Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/sA2urQjce3fFEAe_9hMVqLAoEic.roa
File: sA2urQjce3fFEAe_9hMVqLAoEic.roa (raw, json)
Hash identifier: N7W5h2IJemAY/FckHi/Ve2Gq52aNOiA0NGoNayOVmgE=
Subject key identifier: B0:0D:AE:AD:08:DC:7B:77:C5:10:07:BF:F6:13:15:A8:B0:28:12:27
Certificate issuer: /CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Certificate serial: 18DC95D0
Authority key identifier: E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/sA2urQjce3fFEAe_9hMVqLAoEic.roa
Signing time: Sat 01 Jan 2022 03:52:06 +0000
ROA not before: Sat 01 Jan 2022 03:52:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1103
IP address blocks: 2001:67c:262c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417109456 (0x18dc95d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8965057f4aa099b0a919f3f0bd4a6488e30c348
Validity
Not Before: Jan 1 03:52:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b00daead08dc7b77c51007bff61315a8b0281227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:ef:1a:4e:b5:b7:62:8e:e7:d9:cc:88:f5:
71:c0:40:6d:be:cb:28:10:99:60:e7:f4:2f:82:02:
ba:93:68:09:67:ee:34:04:2e:e7:20:af:7d:13:49:
55:cb:f3:cf:a3:0a:f6:b7:5c:5e:90:87:71:eb:2a:
6d:e4:15:35:27:8c:5d:9e:e2:7f:fa:41:07:aa:f4:
c3:ce:c3:a2:23:60:30:42:9b:d2:ef:fa:ba:ee:e0:
56:8a:c9:b6:b8:fa:19:6f:31:a2:55:4b:48:e8:45:
f2:c2:84:75:f5:e3:b9:3f:42:16:16:b2:e4:b6:15:
46:ef:f7:4b:36:f3:4b:36:56:82:9f:9a:60:3b:5a:
83:c5:48:57:ae:30:2d:41:e1:69:cd:12:8b:f0:c9:
f4:53:6d:10:9a:e7:41:e7:f0:6c:2c:a1:6d:84:3b:
ee:71:8a:02:22:e8:c4:ae:ac:e4:b0:db:42:c3:ed:
02:1a:26:ef:8a:2d:2b:ea:89:58:d1:95:f0:79:2f:
bd:3e:38:af:03:fe:2a:88:25:9e:48:25:79:e3:34:
bc:9a:95:9c:2c:26:30:9d:73:f3:b0:e7:67:6e:03:
e1:a0:d5:eb:1d:a8:01:00:b0:c6:02:5a:11:e0:3e:
95:6a:0b:4d:d5:19:4e:a4:4a:63:76:f3:36:c4:8d:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0D:AE:AD:08:DC:7B:77:C5:10:07:BF:F6:13:15:A8:B0:28:12:27
X509v3 Authority Key Identifier:
keyid:E8:96:50:57:F4:AA:09:9B:0A:91:9F:3F:0B:D4:A6:48:8E:30:C3:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/sA2urQjce3fFEAe_9hMVqLAoEic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9639b2-a9da-4373-b651-8637abf731f3/1/6JZQV_SqCZsKkZ8_C9SmSI4ww0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:262c::/48
Signature Algorithm: sha256WithRSAEncryption
53:78:e0:c9:4f:c5:39:3c:0a:98:f2:57:1a:9d:65:9f:e0:e9:
ec:7a:cd:57:09:1f:d8:ce:a6:d4:7d:cc:39:da:ed:0c:41:bc:
