Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS49752.roa
File: AS49752.roa (raw, json)
Hash identifier: Nw4gyRhwfHXChxvXNW9G1KzeCSTWxF6iv5cSEoi/zbc=
Subject key identifier: 0E:1A:74:C7:AB:61:53:31:A0:28:43:AF:6B:6B:2B:54:D4:F0:8B:6C
Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial: 4D4919DDB72EDAB0C71B6E01E0493A187FF2CBF9
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS49752.roa
Signing time: Tue 19 Sep 2023 02:14:57 +0000
ROA not before: Tue 19 Sep 2023 02:09:57 +0000
ROA not after: Tue 17 Sep 2024 02:14:57 +0000
asID: 49752
IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:49:19:dd:b7:2e:da:b0:c7:1b:6e:01:e0:49:3a:18:7f:f2:cb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Validity
Not Before: Sep 19 02:09:57 2023 GMT
Not After : Sep 17 02:14:57 2024 GMT
Subject: CN=0E1A74C7AB615331A02843AF6B6B2B54D4F08B6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d1:99:f9:c3:1d:5d:bc:25:85:be:d2:6b:54:
63:2a:fa:ab:43:c6:cc:24:3d:9b:8c:47:ba:dd:cd:
d0:3d:44:1d:89:9f:02:e1:26:c5:7c:15:f5:df:60:
07:42:10:92:a1:fb:3b:23:df:37:c3:c2:1f:29:4c:
65:9f:0c:72:c9:82:64:7e:f9:98:97:7a:44:fc:1c:
88:f3:04:4c:2a:6c:1d:e0:5f:73:ca:a0:60:24:94:
97:98:8f:88:77:6e:ac:55:cd:79:c2:15:48:65:82:
96:bf:1d:f5:ef:81:fa:03:92:52:e2:16:f9:03:f2:
33:cd:2b:f0:fa:30:9b:f1:84:57:4f:4f:2c:3e:57:
15:6a:f9:ee:c4:16:9b:e1:7f:b4:30:9f:0f:af:61:
1b:80:03:d8:53:5d:85:0d:65:ef:02:ed:54:e5:db:
6f:d0:24:e9:ca:2d:18:93:26:5a:11:c1:15:f6:11:
87:ba:31:1c:fe:d6:36:28:7a:6d:2e:16:00:81:28:
66:c1:52:03:92:38:56:62:71:a2:c0:6a:96:a4:d1:
84:0c:a5:c9:51:a4:c8:71:d4:61:e2:4e:4f:29:01:
bc:ae:5c:78:c7:87:ec:34:3a:43:26:8a:66:ac:7f:
f2:2a:8f:7a:84:67:53:48:63:2a:c8:59:22:d3:88:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1A:74:C7:AB:61:53:31:A0:28:43:AF:6B:6B:2B:54:D4:F0:8B:6C
X509v3 Authority Key Identifier:
keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS49752.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
b0:dd:c5:fd:ab:cb:e4:73:84:da:1c:e5:e9:01:6f:f7:3d:25:
51:92:06:2c:92:48:9c:f5:9d:0d:77:9f:90:3c:6c:e3:6c:9b:
30:37:03:c8:f6:71:cb:c2:ab:a7:21:ea:06:a9:52:a1:f6:ee:
4a:fb:1d:89:16:a9:11:03:61:28:e3:00:df:39:35:9b:3a:be:
9b:0f:86:08:18:f8:a0:c1:b7:20:a3:27:f4:d1:1b:54:79:bb:
2b:6d:02:85:1d:09:92:b1:c0:f6:d5:d4:88:9e:eb:75:0d:8a:
65:7c:f7:ad:8f:65:a3:fd:00:89:33:fd:8a:15:da:fd:b5:c6:
14:2e:4f:99:bd:b4:65:e2:91:8a:eb:23:f5:5d:39:f6:ef:98:
43:39:f7:62:9e:23:87:40:85:93:c0:24:7a:63:15:14:4b:c0:
b8:04:bd:6c:c0:0f:cf:22:b5:6c:ac:fc:20:1c:52:1b:a6:72:
d3:d0:25:d8:af:7a:f9:be:7a:ad:46:94:dc:08:1b:3b:7a:65:
e4:0c:1f:28:03:3b:1d:f1:29:60:c3:84:71:2b:70:62:06:43:
9b:5e:6c:6e:69:f6:64:65:9c:a1:13:c2:2c:18:6a:e5:6a:c4:
9e:06:9c:a3:b2:fb:01:6d:da:3b:d8:5c:84:0d:46:c2:5f:36:
3f:55:d2:0c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTUkZ3bcu2rDHG24B4Ek6GH/yy/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw
RTFFMkY4RTAeFw0yMzA5MTkwMjA5NTdaFw0yNDA5MTcwMjE0NTdaMDMxMTAvBgNV
BAMTKDBFMUE3NEM3QUI2MTUzMzFBMDI4NDNBRjZCNkIyQjU0RDRGMDhCNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp0Zn5wx1dvCWFvtJrVGMq+qtD
xswkPZuMR7rdzdA9RB2JnwLhJsV8FfXfYAdCEJKh+zsj3zfDwh8pTGWfDHLJgmR+
+ZiXekT8HIjzBEwqbB3gX3PKoGAklJeYj4h3bqxVzXnCFUhlgpa/HfXvgfoDklLi
FvkD8jPNK/D6MJvxhFdPTyw+VxVq+e7EFpvhf7Qwnw+vYRuAA9hTXYUNZe8C7VTl
22/QJOnKLRiTJloRwRX2EYe6MRz+1jYoem0uFgCBKGbBUgOSOFZicaLAapak0YQM
pclRpMhx1GHiTk8pAbyuXHjHh+w0OkMmimasf/Iqj3qEZ1NIYyrIWSLTiNN7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUDhp0x6thUzGgKEOva2srVNTwi2wwHwYDVR0j
BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh
ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF
MkY4RS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt
NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTNDk3NTIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqB1TC
sAswDQYJKoZIhvcNAQELBQADggEBALDdxf2ry+RzhNoc5ekBb/c9JVGSBiySSJz1
nQ13n5A8bONsmzA3A8j2ccvCq6ch6gapUqH27kr7HYkWqREDYSjjAN85NZs6vpsP
hggY+KDBtyCjJ/TRG1R5uyttAoUdCZKxwPbV1Iie63UNimV8962PZaP9AIkz/YoV
2v21xhQuT5m9tGXikYrrI/VdOfbvmEM592KeI4dAhZPAJHpjFRRLwLgEvWzAD88i
tWys/CAcUhumctPQJdivevm+eq1GlNwIGzt6ZeQMHygDOx3xKWDDhHErcGIGQ5te
bG5p9mRlnKETwiwYauVqxJ4GnKOy+wFt2jvYXIQNRsJfNj9V0gw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:25:28 2025 by rpki-client