Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/l0CD3yqFBje-h0xgfm1lE3AOCWQ.roa
File: l0CD3yqFBje-h0xgfm1lE3AOCWQ.roa (raw, json)
Hash identifier: g52Y2UZGyGsj7HiTwt1KxkfDFEudnzqhXEaqhvmcY/Y=
Subject key identifier: 97:40:83:DF:2A:85:06:37:BE:87:4C:60:7E:6D:65:13:70:0E:09:64
Certificate issuer: /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Certificate serial: C15D9D
Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/l0CD3yqFBje-h0xgfm1lE3AOCWQ.roa
Signing time: Sat 01 Jan 2022 03:57:34 +0000
ROA not before: Sat 01 Jan 2022 03:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13127
IP address blocks: 2a0c:9180::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12672413 (0xc15d9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Validity
Not Before: Jan 1 03:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=974083df2a850637be874c607e6d6513700e0964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:d1:16:c8:35:4b:33:4a:f2:e5:b1:96:90:
bf:1d:63:53:03:7d:cc:3b:03:86:91:eb:0b:f8:5d:
d9:a5:d5:31:08:e7:7b:01:2f:48:b2:ce:48:ac:bc:
b4:22:79:70:d8:1a:19:23:d1:b0:ed:34:43:df:ed:
21:50:0c:83:18:be:52:27:e0:28:1c:ff:1a:ea:68:
c0:15:e8:6c:6c:ba:9a:af:3a:57:ca:b1:23:27:84:
29:13:be:78:d9:9d:3a:97:f9:fc:d8:64:9c:21:5f:
76:c3:81:2a:bc:0a:80:39:9a:db:f2:68:fe:a3:31:
7b:c8:0a:a4:33:43:5b:93:f1:dd:bd:79:e6:2a:89:
46:06:cb:c8:90:99:32:7f:26:b9:be:df:92:72:b5:
99:ed:21:43:8d:96:0e:c0:40:c8:b3:0a:90:c0:e7:
3f:16:d4:ed:c1:a2:e6:5a:e1:04:54:e9:30:5d:14:
72:ab:cb:94:c5:bc:88:df:c9:24:65:a7:60:5f:f2:
36:5c:c4:74:21:87:24:9f:b7:7b:f6:89:7c:f1:33:
40:d4:16:e1:f3:fd:32:4d:3b:dc:d9:0b:40:97:17:
8f:c7:59:42:58:c1:73:25:34:f6:51:72:84:37:20:
68:d1:24:a4:a5:e0:5c:fd:74:8a:de:c4:95:00:40:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:40:83:DF:2A:85:06:37:BE:87:4C:60:7E:6D:65:13:70:0E:09:64
X509v3 Authority Key Identifier:
keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/l0CD3yqFBje-h0xgfm1lE3AOCWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9180::/48
Signature Algorithm: sha256WithRSAEncryption
72:4f:e3:ae:18:74:9a:dd:9c:3e:77:55:ab:f8:7e:19:03:fa:
02:3e:40:e2:36:98:0b:5f:eb:1f:1f:53:ed:db:02:c6:57:60:
96:42:bf:e2:15:c4:0b:eb:26:10:79:7d:85:c0:d4:b5:11:00:
cc:e8:2f:8d:28:36:61:5a:b3:ef:42:4b:74:63:92:11:97:ab:
8f:ac:73:22:10:99:81:db:15:00:16:88:90:cf:2c:57:1d:d7:
d9:7b:62:1a:58:fe:36:4f:e8:0e:1f:39:1e:83:cb:b0:af:7a:
0b:66:a1:35:e3:c3:4d:90:96:63:1a:a7:65:15:e0:64:73:2c:
d2:d2:4a:f3:cc:0b:2d:ea:3e:8c:aa:b6:be:b8:d9:78:fb:29:
1c:f7:54:d6:f6:7e:bb:9c:83:4d:52:73:01:6b:04:7c:7e:60:
1d:b4:90:c3:3e:d9:a3:77:c4:65:58:50:de:58:d9:1a:35:fa:
e0:61:97:f4:e1:8d:03:64:27:ee:dd:88:5c:6c:72:84:17:47:
13:e6:86:98:6e:2a:6b:73:67:f5:93:5b:d7:27:11:31:d4:6f:
51:c2:21:5c:3b:dc:71:9a:aa:9a:b2:a4:3f:2f:64:9a:7f:af:
e1:56:f7:0e:3b:ef:1f:bb:a3:5f:00:46:58:4c:2f:17:17:b4:
97:7a:35:b2
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEAMFdnTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZDY2YTVjZmEzOWNmYTkxZTMxMzQ0M2Y2MTNlNzNjY2U3M2YyMTQwMB4XDTIyMDEw
MTAzNTczNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTc0MDgzZGYyYTg1
MDYzN2JlODc0YzYwN2U2ZDY1MTM3MDBlMDk2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKfk0RbINUszSvLlsZaQvx1jUwN9zDsDhpHrC/hd2aXVMQjn
ewEvSLLOSKy8tCJ5cNgaGSPRsO00Q9/tIVAMgxi+UifgKBz/GupowBXobGy6mq86
V8qxIyeEKRO+eNmdOpf5/NhknCFfdsOBKrwKgDma2/Jo/qMxe8gKpDNDW5Px3b15
5iqJRgbLyJCZMn8mub7fknK1me0hQ42WDsBAyLMKkMDnPxbU7cGi5lrhBFTpMF0U
cqvLlMW8iN/JJGWnYF/yNlzEdCGHJJ+3e/aJfPEzQNQW4fP9Mk073NkLQJcXj8dZ
QljBcyU09lFyhDcgaNEkpKXgXP10it7ElQBAj10CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSXQIPfKoUGN76HTGB+bWUTcA4JZDAfBgNVHSMEGDAWgBSdZqXPo5z6keMT
RD9hPnPM5z8hQDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25XYWx6Nk9jLXBIakUwUV9ZVDV6ek9jX0lVQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjYvNzYyNzQzLTcxNjQtNDMzZS04YmI2LWExOTUwN2RlNzViNC8x
L2wwQ0QzeXFGQmplLWgweGdmbTFsRTNBT0NXUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYv
NzYyNzQzLTcxNjQtNDMzZS04YmI2LWExOTUwN2RlNzViNC8xL25XYWx6Nk9jLXBI
akUwUV9ZVDV6ek9jX0lVQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoMkYAAADANBgkqhkiG9w0BAQsF
AAOCAQEAck/jrhh0mt2cPndVq/h+GQP6Aj5A4jaYC1/rHx9T7dsCxldglkK/4hXE
C+smEHl9hcDUtREAzOgvjSg2YVqz70JLdGOSEZerj6xzIhCZgdsVABaIkM8sVx3X
2XtiGlj+Nk/oDh85HoPLsK96C2ahNePDTZCWYxqnZRXgZHMs0tJK88wLLeo+jKq2
vrjZePspHPdU1vZ+u5yDTVJzAWsEfH5gHbSQwz7Zo3fEZVhQ3ljZGjX64GGX9OGN
A2Qn7t2IXGxyhBdHE+aGmG4qa3Nn9ZNb1ycRMdRvUcIhXDvccZqqmrKkPy9kmn+v
4Vb3DjvvH7ujXwBGWEwvFxe0l3o1sg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:56 2025 by rpki-client