Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/ZcZYTPWZb_snMz9aEDZA3J2uJ_w.roa
File: ZcZYTPWZb_snMz9aEDZA3J2uJ_w.roa (raw, json)
Hash identifier: tbQ46xjoJ1wuSpsNTWaywaHj1VH4z4YhuRu4mh8DuMs=
Subject key identifier: 65:C6:58:4C:F5:99:6F:FB:27:33:3F:5A:10:36:40:DC:9D:AE:27:FC
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 01856E01BE336BEC74EF4E306E6914E4046B
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/ZcZYTPWZb_snMz9aEDZA3J2uJ_w.roa
Signing time: Sun 01 Jan 2023 15:44:46 +0000
ROA not before: Sun 01 Jan 2023 15:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56971
IP address blocks: 2a13:7c00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:be:33:6b:ec:74:ef:4e:30:6e:69:14:e4:04:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Jan 1 15:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65c6584cf5996ffb27333f5a103640dc9dae27fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:bd:0a:76:8f:3c:af:da:fa:c5:8c:db:ba:
eb:25:03:a9:a7:8c:26:77:52:73:13:93:bb:39:c0:
46:fb:39:16:a8:5d:ce:e0:d2:a7:c5:dd:91:fe:10:
23:35:03:fa:06:5b:95:27:55:b6:c7:fb:c6:71:fa:
85:27:f6:ff:a1:47:0c:f0:15:53:41:89:4f:62:59:
e3:d6:88:63:45:f7:7a:76:0d:a9:01:39:cd:43:e8:
12:58:cf:10:27:3a:19:f0:7e:67:6f:8a:9d:fc:ea:
70:c7:41:a8:a9:47:8b:77:7f:09:12:e5:f4:18:43:
6c:5c:8f:bf:66:af:51:2a:9f:49:ff:de:60:b4:68:
47:85:1a:72:25:9b:cf:f4:0a:16:83:f6:c8:47:ca:
d1:e3:69:6f:b8:bb:83:f9:ed:01:e1:db:70:7e:d5:
3a:d8:c4:13:d1:86:85:0f:b1:74:11:88:24:24:ac:
29:d6:55:3c:26:4b:3b:f9:1b:d3:d0:65:ba:3b:1c:
fb:fd:f5:d7:09:8a:2c:6d:53:12:66:30:da:ee:37:
19:52:15:48:b7:dc:0e:ea:72:63:10:0e:43:35:c1:
c8:b0:0c:51:a6:89:74:72:35:25:db:52:5b:7a:24:
9f:84:ee:22:85:c5:d8:75:b1:e6:3b:db:1c:c3:22:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C6:58:4C:F5:99:6F:FB:27:33:3F:5A:10:36:40:DC:9D:AE:27:FC
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/ZcZYTPWZb_snMz9aEDZA3J2uJ_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7c00::/32
Signature Algorithm: sha256WithRSAEncryption
24:18:b7:d6:c8:c3:38:2f:7a:a3:49:3a:87:f8:f6:90:ad:b2:
78:d7:b4:10:b0:8b:bd:a5:f9:fc:65:da:49:9c:a3:3f:03:a8:
fd:ff:18:21:e4:28:a5:3a:23:4d:66:89:19:fb:a4:0c:27:b5:
cf:7b:c2:28:ff:4f:5e:67:b8:77:09:af:5d:95:7b:4a:91:8f:
7e:0d:24:11:b8:c5:41:0a:a0:2b:a1:9e:36:4a:79:58:25:6c:
79:be:35:a1:22:36:e7:6b:83:12:d4:65:c7:ae:f8:f1:09:24:
eb:ea:9d:5e:ea:e2:8f:1e:29:88:f2:b2:27:ef:40:49:34:5b:
36:1e:fb:00:79:ba:0a:a1:21:23:84:b6:ce:15:bd:b7:bf:ea:
b4:67:48:e7:1d:c2:0f:4d:8c:82:59:0a:65:9a:6f:72:16:e9:
cc:fb:71:fa:e2:0d:eb:ec:25:83:8a:50:e1:78:ce:61:90:d3:
b2:8a:aa:3d:80:ee:f8:57:a0:72:d0:2f:f9:a5:69:66:54:5a:
a6:cc:a1:90:af:cc:84:fe:13:d2:5d:03:d3:1b:41:2a:5c:93:
30:70:14:b4:3f:3e:1b:cb:e1:ec:7e:70:d3:7f:dc:b8:7e:b7:
d5:c5:0f:41:b8:00:53:3f:4a:db:2e:84:aa:b3:b8:43:50:40:
08:5f:91:f7
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVuAb4za+x0704wbmkU5ARrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NzJiOWZiNTQ2YjM2NWUzMjMyMzBkY2VhOWJhOGM5ZmJl
ZGZlYjgwHhcNMjMwMTAxMTU0NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWM2NTg0Y2Y1OTk2ZmZiMjczMzNmNWExMDM2NDBkYzlkYWUyN2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogC9CnaPPK/a+sWM27rrJQOpp4wm
d1JzE5O7OcBG+zkWqF3O4NKnxd2R/hAjNQP6BluVJ1W2x/vGcfqFJ/b/oUcM8BVT
QYlPYlnj1ohjRfd6dg2pATnNQ+gSWM8QJzoZ8H5nb4qd/Opwx0GoqUeLd38JEuX0
GENsXI+/Zq9RKp9J/95gtGhHhRpyJZvP9AoWg/bIR8rR42lvuLuD+e0B4dtwftU6
2MQT0YaFD7F0EYgkJKwp1lU8Jks7+RvT0GW6Oxz7/fXXCYosbVMSZjDa7jcZUhVI
t9wO6nJjEA5DNcHIsAxRpol0cjUl21JbeiSfhO4ihcXYdbHmO9scwyLnEwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGXGWEz1mW/7JzM/WhA2QNydrif8MB8GA1UdIwQY
MBaAFCZyuftUazZeMjIw3OqbqMn77f64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYt
YTcwZGI1ODI4MGZjLzEvWmNaWVRQV1piX3NuTXo5YUVEWkEzSjJ1Sl93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYtYTcwZGI1ODI4MGZj
LzEvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhN8ADAN
BgkqhkiG9w0BAQsFAAOCAQEAJBi31sjDOC96o0k6h/j2kK2yeNe0ELCLvaX5/GXa
SZyjPwOo/f8YIeQopTojTWaJGfukDCe1z3vCKP9PXme4dwmvXZV7SpGPfg0kEbjF
QQqgK6GeNkp5WCVseb41oSI252uDEtRlx6748Qkk6+qdXurijx4piPKyJ+9ASTRb
Nh77AHm6CqEhI4S2zhW9t7/qtGdI5x3CD02MglkKZZpvchbpzPtx+uIN6+wlg4pQ
4XjOYZDTsoqqPYDu+FegctAv+aVpZlRapsyhkK/MhP4T0l0D0xtBKlyTMHAUtD8+
G8vh7H5w03/cuH631cUPQbgAUz9K2y6EqrO4Q1BACF+R9w==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:17 2025 by rpki-client