Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIjcajjMk3fDqj4yxesangwqotE.roa
File: TIjcajjMk3fDqj4yxesangwqotE.roa (raw, json)
Hash identifier: I255xDGuNa05mzZr4BHtQIi8vZJmWVsyjaqJs4aUMvo=
Subject key identifier: 4C:88:DC:6A:38:CC:93:77:C3:AA:3E:32:C5:EB:1A:9E:0C:2A:A2:D1
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 01892612EB91FECEE35FC25E174829422F9C
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIjcajjMk3fDqj4yxesangwqotE.roa
Signing time: Wed 05 Jul 2023 12:42:01 +0000
ROA not before: Wed 05 Jul 2023 12:42:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a13:85c0::/40 maxlen: 40
2a13:85c0:100::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:12:eb:91:fe:ce:e3:5f:c2:5e:17:48:29:42:2f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Jul 5 12:42:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c88dc6a38cc9377c3aa3e32c5eb1a9e0c2aa2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1c:49:9f:72:83:2c:fd:cc:e6:1e:1f:9b:3c:
c8:3c:4d:8a:94:2d:99:57:1f:10:be:78:5a:be:f7:
2d:97:96:64:be:a7:9b:ed:19:05:dd:be:99:de:ae:
df:14:c8:6b:44:cd:7e:27:ea:5b:50:7e:ef:41:3a:
1d:4e:ea:9b:ec:b4:47:b5:92:e9:6f:02:2f:d3:96:
12:3b:92:e7:56:dd:80:de:84:aa:2f:6c:c7:ef:92:
c5:71:af:10:62:65:ee:9c:02:2d:7f:ce:c1:01:44:
d3:eb:65:3c:32:c7:82:8b:1b:73:44:02:6c:d4:92:
d1:10:f6:92:e0:c3:fc:28:3c:58:0d:4a:68:59:04:
42:f5:c4:1e:37:5c:8c:87:fe:ca:76:86:90:25:f8:
51:54:d1:90:07:c1:d0:51:65:d3:75:61:94:7e:e4:
0e:44:1c:cd:9c:d5:03:5d:e6:b9:47:77:c4:92:d5:
89:b0:57:d9:76:c5:eb:10:14:2f:29:f4:c7:6c:db:
e9:f9:b6:bd:75:af:6f:81:2a:18:ab:f3:3d:ad:c6:
dd:01:af:2e:07:e4:2b:0c:d0:79:ec:e7:6f:c9:fd:
fd:13:ae:8d:82:b2:b5:37:2f:bf:21:0e:e5:a3:a9:
5b:fc:9d:4c:5e:65:04:74:f6:fc:f0:60:3d:65:65:
93:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:88:DC:6A:38:CC:93:77:C3:AA:3E:32:C5:EB:1A:9E:0C:2A:A2:D1
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIjcajjMk3fDqj4yxesangwqotE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:85c0::/39
Signature Algorithm: sha256WithRSAEncryption
8c:39:06:98:a3:3f:f6:d2:46:ef:b3:da:78:5d:39:03:25:e1:
e8:b5:79:fc:31:30:ef:7f:30:b2:d7:b2:3a:1b:e2:a2:74:8d:
c0:63:7a:f9:98:8d:21:d7:80:2f:76:f0:2f:6f:70:6f:ce:d2:
d7:e5:a1:4d:3b:e1:38:c4:e6:69:27:e0:5c:96:43:fc:58:29:
d8:67:70:b6:c3:c8:32:80:94:fc:d3:73:66:c8:db:1a:fb:8a:
12:4c:0c:02:16:f6:a8:35:a5:e2:5d:60:53:fd:88:8a:d6:96:
d4:b6:1e:19:69:df:6e:54:04:9a:0c:67:94:c7:f6:a2:32:c9:
71:c7:70:69:c4:2c:9a:06:9c:80:91:eb:05:b1:d8:17:eb:9b:
bf:14:15:eb:0e:ae:e8:c5:bb:73:51:30:4b:ea:39:bd:47:aa:
54:cb:5d:8c:0e:e7:07:2f:92:c7:a6:d9:13:99:cb:0d:ab:a1:
d8:7e:44:d6:95:47:cd:fc:a8:e6:fe:27:4f:86:bf:c3:0b:55:
96:b4:68:16:cb:64:2f:ab:7d:c8:61:3f:2f:fc:df:cf:37:98:
3d:53:24:d3:e9:b3:bc:19:dd:08:58:54:74:f2:a1:34:32:e4:
d9:41:ac:37:58:db:3a:b3:6d:a4:4f:7f:11:2b:87:45:29:15:
f3:6c:46:e5
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYkmEuuR/s7jX8JeF0gpQi+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODEyNzNkY2IwM2MzNDU3Yjc5MjUwYmUxMDllMTlhNWU3
NGYwZmQwHhcNMjMwNzA1MTI0MjAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yzg4ZGM2YTM4Y2M5Mzc3YzNhYTNlMzJjNWViMWE5ZTBjMmFhMmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBxJn3KDLP3M5h4fmzzIPE2KlC2Z
Vx8Qvnhavvctl5Zkvqeb7RkF3b6Z3q7fFMhrRM1+J+pbUH7vQTodTuqb7LRHtZLp
bwIv05YSO5LnVt2A3oSqL2zH75LFca8QYmXunAItf87BAUTT62U8MseCixtzRAJs
1JLREPaS4MP8KDxYDUpoWQRC9cQeN1yMh/7KdoaQJfhRVNGQB8HQUWXTdWGUfuQO
RBzNnNUDXea5R3fEktWJsFfZdsXrEBQvKfTHbNvp+ba9da9vgSoYq/M9rcbdAa8u
B+QrDNB57Odvyf39E66NgrK1Ny+/IQ7lo6lb/J1MXmUEdPb88GA9ZWWTZQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFEyI3Go4zJN3w6o+MsXrGp4MKqLRMB8GA1UdIwQY
MBaAFEyBJz3LA8NFe3klC+EJ4ZpedPD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xOGM3ZGQtMjQxYi00YjkyLThlYmYt
Nzc3OTRmYmZkMmU0LzEvVElqY2Fqak1rM2ZEcWo0eXhlc2FuZ3dxb3RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xOGM3ZGQtMjQxYi00YjkyLThlYmYtNzc3OTRmYmZkMmU0
LzEvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKhOFwAAw
DQYJKoZIhvcNAQELBQADggEBAIw5BpijP/bSRu+z2nhdOQMl4ei1efwxMO9/MLLX
sjob4qJ0jcBjevmYjSHXgC928C9vcG/O0tfloU074TjE5mkn4FyWQ/xYKdhncLbD
yDKAlPzTc2bI2xr7ihJMDAIW9qg1peJdYFP9iIrWltS2Hhlp325UBJoMZ5TH9qIy
yXHHcGnELJoGnICR6wWx2Bfrm78UFesOrujFu3NRMEvqOb1HqlTLXYwO5wcvksem
2ROZyw2rodh+RNaVR838qOb+J0+Gv8MLVZa0aBbLZC+rfchhPy/83883mD1TJNPp
s7wZ3QhYVHTyoTQy5NlBrDdY2zqzbaRPfxErh0UpFfNsRuU=
-----END CERTIFICATE-----
Generated at Wed May 7 22:12:36 2025 by rpki-client