
e3:a1:7b:bb:9c:58:fe:63:86:40:3c:4b:73:56:c7:
5f:6a:cc:8f:bc:84:9b:ba:f9:bd:d9:c2:a9:1d:50:
17:b4:a6:65:d4:87:dd:55:d6:3c:db:5f:57:67:7b:
5c:67:1a:88:a0:2b:ab:b1:d8:1f:81:bb:73:02:62:
f4:58:5d:a7:79:e4:ec:fc:79:78:f7:f2:02:61:be:
bc:3f:67:ff:e1:49:f4:c9:d8:c4:98:12:04:bf:78:
a5:5f:f4:60:32:20:66:29:45:4f:eb:ad:e1:68:50:
58:c7:f4:82:af:ad:2b:d4:c8:4b:63:f7:ab:73:d5:
9c:21:b4:4c:e9:60:84:34:ec:08:8a:77:1f:56:fe:
e7:13:39:72:4a:68:2e:99:8f:5c:4f:57:0b:87:7a:
09:12:ae:03:0e:c6:0f:f4:6e:5e:d6:ce:d7:39:4d:
93:38:de:a4:42:fe:4e:d6:4d:86:90:d5:69:b7:5c:
1d:5d:e5:93:b7:4c:44:9a:1c:58:4e:aa:ce:ac:74:
a4:eb:2e:cd:57:cf:4d:71:ad:d9:ec:92:cc:9e:a2:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DC:51:0C:DB:F1:8A:7E:E4:E0:74:3E:B2:4F:E7:7A:AA:90:B2:8C
X509v3 Authority Key Identifier:
keyid:96:D9:5F:E2:D9:09:43:C9:2F:6C:28:F3:B3:29:F8:20:15:CD:92:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/d9xRDNvxin7k4HQ-sk_neqqQsow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/32cc27-9448-437b-9722-dc9b9c6013f6/1/ltlf4tkJQ8kvbCjzsyn4IBXNkq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8d80::/40
Signature Algorithm: sha256WithRSAEncryption
75:8f:8b:16:14:da:b8:bc:f7:08:1c:37:57:0a:2a:89:d0:44:
59:0a:3b:77:bb:85:e7:6d:24:16:a3:c6:13:0d:ea:09:29:30:
ee:4b:3d:29:80:6b:22:13:45:06:ab:46:ac:14:65:96:e2:6b:
08:ae:62:b1:fb:12:2a:3c:0f:47:3e:b9:bf:1c:eb:0a:98:fe:
dc:5a:4e:10:76:fc:36:1e:e6:ae:41:16:8f:95:34:75:e2:26:
91:74:5b:25:a8:40:93:35:bb:ec:24:d6:a2:91:a9:4c:05:d4:
fd:22:be:4e:0e:56:ca:44:e0:17:1c:37:6a:30:d4:b0:a6:e2:
bc:aa:01:35:8e:81:86:c5:c7:0d:3e:c8:61:ec:12:10:3b:6f:
24:3d:b9:c7:79:bf:19:81:46:72:c5:9f:f7:25:c6:19:dd:52:
bc:d3:5a:b3:c7:60:51:ae:6b:19:ed:a2:92:b2:4c:85:8d:08:
de:ad:86:24:ce:45:78:4c:5b:c7:13:70:32:0e:18:08:67:eb:
07:42:ba:69:4d:f1:44:64:87:6e:64:be:e8:40:1a:0f:15:41:
ce:8d:7b:89:8e:86:b2:6d:11:ca:04:88:b3:c1:1b:5c:fb:cc:
c0:0e:c6:5b:dd:8e:b8:b6:2b:b1:e8:62:b9:2f:ba:99:db:af:
f3:02:49:49
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYbaImbznUYfNzJYodiS5j+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZDk1ZmUyZDkwOTQzYzkyZjZjMjhmM2IzMjlmODIwMTVj
ZDkyYWUwHhcNMjMwMzEzMDg0MjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2RjNTEwY2RiZjE4YTdlZTRlMDc0M2ViMjRmZTc3YWFhOTBiMjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4SqNku+vTCpTOmHtzbaEl8hy5Fv
qr779eUzrE14kRJbDh+8Fr1iux8I79/joXu7nFj+Y4ZAPEtzVsdfasyPvISbuvm9
2cKpHVAXtKZl1IfdVdY8219XZ3tcZxqIoCursdgfgbtzAmL0WF2neeTs/Hl49/IC
Yb68P2f/4Un0ydjEmBIEv3ilX/RgMiBmKUVP663haFBYx/SCr60r1MhLY/erc9Wc
IbRM6WCENOwIincfVv7nEzlySmgumY9cT1cLh3oJEq4DDsYP9G5e1s7XOU2TON6k
Qv5O1k2GkNVpt1wdXeWTt0xEmhxYTqrOrHSk6y7NV89Nca3Z7JLMnqLdkQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFHfcUQzb8Yp+5OB0PrJP53qqkLKMMB8GA1UdIwQY
MBaAFJbZX+LZCUPJL2wo87Mp+CAVzZKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMmNjMjctOTQ0OC00MzdiLTk3MjIt
ZGM5YjljNjAxM2Y2LzEvZDl4UkROdnhpbjdrNEhRLXNrX25lcXFRc293LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zMmNjMjctOTQ0OC00MzdiLTk3MjItZGM5YjljNjAxM2Y2
LzEvbHRsZjR0a0pROGt2YkNqenN5bjRJQlhOa3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhONgAAw
DQYJKoZIhvcNAQELBQADggEBAHWPixYU2ri89wgcN1cKKonQRFkKO3e7hedtJBaj
xhMN6gkpMO5LPSmAayITRQarRqwUZZbiawiuYrH7Eio8D0c+ub8c6wqY/txaThB2
/DYe5q5BFo+VNHXiJpF0WyWoQJM1u+wk1qKRqUwF1P0ivk4OVspE4BccN2ow1LCm
4ryqATWOgYbFxw0+yGHsEhA7byQ9ucd5vxmBRnLFn/clxhndUrzTWrPHYFGuaxnt
opKyTIWNCN6thiTORXhMW8cTcDIOGAhn6wdCumlN8URkh25kvuhAGg8VQc6Ne4mO
hrJtEcoEiLPBG1z7zMAOxlvdjri2K7HoYrkvupnbr/MCSUk=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:07 2025 by rpki-client