Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/8wjcuSVB_iX46vK3xfprUzfFXWw.roa
File: 8wjcuSVB_iX46vK3xfprUzfFXWw.roa (raw, json)
Hash identifier: tMRQ7H6Fo/BSMAXNENAoyZhoJuKhe8iuRTM5jIqrfUY=
Subject key identifier: F3:08:DC:B9:25:41:FE:25:F8:EA:F2:B7:C5:FA:6B:53:37:C5:5D:6C
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 033B78
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/8wjcuSVB_iX46vK3xfprUzfFXWw.roa
Signing time: Fri 06 May 2022 06:56:03 +0000
ROA not before: Fri 06 May 2022 06:56:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57602
IP address blocks: 2001:67c:240c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211832 (0x33b78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: May 6 06:56:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f308dcb92541fe25f8eaf2b7c5fa6b5337c55d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7e:77:64:6a:54:39:09:c0:1b:e6:75:07:a5:
c5:98:bd:97:65:1c:08:db:7e:63:af:93:f2:bb:6a:
cb:04:ac:5a:54:af:05:5d:3a:34:92:58:81:cc:28:
03:02:42:6c:01:ce:0f:f3:15:5b:84:02:a3:35:09:
2a:9e:45:32:b9:2d:40:ef:00:03:c1:59:7a:72:41:
ba:c0:c2:f9:8a:98:a7:2e:db:1e:96:e0:4c:dc:da:
f6:3d:4b:a0:a3:09:25:c3:ff:0a:ae:54:ee:9d:f6:
29:2b:e4:a1:37:38:b9:76:5d:3f:34:ed:ae:4b:c7:
6e:46:38:80:17:99:8a:9e:1f:59:55:1e:b3:42:a6:
32:78:6c:67:74:d4:09:dc:b2:b2:6b:48:25:be:05:
8d:2d:85:29:73:be:d8:20:27:c2:1d:61:3f:8f:81:
f9:e0:54:3a:e9:a5:6f:53:cb:41:18:9b:f6:89:75:
8a:09:73:ba:e9:d7:22:df:b2:79:0a:7b:7e:b8:50:
dd:52:51:c0:86:23:79:a2:94:8e:a6:d0:a0:85:23:
8e:f1:84:6b:93:6c:21:8f:c8:de:fd:eb:92:c1:7d:
5e:d1:06:d7:62:17:49:19:05:51:78:9c:79:28:4a:
4b:e2:83:9b:44:6c:19:27:d3:ad:33:0a:a0:25:d6:
d9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:08:DC:B9:25:41:FE:25:F8:EA:F2:B7:C5:FA:6B:53:37:C5:5D:6C
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/8wjcuSVB_iX46vK3xfprUzfFXWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:240c::/48
Signature Algorithm: sha256WithRSAEncryption
74:40:11:9f:8d:57:63:22:54:cd:34:2b:b6:b1:5f:bd:db:9a:
f1:be:3c:69:c3:56:6e:6e:a6:4c:45:48:74:62:e4:3a:12:7d:
82:da:1d:84:da:61:fd:5f:74:4f:85:ff:da:0b:03:41:bf:31:
a6:9e:5e:2e:b6:0d:fb:2e:92:ae:c2:56:57:cc:13:6b:36:78:
3b:81:0e:8f:fc:17:15:f8:f1:fc:ff:f2:6e:29:90:18:af:4d:
e6:60:26:2b:4e:47:f2:43:75:15:88:94:7f:97:fa:65:9a:f4:
d8:f2:86:d9:89:3a:f3:d4:32:00:56:82:0c:f9:d6:06:8f:bc:
96:c3:28:b2:19:0b:c5:7b:d1:4d:8c:b1:a9:58:1d:7e:40:2d:
ee:88:59:93:5c:14:c6:3e:63:26:36:65:25:b0:93:5a:cc:4a:
12:49:f9:8d:d5:38:30:aa:a9:45:40:68:2a:e5:31:61:a8:26:
5b:a9:e5:b4:96:79:01:0f:97:76:72:a7:f5:19:ed:75:d4:3c:
1a:2e:15:81:29:30:8b:ec:89:b0:dc:1c:67:19:00:12:64:8e:
0c:c7:66:db:c2:18:1c:ae:95:11:71:75:92:fb:ec:8f:9d:2f:
9c:56:31:e6:18:8d:09:2a:0b:93:b9:40:be:4b:5c:0a:93:a1:
37:78:5d:e7
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIDAzt4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY0
NWU3OTE0MTEzMGNlZWM4NTcyMTVmOWJiZGQ3YTU1YmFmNGU3N2YwHhcNMjIwNTA2
MDY1NjAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmMzA4ZGNiOTI1NDFm
ZTI1ZjhlYWYyYjdjNWZhNmI1MzM3YzU1ZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA7H53ZGpUOQnAG+Z1B6XFmL2XZRwI235jr5Pyu2rLBKxaVK8F
XTo0kliBzCgDAkJsAc4P8xVbhAKjNQkqnkUyuS1A7wADwVl6ckG6wML5ipinLtse
luBM3Nr2PUugowklw/8KrlTunfYpK+ShNzi5dl0/NO2uS8duRjiAF5mKnh9ZVR6z
QqYyeGxndNQJ3LKya0glvgWNLYUpc77YICfCHWE/j4H54FQ66aVvU8tBGJv2iXWK
CXO66dci37J5Cnt+uFDdUlHAhiN5opSOptCghSOO8YRrk2whj8je/euSwX1e0QbX
YhdJGQVReJx5KEpL4oObRGwZJ9OtMwqgJdbZWQIDAQABo4ICDDCCAggwHQYDVR0O
BBYEFPMI3LklQf4l+Oryt8X6a1M3xV1sMB8GA1UdIwQYMBaAFPReeRQRMM7shXIV
+bvdelW69Od/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
OUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2UtMzNiZDg0MzQ5NWY4LzEv
OHdqY3VTVkJfaVg0NnZLM3hmcHJVemZGWFd3LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9l
YzFiNTktOWUwYS00YWQzLTk3N2UtMzNiZDg0MzQ5NWY4LzEvOUY1NUZCRXd6dXlG
Y2hYNXU5MTZWYnIwNTM4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIG
CCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCQMMA0GCSqGSIb3DQEBCwUA
A4IBAQB0QBGfjVdjIlTNNCu2sV+925rxvjxpw1ZubqZMRUh0YuQ6En2C2h2E2mH9
X3RPhf/aCwNBvzGmnl4utg37LpKuwlZXzBNrNng7gQ6P/BcV+PH8//JuKZAYr03m
YCYrTkfyQ3UViJR/l/plmvTY8obZiTrz1DIAVoIM+dYGj7yWwyiyGQvFe9FNjLGp
WB1+QC3uiFmTXBTGPmMmNmUlsJNazEoSSfmN1TgwqqlFQGgq5TFhqCZbqeW0lnkB
D5d2cqf1Ge111DwaLhWBKTCL7Imw3BxnGQASZI4Mx2bbwhgcrpURcXWS++yPnS+c
VjHmGI0JKguTuUC+S1wKk6E3eF3n
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:04:03 2025 by rpki-client