Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/ufkWASG2zO1Qcklzsi_ereLkdOY.roa
File: ufkWASG2zO1Qcklzsi_ereLkdOY.roa (raw, json)
Hash identifier: oV6SVamatS5cPIIEwcN9FOUdy7Cm0wPII8VaIZBEbhU=
Subject key identifier: B9:F9:16:01:21:B6:CC:ED:50:72:49:73:B2:2F:DE:AD:E2:E4:74:E6
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 0182F1AD9B3850E310AFD008EB4EB4A30B6C
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/ufkWASG2zO1Qcklzsi_ereLkdOY.roa
Signing time: Wed 31 Aug 2022 02:14:22 +0000
ROA not before: Wed 31 Aug 2022 02:14:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3573
IP address blocks: 2a02:ee80:4066::/48 maxlen: 48
2a02:ee80:4066::/47 maxlen: 47
2a02:ee80:4171::/48 maxlen: 48
2a02:ee80:415c::/47 maxlen: 47
2a02:ee80:4067::/48 maxlen: 48
2a02:ee80:404a::/48 maxlen: 48
2a02:ee80:404a::/47 maxlen: 47
2a02:ee80:4170::/48 maxlen: 48
2a02:ee80:41a8::/47 maxlen: 47
2a02:ee80:4170::/47 maxlen: 47
2a02:ee80:404b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f1:ad:9b:38:50:e3:10:af:d0:08:eb:4e:b4:a3:0b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Aug 31 02:14:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9f9160121b6cced50724973b22fdeade2e474e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:dc:b4:13:9e:ce:e3:c7:b3:f8:fa:96:28:
d0:e6:c6:76:d8:28:d1:41:02:8b:f3:01:f8:5d:39:
b9:94:f0:4f:96:79:4e:e7:db:bf:cc:15:d8:87:0d:
ba:56:f2:59:c0:c8:38:45:49:62:56:23:91:d4:6c:
a6:6f:bf:53:f6:7b:f6:69:98:60:37:15:2d:ab:d8:
5f:74:74:0d:b8:18:e5:70:fc:6c:bd:49:67:3d:fa:
68:f2:31:ed:91:9d:40:cf:29:db:68:a9:9b:0c:c4:
f7:28:ca:0a:8f:69:aa:ac:fd:18:e9:6a:8f:25:a2:
bd:9a:7c:66:86:3b:0c:03:ad:59:e0:26:f0:b4:26:
37:50:f0:af:05:8d:de:99:37:11:b7:bb:64:25:68:
48:6f:6f:6f:d7:bf:1e:33:cb:83:8b:e1:3a:26:be:
8d:a6:56:e1:ce:fb:60:ef:8d:9c:e6:8e:23:42:12:
ee:a6:2b:d6:df:1d:23:74:d8:84:c3:bb:a3:fb:4f:
eb:c2:5a:5d:07:e6:f1:ed:67:b7:e8:dc:98:8c:28:
74:df:c4:1e:85:4e:70:d0:27:0b:ec:ad:78:71:12:
b1:67:73:76:c8:54:c5:da:0c:38:81:63:ac:77:39:
e6:44:e1:49:61:9b:a9:f1:44:47:75:15:02:7b:8e:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F9:16:01:21:B6:CC:ED:50:72:49:73:B2:2F:DE:AD:E2:E4:74:E6
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/ufkWASG2zO1Qcklzsi_ereLkdOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:ee80:404a::/47
2a02:ee80:4066::/47
2a02:ee80:415c::/47
2a02:ee80:4170::/47
