Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/2KK6bosiWV-LrvUKtjvanSbnGGg.roa
File: 2KK6bosiWV-LrvUKtjvanSbnGGg.roa (raw, json)
Hash identifier: xrNOfGOYvuUkM8T8ENLafKvhoUWjch5BIQMRJ/bE4CM=
Subject key identifier: D8:A2:BA:6E:8B:22:59:5F:8B:AE:F5:0A:B6:3B:DA:9D:26:E7:18:68
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01877AA58995A81A3BAFE249A2D36C748564
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/2KK6bosiWV-LrvUKtjvanSbnGGg.roa
Signing time: Thu 13 Apr 2023 12:44:41 +0000
ROA not before: Thu 13 Apr 2023 12:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 217.30.89.0/24 maxlen: 24
2a10:eec0:80::/41 maxlen: 41
2a10:eec0:40::/42 maxlen: 42
2a10:eec0:400::/38 maxlen: 38
2a10:eec0:2000::/35 maxlen: 35
2a10:eec0:1000::/36 maxlen: 36
2a10:eec0:8000::/33 maxlen: 33
2a10:eec0:4000::/34 maxlen: 34
2a10:eec0:200::/39 maxlen: 39
2a10:eec0:100::/40 maxlen: 40
2a10:eec0:800::/37 maxlen: 37
2a10:eec0:e::/47 maxlen: 47
2a10:eec0:20::/43 maxlen: 43
2a10:eec0:d::/48 maxlen: 48
2a10:eec0:10::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:a5:89:95:a8:1a:3b:af:e2:49:a2:d3:6c:74:85:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 13 12:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8a2ba6e8b22595f8baef50ab63bda9d26e71868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:2d:6d:a8:dd:3c:5b:69:06:18:81:c3:e4:
2a:04:a1:41:aa:f6:e4:15:f8:bb:da:de:45:ac:63:
dc:26:ab:68:42:01:51:eb:e1:2a:c0:98:8f:f6:71:
e5:42:7f:2a:b9:91:39:55:5b:53:3a:ea:a7:2b:cf:
7e:b4:6a:2f:5d:5f:ad:16:63:38:f9:a4:33:48:7b:
31:15:af:b5:f6:b1:54:9a:89:34:77:39:44:e4:ea:
be:08:66:63:de:fd:ff:fe:85:18:47:d6:2d:0e:08:
3f:90:a1:3f:b4:65:57:a0:59:9c:bc:2a:d7:83:05:
4f:5a:b4:16:7d:dc:af:1e:eb:56:b0:a4:f3:d5:49:
dd:e5:26:f1:aa:05:74:a5:8b:e3:30:14:46:83:2a:
9f:b2:44:eb:65:bb:b6:3f:8f:50:27:37:16:9b:02:
8e:a8:e7:e2:28:7a:1e:e3:32:a7:8f:a0:ed:bd:ca:
83:7a:db:32:7a:fb:c9:e7:c8:dc:b6:7f:78:ac:9d:
48:67:67:9a:52:51:bb:75:5d:0d:80:0e:51:b5:9f:
37:7d:6a:78:3d:0b:fd:d8:d2:c0:76:34:d0:50:78:
e7:99:b0:24:5c:75:80:f2:8a:64:08:69:9a:c9:f6:
86:70:ac:6a:99:a9:92:a3:15:3c:b0:c1:91:dd:d7:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A2:BA:6E:8B:22:59:5F:8B:AE:F5:0A:B6:3B:DA:9D:26:E7:18:68
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/2KK6bosiWV-LrvUKtjvanSbnGGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.30.89.0/24
IPv6:
2a10:eec0:d::-2a10:eec0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
32:fe:65:cd:75:fc:cd:19:71:e3:43:be:23:c8:49:71:a2:ad:
19:9a:0f:49:1e:08:b4:13:8c:55:ba:ce:03:c1:48:da:da:c6:
e1:44:f9:a9:f6:dc:ed:30:03:1e:c9:12:cc:ed:84:ca:ef:b9:
45:57:f1:cf:8e:b3:8e:93:1d:36:f8:c1:1d:f4:0a:02:43:c8:
27:b8:39:f1:5f:9d:9d:d8:c3:50:93:b2:0c:8e:ad:d0:04:fc:
a4:93:ad:fb:ba:4a:30:2e:1a:cb:77:b5:e2:8b:a6:62:43:09:
ab:56:da:e8:65:9c:4a:ad:c5:23:4a:82:ea:c4:6e:21:b3:4f:
68:fd:8d:4a:d7:a6:86:d6:5c:fd:15:20:02:62:0f:a9:91:77:
c0:9f:09:46:85:31:08:75:7e:46:13:a1:50:98:54:7c:a0:c5:
2e:5f:0e:49:68:9b:72:25:51:0d:a2:e1:a5:d1:2f:16:08:71:
34:ff:e0:89:70:33:01:e7:8d:25:0a:30:e9:85:1a:45:a6:73:
a2:93:28:a4:28:2b:12:1f:59:b1:d4:40:ca:05:67:3c:b3:c5:
73:b0:e2:d9:5a:8b:61:26:a7:d0:1d:56:d0:7e:0b:45:e8:19:
4c:ad:a5:98:ce:fa:fa:ab:3b:cb:07:49:25:61:fa:a7:3a:ee:
21:a6:84:e3
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYd6pYmVqBo7r+JJotNsdIVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjMwNDEzMTI0NDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGEyYmE2ZThiMjI1OTVmOGJhZWY1MGFiNjNiZGE5ZDI2ZTcxODY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq70tbajdPFtpBhiBw+QqBKFBqvbk
Ffi72t5FrGPcJqtoQgFR6+EqwJiP9nHlQn8quZE5VVtTOuqnK89+tGovXV+tFmM4
+aQzSHsxFa+19rFUmok0dzlE5Oq+CGZj3v3//oUYR9YtDgg/kKE/tGVXoFmcvCrX
gwVPWrQWfdyvHutWsKTz1Und5SbxqgV0pYvjMBRGgyqfskTrZbu2P49QJzcWmwKO
qOfiKHoe4zKnj6DtvcqDetsyevvJ58jctn94rJ1IZ2eaUlG7dV0NgA5RtZ83fWp4
PQv92NLAdjTQUHjnmbAkXHWA8opkCGmayfaGcKxqmamSoxU8sMGR3dciYQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFNiium6LIllfi671CrY72p0m5xhoMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvMktLNmJvc2lXVi1McnZVS3RqdmFuU2JuR0dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQA2R5ZMBgE
AgACMBIwEAMHACoQ7sAADQMFACoQ7sAwDQYJKoZIhvcNAQELBQADggEBADL+Zc11
/M0ZceNDviPISXGirRmaD0keCLQTjFW6zgPBSNraxuFE+an23O0wAx7JEszthMrv
uUVX8c+Os46THTb4wR30CgJDyCe4OfFfnZ3Yw1CTsgyOrdAE/KSTrfu6SjAuGst3
teKLpmJDCatW2uhlnEqtxSNKgurEbiGzT2j9jUrXpobWXP0VIAJiD6mRd8CfCUaF
MQh1fkYToVCYVHygxS5fDklom3IlUQ2i4aXRLxYIcTT/4IlwMwHnjSUKMOmFGkWm
c6KTKKQoKxIfWbHUQMoFZzyzxXOw4tlai2Emp9AdVtB+C0XoGUytpZjO+vqrO8sH
SSVh+qc67iGmhOM=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:20 2025 by rpki-client