Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/WabOw_G89QfR21DlqreXX0TSgdE.roa
File: WabOw_G89QfR21DlqreXX0TSgdE.roa (raw, json)
Hash identifier: BtsFeqJcK5PcMiUVysXXyDkQwuy9Xu5UyoDZmDt7n/c=
Subject key identifier: 59:A6:CE:C3:F1:BC:F5:07:D1:DB:50:E5:AA:B7:97:5F:44:D2:81:D1
Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial: 01856EEFFE719CD8D64A78E3E1EA2C8FDBAD
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/WabOw_G89QfR21DlqreXX0TSgdE.roa
Signing time: Sun 01 Jan 2023 20:04:59 +0000
ROA not before: Sun 01 Jan 2023 20:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 2a10:7080::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:fe:71:9c:d8:d6:4a:78:e3:e1:ea:2c:8f:db:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
Validity
Not Before: Jan 1 20:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59a6cec3f1bcf507d1db50e5aab7975f44d281d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:45:21:c5:e0:96:6d:41:99:2a:65:18:74:38:
e9:54:b7:d6:3d:e3:60:20:c8:11:7a:50:2e:27:83:
42:a2:9c:0f:8d:57:05:a4:79:e3:30:74:5f:50:6f:
3a:1e:d2:af:f7:b5:09:79:a6:e1:7b:52:70:50:00:
1a:79:62:9c:be:f0:45:9b:ca:7a:e4:6d:2f:1f:c4:
ff:d6:1d:40:ce:cc:ac:c2:f6:86:be:25:5a:c8:48:
94:c0:0c:36:c9:96:ce:e5:74:ff:7e:8b:2f:a9:c6:
fe:ba:66:dc:80:b7:2b:b4:1c:5b:f9:b8:c8:99:46:
4d:cb:b8:5d:f0:e5:d5:28:8d:b2:1d:1a:e7:ba:aa:
00:f4:60:0e:64:f1:65:6a:b1:11:16:b1:9b:d4:2b:
b7:05:cc:ed:bd:10:fe:cc:78:4f:80:d6:a1:c7:66:
e8:1a:3e:bb:55:24:a9:e7:79:e7:6f:80:8f:2f:c3:
d9:64:53:fe:00:4c:32:4b:f1:57:de:e5:2e:72:c2:
31:52:d4:26:80:5f:b4:c1:6d:d4:95:56:23:ec:e5:
b9:4c:c6:de:6d:7f:92:6f:a1:32:ba:98:94:66:83:
1a:46:51:a0:b7:b3:b0:47:b6:4e:40:ae:d2:5a:93:
8e:85:ad:88:54:36:df:40:0f:41:07:67:5e:bb:9e:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A6:CE:C3:F1:BC:F5:07:D1:DB:50:E5:AA:B7:97:5F:44:D2:81:D1
X509v3 Authority Key Identifier:
keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/WabOw_G89QfR21DlqreXX0TSgdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:7080::/29
Signature Algorithm: sha256WithRSAEncryption
05:75:22:2b:09:8f:1e:58:6f:ec:d8:2e:f2:17:00:10:f0:1e:
d2:af:b4:65:39:28:2b:26:3c:90:ee:7b:9b:1e:cf:71:6e:b9:
a1:37:65:2c:f8:7c:19:95:39:1a:80:b8:19:71:d2:b0:53:72:
da:38:32:6d:15:a6:ee:42:47:e0:b8:db:c0:ec:ff:06:68:72:
e4:14:03:90:f1:4f:71:de:99:cd:43:80:25:9f:b5:ab:4f:e7:
0e:3e:a6:6c:3d:80:f8:67:d8:2b:68:8f:6e:3d:8d:b1:6c:03:
47:86:0a:81:57:5e:18:1d:ac:f5:79:f7:f3:61:45:5f:37:12:
81:36:c2:f6:1f:02:9b:ce:90:b3:3c:80:4e:66:18:03:99:ab:
82:fd:9f:1a:fa:ef:72:0b:b8:37:e4:73:ae:fb:7f:e8:a3:14:
1b:03:58:78:bb:01:0b:54:43:90:bc:16:53:2a:21:67:23:b3:
2e:d6:61:c7:0d:9b:42:7e:7f:23:1a:43:59:e7:f8:44:77:f9:
bd:88:ce:64:f7:21:c2:a1:17:df:3c:e6:49:0c:5b:46:42:66:
99:e8:5a:65:43:3a:ed:f8:4b:a0:96:f4:ad:64:9f:ba:e5:9b:
b1:83:f2:94:41:53:41:69:17:3c:e3:0c:f4:37:2b:5a:f4:26:
a1:92:5b:77
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVu7/5xnNjWSnjj4eosj9utMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzMwYjllYTAxMGQ4MzJmOTQwZWZiNTg5YzUxODg5MTMy
ZjRjOTQwHhcNMjMwMTAxMjAwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWE2Y2VjM2YxYmNmNTA3ZDFkYjUwZTVhYWI3OTc1ZjQ0ZDI4MWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkUhxeCWbUGZKmUYdDjpVLfWPeNg
IMgRelAuJ4NCopwPjVcFpHnjMHRfUG86HtKv97UJeabhe1JwUAAaeWKcvvBFm8p6
5G0vH8T/1h1AzsyswvaGviVayEiUwAw2yZbO5XT/fosvqcb+umbcgLcrtBxb+bjI
mUZNy7hd8OXVKI2yHRrnuqoA9GAOZPFlarERFrGb1Cu3BcztvRD+zHhPgNahx2bo
Gj67VSSp53nnb4CPL8PZZFP+AEwyS/FX3uUucsIxUtQmgF+0wW3UlVYj7OW5TMbe
bX+Sb6EyupiUZoMaRlGgt7OwR7ZOQK7SWpOOha2IVDbfQA9BB2deu54niwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFmmzsPxvPUH0dtQ5aq3l19E0oHRMB8GA1UdIwQY
MBaAFHlzC56gENgy+UDvtYnFGIkTL0yUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hMDJjYzYtMTMwOC00N2U0LWEwODct
Mzk2MDVmOTA4MWI3LzEvV2FiT3dfRzg5UWZSMjFEbHFyZVhYMFRTZ2RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hMDJjYzYtMTMwOC00N2U0LWEwODctMzk2MDVmOTA4MWI3
LzEvZVhNTG5xQVEyREw1UU8tMWljVVlpUk12VEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhBwgDAN
BgkqhkiG9w0BAQsFAAOCAQEABXUiKwmPHlhv7Ngu8hcAEPAe0q+0ZTkoKyY8kO57
mx7PcW65oTdlLPh8GZU5GoC4GXHSsFNy2jgybRWm7kJH4LjbwOz/Bmhy5BQDkPFP
cd6ZzUOAJZ+1q0/nDj6mbD2A+GfYK2iPbj2NsWwDR4YKgVdeGB2s9Xn382FFXzcS
gTbC9h8Cm86QszyATmYYA5mrgv2fGvrvcgu4N+Rzrvt/6KMUGwNYeLsBC1RDkLwW
UyohZyOzLtZhxw2bQn5/IxpDWef4RHf5vYjOZPchwqEX3zzmSQxbRkJmmehaZUM6
7fhLoJb0rWSfuuWbsYPylEFTQWkXPOMM9DcrWvQmoZJbdw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:16 2025 by rpki-client