Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/Y1I0VL9U1ycn82qid5OeLz4Qju8.roa
File: Y1I0VL9U1ycn82qid5OeLz4Qju8.roa (raw, json)
Hash identifier: Ol538+8nAsXLK2SuOB6cYduBISeq8XJMHpZonm2rhsI=
Subject key identifier: 63:52:34:54:BF:54:D7:27:27:F3:6A:A2:77:93:9E:2F:3E:10:8E:EF
Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial: 0248917B
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/Y1I0VL9U1ycn82qid5OeLz4Qju8.roa
Signing time: Sat 01 Jan 2022 15:55:58 +0000
ROA not before: Sat 01 Jan 2022 15:55:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211722
IP address blocks: 2001:67c:2970::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38310267 (0x248917b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Validity
Not Before: Jan 1 15:55:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63523454bf54d72727f36aa277939e2f3e108eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:96:11:23:07:72:9f:ab:38:e8:7b:a2:de:
21:21:fd:ca:d8:71:7e:e8:64:4a:7e:d1:73:7a:86:
eb:20:52:d3:02:c6:27:ec:cb:55:bb:f5:a1:5e:24:
70:79:8d:aa:61:70:1a:ff:a6:dd:ab:34:49:ee:61:
59:ad:ff:03:95:50:60:bd:2d:2d:58:8f:3a:13:58:
71:da:3d:76:06:49:fa:0e:7c:40:39:a5:dc:59:b0:
1e:77:2c:71:12:42:ab:d2:5f:07:e8:ee:01:bf:f2:
31:e8:cc:19:da:9f:7d:10:7f:b8:91:6e:1c:58:c4:
37:b8:16:a8:b4:cc:d7:1d:ce:89:cb:c9:3d:49:3f:
eb:8d:b7:2f:6c:26:25:88:13:05:e1:f6:98:8e:1a:
b1:22:de:df:6e:7f:f0:ed:4c:e1:96:97:fc:90:37:
d3:0a:bd:90:3e:c9:7f:3b:12:32:8c:6a:5d:53:c8:
0f:80:e7:d6:aa:0b:5a:d9:f4:4c:d6:f1:5c:e7:50:
f2:d9:d9:b7:5f:a4:2b:a6:13:be:11:a7:aa:c2:a5:
f3:43:ac:8d:78:de:5d:85:96:53:f1:25:71:48:bf:
a6:c9:bf:23:0c:d6:f9:2d:0f:f6:cc:70:f3:c5:5b:
77:91:1e:94:91:66:4b:85:53:86:ca:0c:85:b1:c7:
cb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:52:34:54:BF:54:D7:27:27:F3:6A:A2:77:93:9E:2F:3E:10:8E:EF
X509v3 Authority Key Identifier:
keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/Y1I0VL9U1ycn82qid5OeLz4Qju8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2970::/48
Signature Algorithm: sha256WithRSAEncryption
bf:88:f0:37:eb:3b:94:c7:f2:0a:ce:7d:f0:df:19:ac:8e:e3:
85:12:c8:c3:60:8f:50:a4:36:57:33:74:96:60:ce:d9:d9:be:
a4:12:6b:90:89:fd:eb:c3:2b:d6:cf:47:20:ad:f4:50:8e:ef:
da:06:6b:63:6e:2b:74:34:b8:e0:d5:81:6f:0c:70:66:09:23:
50:00:6a:98:0b:57:b8:14:d5:89:61:f9:b1:57:18:9f:34:d1:
21:d9:70:26:f4:b2:10:a8:f3:47:50:6d:d3:53:a2:65:9a:50:
ca:6a:20:91:dd:a2:a5:70:ab:ff:1f:88:a8:62:e9:1a:24:a8:
7d:e8:ad:75:7e:19:89:d0:fc:5c:e9:06:9a:56:ca:f3:12:83:
fa:df:07:40:ee:e9:63:12:57:32:69:6d:57:5f:c8:2c:16:eb:
4c:44:41:cd:1d:ae:c1:9a:6a:3e:4c:0a:eb:63:46:0c:c3:cc:
46:76:7d:5f:7a:b3:87:71:a3:ea:56:64:84:82:43:d7:f4:85:
e1:48:36:cd:7e:ee:f1:33:03:99:17:71:25:1d:78:5e:0d:2c:
03:72:23:90:e4:a7:72:3d:5a:dc:23:ee:9a:0e:5c:9e:57:de:
ad:a4:82:04:15:8a:ee:91:29:9a:97:33:d2:54:20:be:31:80:
71:8a:29:14
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEAkiRezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZjBiZjEwNjBhZjkzOTE3ZGFmYjU2OWE4MGNjZWM5ZGIwOGE3NmM1MB4XDTIyMDEw
MTE1NTU1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjM1MjM0NTRiZjU0
ZDcyNzI3ZjM2YWEyNzc5MzllMmYzZTEwOGVlZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ3xlhEjB3Kfqzjoe6LeISH9ythxfuhkSn7Rc3qG6yBS0wLG
J+zLVbv1oV4kcHmNqmFwGv+m3as0Se5hWa3/A5VQYL0tLViPOhNYcdo9dgZJ+g58
QDml3FmwHncscRJCq9JfB+juAb/yMejMGdqffRB/uJFuHFjEN7gWqLTM1x3OicvJ
PUk/6423L2wmJYgTBeH2mI4asSLe325/8O1M4ZaX/JA30wq9kD7JfzsSMoxqXVPI
D4Dn1qoLWtn0TNbxXOdQ8tnZt1+kK6YTvhGnqsKl80OsjXjeXYWWU/ElcUi/psm/
IwzW+S0P9sxw88Vbd5EelJFmS4VThsoMhbHHy08CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRjUjRUv1TXJyfzaqJ3k54vPhCO7zAfBgNVHSMEGDAWgBQvC/EGCvk5F9r7
VpqAzOydsIp2xTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0x3dnhCZ3I1T1JmYS0xYWFnTXpzbmJDS2RzVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvNzNmNzM5LTgxYjgtNDUxMS04MWExLWIzYTE2ODAzMjBhZC8x
L1kxSTBWTDlVMXljbjgycWlkNU9lTHo0UWp1OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
NzNmNzM5LTgxYjgtNDUxMS04MWExLWIzYTE2ODAzMjBhZC8xL0x3dnhCZ3I1T1Jm
YS0xYWFnTXpzbmJDS2RzVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwpcDANBgkqhkiG9w0BAQsF
AAOCAQEAv4jwN+s7lMfyCs598N8ZrI7jhRLIw2CPUKQ2VzN0lmDO2dm+pBJrkIn9
68Mr1s9HIK30UI7v2gZrY24rdDS44NWBbwxwZgkjUABqmAtXuBTViWH5sVcYnzTR
IdlwJvSyEKjzR1Bt01OiZZpQymogkd2ipXCr/x+IqGLpGiSofeitdX4ZidD8XOkG
mlbK8xKD+t8HQO7pYxJXMmltV1/ILBbrTERBzR2uwZpqPkwK62NGDMPMRnZ9X3qz
h3Gj6lZkhIJD1/SF4Ug2zX7u8TMDmRdxJR14Xg0sA3IjkOSncj1a3CPumg5cnlfe
raSCBBWK7pEpmpcz0lQgvjGAcYopFA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:38 2025 by rpki-client