Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oYsQ4iKyEzFDLVFaEI7y64rbUAk.roa
File: oYsQ4iKyEzFDLVFaEI7y64rbUAk.roa (raw, json)
Hash identifier: mJaNnHeNDQYvQGMBrJIfXC2NB8djd1ioomkOHMvLPPc=
Subject key identifier: A1:8B:10:E2:22:B2:13:31:43:2D:51:5A:10:8E:F2:EB:8A:DB:50:09
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0189F3384B3999FB7DC19933CC5F42B247FA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oYsQ4iKyEzFDLVFaEI7y64rbUAk.roa
Signing time: Mon 14 Aug 2023 08:44:59 +0000
ROA not before: Mon 14 Aug 2023 08:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198276
IP address blocks: 2a0e:b107:2030::/48 maxlen: 48
2a0e:b107:2035::/48 maxlen: 48
2a0e:b107:2030::/44 maxlen: 48
2a0e:b107:2032::/48 maxlen: 48
2a0e:b107:2034::/48 maxlen: 48
2a0e:b107:2031::/48 maxlen: 48
2a0e:b107:2033::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f3:38:4b:39:99:fb:7d:c1:99:33:cc:5f:42:b2:47:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 14 08:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a18b10e222b21331432d515a108ef2eb8adb5009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:44:4f:90:ed:b4:7d:22:da:3f:40:f5:3b:40:
50:77:90:2c:cb:46:68:95:f8:a6:fc:6d:95:3e:ac:
97:cf:19:5a:78:04:b9:e4:27:e9:23:a7:4f:3b:a5:
f5:7c:af:c8:0f:f2:8d:15:55:80:2b:2f:d1:56:6a:
52:b2:7d:cd:61:11:c0:f5:a5:0e:e0:36:02:fa:37:
c1:e7:aa:ed:b2:cc:8d:d0:49:ca:e1:c2:6a:ef:34:
00:e9:12:d6:a8:90:53:83:d4:a7:9b:fd:32:9d:51:
92:0f:00:17:cc:34:9d:48:34:77:2d:0d:d6:38:5f:
2f:b8:f1:c5:9b:3c:34:8d:0b:01:f7:71:1e:45:e7:
91:fd:29:08:5e:6a:59:64:b2:01:63:53:13:f6:96:
e8:a8:a1:98:91:56:0a:98:bf:ed:90:43:c3:31:1a:
f2:94:49:ea:29:d7:0d:4b:50:30:5c:91:c3:e4:9b:
93:cf:d6:2e:55:1c:46:7d:ef:d1:3a:89:26:62:ca:
02:96:15:d5:f0:13:d5:78:f6:97:4c:1b:df:d4:bd:
91:72:df:05:72:88:2b:10:d7:88:cd:02:83:4a:1f:
bf:49:a8:17:1e:07:15:3c:d7:bd:55:01:a1:2e:7a:
93:a4:3d:71:6e:4c:b8:cc:98:19:91:53:10:85:52:
46:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8B:10:E2:22:B2:13:31:43:2D:51:5A:10:8E:F2:EB:8A:DB:50:09
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oYsQ4iKyEzFDLVFaEI7y64rbUAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2030::/44
Signature Algorithm: sha256WithRSAEncryption
9f:02:14:d3:13:2a:d2:51:e5:c8:9a:f3:67:09:6a:83:c2:77:
7d:dd:26:0a:f1:9a:8b:b7:1c:54:78:c6:cb:98:0c:c4:f6:93:
ff:76:f3:f4:84:1e:55:28:7d:c2:39:06:b0:a2:fd:2d:4c:32:
7b:3c:09:a0:c8:3a:aa:c4:6d:bc:a2:6e:0c:e5:3c:ac:71:03:
33:1d:91:bf:45:4e:06:91:2d:77:92:3e:08:6e:64:16:6f:bc:
6e:73:e1:c1:80:5e:9a:13:b8:14:50:5b:d6:a2:11:9e:1d:7c:
d4:3d:cb:81:f2:b9:b8:a7:4c:a4:6a:7a:04:35:e2:5e:e8:b1:
46:f2:08:71:d4:f3:b7:66:1a:7d:f2:84:7b:de:6b:0f:c3:25:
93:00:54:b8:2e:ff:c7:f5:08:f9:7e:c6:f1:6d:8f:ac:1d:c9:
80:87:8f:11:e3:19:c7:62:f6:f2:87:b3:ef:80:df:a8:1f:49:
32:15:ca:f0:cf:ab:13:90:e4:f8:89:41:1c:a2:be:e1:74:bd:
c7:f1:bb:90:74:d2:0b:bd:66:2c:b5:93:e7:76:34:1e:67:00:
5a:b3:0a:5f:5a:65:5e:be:06:e8:13:4e:ef:40:8a:2f:80:49:
c1:10:2e:d1:2b:29:b4:62:ad:2b:d0:0d:b6:81:6b:96:e5:2b:
21:f7:e6:f0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYnzOEs5mft9wZkzzF9Cskf6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwODE0MDg0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMThiMTBlMjIyYjIxMzMxNDMyZDUxNWExMDhlZjJlYjhhZGI1MDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkRPkO20fSLaP0D1O0BQd5Asy0Zo
lfim/G2VPqyXzxlaeAS55CfpI6dPO6X1fK/ID/KNFVWAKy/RVmpSsn3NYRHA9aUO
4DYC+jfB56rtssyN0EnK4cJq7zQA6RLWqJBTg9Snm/0ynVGSDwAXzDSdSDR3LQ3W
OF8vuPHFmzw0jQsB93EeReeR/SkIXmpZZLIBY1MT9pboqKGYkVYKmL/tkEPDMRry
lEnqKdcNS1AwXJHD5JuTz9YuVRxGfe/ROokmYsoClhXV8BPVePaXTBvf1L2Rct8F
cogrENeIzQKDSh+/SagXHgcVPNe9VQGhLnqTpD1xbky4zJgZkVMQhVJGTQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKGLEOIishMxQy1RWhCO8uuK21AJMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvb1lzUTRpS3lFekZETFZGYUVJN3k2NHJiVUFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xByAw
MA0GCSqGSIb3DQEBCwUAA4IBAQCfAhTTEyrSUeXImvNnCWqDwnd93SYK8ZqLtxxU
eMbLmAzE9pP/dvP0hB5VKH3COQawov0tTDJ7PAmgyDqqxG28om4M5TyscQMzHZG/
RU4GkS13kj4IbmQWb7xuc+HBgF6aE7gUUFvWohGeHXzUPcuB8rm4p0ykanoENeJe
6LFG8ghx1PO3Zhp98oR73msPwyWTAFS4Lv/H9Qj5fsbxbY+sHcmAh48R4xnHYvby
h7PvgN+oH0kyFcrwz6sTkOT4iUEcor7hdL3H8buQdNILvWYstZPndjQeZwBaswpf
WmVevgboE07vQIovgEnBEC7RKym0Yq0r0A22gWuW5Ssh9+bw
-----END CERTIFICATE-----
Generated at Thu Jun 19 22:15:36 2025 by rpki-client