Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/1-mYbWWixJSyiQBSwB5HBwBvfKIw.roa
File: 1-mYbWWixJSyiQBSwB5HBwBvfKIw.roa (raw, json)
Hash identifier: n3WbpbWKKZxskhOzHBRYbcpGkUwyxZf9pqwgnmz6s88=
Subject key identifier: FA:66:1B:59:68:B1:25:2C:A2:40:14:B0:07:91:C1:C0:1B:DF:28:8C
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 018BD8F1B71B02C44F8505C9461C29329F16
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/1-mYbWWixJSyiQBSwB5HBwBvfKIw.roa
Signing time: Thu 16 Nov 2023 16:23:21 +0000
ROA not before: Thu 16 Nov 2023 16:23:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3209
IP address blocks: 2a01:800::/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:f1:b7:1b:02:c4:4f:85:05:c9:46:1c:29:32:9f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Nov 16 16:23:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa661b5968b1252ca24014b00791c1c01bdf288c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:be:e1:d1:bf:79:e4:d7:39:27:f1:69:4d:11:
33:b1:06:67:d3:07:18:5f:d6:cc:b2:a8:3a:d0:9d:
e3:ae:07:03:85:55:80:81:28:00:b8:60:a5:00:8c:
38:f3:fb:db:21:80:9c:d2:f0:ed:b8:97:96:32:4e:
e4:b7:c4:a5:0a:80:0c:62:ce:2f:cc:44:22:2a:4b:
19:ce:d5:9a:bd:66:c1:b7:1a:10:6f:1e:41:a9:ba:
75:d5:30:35:e3:05:2d:56:6e:4a:a5:4a:b9:79:35:
ed:6d:f0:26:0b:a1:e0:c9:08:1c:ba:41:b2:47:3e:
46:5c:76:77:30:0a:72:77:26:64:81:79:18:17:6c:
03:63:9a:df:ed:3c:3b:ee:72:0c:15:db:50:8a:79:
ac:57:11:ec:6e:5c:fd:7f:64:63:98:30:29:38:15:
f2:ce:4c:cd:51:99:38:3a:85:66:61:0f:f5:7b:94:
69:bd:af:8f:66:0c:b0:2a:a2:71:32:58:28:98:27:
b5:b8:63:f4:07:50:87:8f:c8:f5:a5:90:da:76:f6:
4e:74:9b:dd:cb:3a:91:b7:86:7c:f6:3a:3c:18:36:
4e:59:ed:05:35:b2:6c:43:d8:d0:bc:27:a7:61:a9:
37:93:18:ef:9a:c8:e8:47:5f:22:84:ec:3d:cf:01:
28:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:66:1B:59:68:B1:25:2C:A2:40:14:B0:07:91:C1:C0:1B:DF:28:8C
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/1-mYbWWixJSyiQBSwB5HBwBvfKIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:800::/24
Signature Algorithm: sha256WithRSAEncryption
22:1e:7d:29:a3:73:97:9b:4d:85:f4:6a:50:da:7d:16:86:92:
02:30:f8:65:31:63:92:04:24:de:4b:c0:be:a6:28:3c:a4:84:
d8:ce:f3:f9:99:d7:e2:ff:00:d7:60:4f:28:e5:27:d4:62:3d:
cc:47:80:9c:f3:da:57:ec:31:93:61:a9:2a:c0:7e:80:90:d6:
73:fa:88:8a:0d:57:22:ea:f4:e7:27:b2:8e:a5:77:02:28:a4:
01:16:b9:07:50:f1:ef:24:6a:cd:d5:a7:60:80:24:2c:db:dc:
63:7b:a7:f4:1f:4d:3d:cb:e3:6e:95:83:e7:8e:6c:b3:ea:ed:
c4:2e:1b:a2:19:f4:7b:73:19:9f:07:fa:9f:53:7d:83:42:b0:
f1:42:d1:16:d1:ac:4c:c5:2a:b9:53:87:dc:16:d4:1e:72:1e:
7b:84:05:a2:bd:23:2d:26:56:e9:a9:4d:2d:54:62:bf:92:61:
3c:65:49:51:8a:fb:83:3f:0a:9a:bc:1a:fe:64:b6:b4:be:27:
5a:e6:65:41:ec:ed:94:1e:da:89:b6:18:ab:4f:81:e6:59:c4:
72:e7:d7:61:22:e1:24:55:5d:b6:b2:3d:93:74:3a:6a:3a:73:
6c:22:86:1a:18:1b:17:6f:4f:83:09:09:c5:c9:15:57:cd:01:
ee:75:11:4b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYvY8bcbAsRPhQXJRhwpMp8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3
NTE1ZDIwHhcNMjMxMTE2MTYyMzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTY2MWI1OTY4YjEyNTJjYTI0MDE0YjAwNzkxYzFjMDFiZGYyODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk77h0b955Nc5J/FpTREzsQZn0wcY
X9bMsqg60J3jrgcDhVWAgSgAuGClAIw48/vbIYCc0vDtuJeWMk7kt8SlCoAMYs4v
zEQiKksZztWavWbBtxoQbx5Bqbp11TA14wUtVm5KpUq5eTXtbfAmC6HgyQgcukGy
Rz5GXHZ3MApydyZkgXkYF2wDY5rf7Tw77nIMFdtQinmsVxHsblz9f2RjmDApOBXy
zkzNUZk4OoVmYQ/1e5Rpva+PZgywKqJxMlgomCe1uGP0B1CHj8j1pZDadvZOdJvd
yzqRt4Z89jo8GDZOWe0FNbJsQ9jQvCenYak3kxjvmsjoR18ihOw9zwEo2wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPpmG1losSUsokAUsAeRwcAb3yiMMB8GA1UdIwQY
MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt
ZWVjNWQ1MGVmYTk0LzEvMS1tWWJXV2l4SlN5aVFCU3dCNUhCd0J2ZktJdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjgvMjllOWJjLWIxOTAtNDA5ZS04NmIwLWVlYzVkNTBlZmE5
NC8xL3M2WFptR1BiTGttMFQyd3lUckJEaVB4MUZkSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAIwBgMEACoBCDAN
BgkqhkiG9w0BAQsFAAOCAQEAIh59KaNzl5tNhfRqUNp9FoaSAjD4ZTFjkgQk3kvA
vqYoPKSE2M7z+ZnX4v8A12BPKOUn1GI9zEeAnPPaV+wxk2GpKsB+gJDWc/qIig1X
Iur05yeyjqV3AiikARa5B1Dx7yRqzdWnYIAkLNvcY3un9B9NPcvjbpWD545ss+rt
xC4bohn0e3MZnwf6n1N9g0Kw8ULRFtGsTMUquVOH3BbUHnIee4QFor0jLSZW6alN
LVRiv5JhPGVJUYr7gz8Kmrwa/mS2tL4nWuZlQeztlB7aibYYq0+B5lnEcufXYSLh
JFVdtrI9k3Q6ajpzbCKGGhgbF29PgwkJxckVV80B7nURSw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:19:36 2025 by rpki-client