2a02:ee80:41a8::/47
Signature Algorithm: sha256WithRSAEncryption
51:2f:e4:cb:12:ef:14:db:de:cf:af:0b:cb:2a:94:4b:a7:66:
88:0c:22:ba:7c:17:ef:75:f1:70:df:ed:af:55:ac:97:f2:cf:
ce:2d:0a:56:f6:b2:9a:80:1e:13:2c:d3:c5:21:66:86:7d:77:
3d:5d:7d:c1:ba:75:32:bf:66:99:a7:08:a2:3c:e7:e5:a5:70:
5c:d4:fd:75:64:b6:d8:f3:24:2c:e3:2f:4e:03:47:89:ec:e7:
f6:4f:08:34:2a:47:79:3d:99:29:0d:0f:43:e1:7a:93:74:26:
93:b6:d4:84:5e:a5:43:3b:ab:5b:99:3f:e7:35:a0:23:7c:4a:
22:d1:dc:15:39:74:5a:dc:60:95:fe:05:b2:91:98:50:04:e9:
e2:63:c7:fe:ac:8a:6e:f9:03:03:7e:8b:61:54:72:10:fa:a9:
07:26:b0:3b:33:09:74:53:e6:95:e2:02:83:47:2d:e4:3b:6a:
60:12:d3:6d:ce:bd:ac:a2:13:45:ba:15:a4:95:2e:b3:8b:40:
f7:37:11:d6:90:12:03:7c:b6:1f:b2:36:ae:fb:cd:dc:c6:11:
5c:89:b4:53:46:9c:4b:06:3c:c8:f1:9b:ff:ef:00:b6:b8:93:
e9:80:ce:a8:e4:6e:9c:7a:1a:09:7d:9b:21:4b:78:30:b5:2e:
c6:06:5a:22
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYLxrZs4UOMQr9AI6060owtsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5
M2MzNjQwHhcNMjIwODMxMDIxNDIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWY5MTYwMTIxYjZjY2VkNTA3MjQ5NzNiMjJmZGVhZGUyZTQ3NGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg/ctBOezuPHs/j6lijQ5sZ22CjR
QQKL8wH4XTm5lPBPlnlO59u/zBXYhw26VvJZwMg4RUliViOR1Gymb79T9nv2aZhg
NxUtq9hfdHQNuBjlcPxsvUlnPfpo8jHtkZ1AzynbaKmbDMT3KMoKj2mqrP0Y6WqP
JaK9mnxmhjsMA61Z4CbwtCY3UPCvBY3emTcRt7tkJWhIb29v178eM8uDi+E6Jr6N
plbhzvtg742c5o4jQhLupivW3x0jdNiEw7uj+0/rwlpdB+bx7We36NyYjCh038Qe
hU5w0CcL7K14cRKxZ3N2yFTF2gw4gWOsdznmROFJYZup8URHdRUCe468HwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFLn5FgEhtsztUHJJc7Iv3q3i5HTmMB8GA1UdIwQY
MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct
MWY0YmVhMjNlNGM3LzEvdWZrV0FTRzJ6TzFRY2tsenNpX2VyZUxrZE9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3
LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcBKgLugEBK
AwcBKgLugEBmAwcBKgLugEFcAwcBKgLugEFwAwcBKgLugEGoMA0GCSqGSIb3DQEB
CwUAA4IBAQBRL+TLEu8U297PrwvLKpRLp2aIDCK6fBfvdfFw3+2vVayX8s/OLQpW
9rKagB4TLNPFIWaGfXc9XX3BunUyv2aZpwiiPOflpXBc1P11ZLbY8yQs4y9OA0eJ
7Of2Twg0Kkd5PZkpDQ9D4XqTdCaTttSEXqVDO6tbmT/nNaAjfEoi0dwVOXRa3GCV
/gWykZhQBOniY8f+rIpu+QMDfothVHIQ+qkHJrA7Mwl0U+aV4gKDRy3kO2pgEtNt
zr2sohNFuhWklS6zi0D3NxHWkBIDfLYfsjau+83cxhFcibRTRpxLBjzI8Zv/7wC2
uJPpgM6o5G6cehoJfZshS3gwtS7GBloi
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:24:33 2025 by rpki-client