29:f4:80:c3:68:c4:9b:13:03:ea:b7:a2:b8:8a:42:78:60:3b:
46:31:09:4f:da:66:7e:ac:0f:ae:48:45:f7:78:70:bb:b2:7d:
0f:38:01:a4:83:04:45:93:70:79:d0:3a:a1:4a:79:79:eb:c1:
5a:27:1d:25:39:cc:31:6f:df:4e:c7:6f:15:5c:f9:9d:15:a8:
2e:83:72:47:ef:9c:98:74:af:47:de:ed:de:51:c6:10:e2:bf:
3f:27:f3:92:3b:88:0b:d3:de:6a:ce:1f:b7:6a:ce:9f:5d:18:
53:92:da:bd:5d:0b:63:9d:87:b5:4d:cc:ef:9f:8e:7a:44:31:
59:26:c3:44:70:ff:47:43:22:02:b5:58:14:58:d8:03:5e:92:
39:79:40:0a:9a:06:8f:69:11:bf:13:1c:b0:c1:5d:e2:4a:86:
24:c5:3c:d7:98:5d:f9:fa:8a:9a:04:73:f1:89:82:14:40:bc:
c2:05:9c:be:53:28:7d:8f:25:a1:8a:cf:2c:4b:f8:2d:18:f3:
c9:07:80:59:4c:f9:38:95:f1:63:77:e3:23:03:fe:0c:41:25:
0d:3e:e2:eb
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEGNyV0DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ODk2NTA1N2Y0YWEwOTliMGE5MTlmM2YwYmQ0YTY0ODhlMzBjMzQ4MB4XDTIyMDEw
MTAzNTIwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjAwZGFlYWQwOGRj
N2I3N2M1MTAwN2JmZjYxMzE1YThiMDI4MTIyNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALQg7xpOtbdijufZzIj1ccBAbb7LKBCZYOf0L4ICupNoCWfu
NAQu5yCvfRNJVcvzz6MK9rdcXpCHcesqbeQVNSeMXZ7if/pBB6r0w87DoiNgMEKb
0u/6uu7gVorJtrj6GW8xolVLSOhF8sKEdfXjuT9CFhay5LYVRu/3SzbzSzZWgp+a
YDtag8VIV64wLUHhac0Si/DJ9FNtEJrnQefwbCyhbYQ77nGKAiLoxK6s5LDbQsPt
Ahom74otK+qJWNGV8HkvvT44rwP+KoglnkgleeM0vJqVnCwmMJ1z87DnZ24D4aDV
6x2oAQCwxgJaEeA+lWoLTdUZTqRKY3bzNsSNkRsCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSwDa6tCNx7d8UQB7/2ExWosCgSJzAfBgNVHSMEGDAWgBTollBX9KoJmwqR
nz8L1KZIjjDDSDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZKWlFWX1NxQ1pzS2taOF9DOVNtU0k0d3cwZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzkvOTYzOWIyLWE5ZGEtNDM3My1iNjUxLTg2MzdhYmY3MzFmMy8x
L3NBMnVyUWpjZTNmRkVBZV85aE1WcUxBb0VpYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkv
OTYzOWIyLWE5ZGEtNDM3My1iNjUxLTg2MzdhYmY3MzFmMy8xLzZKWlFWX1NxQ1pz
S2taOF9DOVNtU0k0d3cwZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwmLDANBgkqhkiG9w0BAQsF
AAOCAQEAU3jgyU/FOTwKmPJXGp1ln+Dp7HrNVwkf2M6m1H3MOdrtDEG8KfSAw2jE
mxMD6reiuIpCeGA7RjEJT9pmfqwPrkhF93hwu7J9DzgBpIMERZNwedA6oUp5eevB
WicdJTnMMW/fTsdvFVz5nRWoLoNyR++cmHSvR97t3lHGEOK/PyfzkjuIC9Peas4f
t2rOn10YU5LavV0LY52HtU3M75+OekQxWSbDRHD/R0MiArVYFFjYA16SOXlACpoG
j2kRvxMcsMFd4kqGJMU815hd+fqKmgRz8YmCFEC8wgWcvlMofY8loYrPLEv4LRjz
yQeAWUz5OJXxY3fjIwP+DEElDT7i6w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:44:06 2025 by rpki-client