Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/LyQ_jufsU8GjjPLEEzXsMiav_ys.roa
File: LyQ_jufsU8GjjPLEEzXsMiav_ys.roa (raw, json)
Hash identifier: fE2T8JmolYqdLMuKveFxrCi8ZPanF5SYjtOfLvRf9NM=
Subject key identifier: 2F:24:3F:8E:E7:EC:53:C1:A3:8C:F2:C4:13:35:EC:32:26:AF:FF:2B
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 018C8CF901C41DB5A24A63A5223AB9BE5DFF
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/LyQ_jufsU8GjjPLEEzXsMiav_ys.roa
Signing time: Thu 21 Dec 2023 15:22:58 +0000
ROA not before: Thu 21 Dec 2023 15:22:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 2a14:4e87:1000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:f9:01:c4:1d:b5:a2:4a:63:a5:22:3a:b9:be:5d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Dec 21 15:22:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f243f8ee7ec53c1a38cf2c41335ec3226afff2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f6:79:a2:07:05:d7:8b:d9:c1:e9:2d:2e:08:
6d:3f:a4:ff:ae:a8:8f:a2:db:c9:74:5e:f9:80:de:
79:f1:fe:5b:af:71:20:c7:51:79:b1:2d:f4:dc:59:
05:3a:d2:c2:8d:e4:6b:b2:57:35:8d:f3:56:fc:40:
db:26:f4:99:bb:a3:40:15:89:bd:75:6f:d5:b5:0e:
20:f1:47:dc:e2:bd:0c:de:5b:e0:0d:41:52:5e:15:
11:81:4f:df:69:7e:88:d8:38:06:07:9f:7c:ac:39:
4c:6e:b5:85:fc:b7:85:67:5e:cd:5a:9e:c9:18:4b:
d1:b7:1c:07:f0:5f:1a:ed:42:e3:d4:df:8a:09:5d:
ba:45:97:e0:a7:f9:46:42:91:60:6c:db:d6:eb:b7:
b9:ff:4e:31:42:6d:6c:26:b8:3e:f0:cb:a8:71:36:
3d:ce:b6:1f:d0:2d:71:83:cb:52:38:e3:7d:4e:49:
65:e0:3d:17:c0:ab:e9:b8:2e:3a:4f:ce:a0:21:df:
12:53:69:61:31:75:97:df:02:bc:37:c5:2e:c8:87:
d4:d5:b5:14:e2:b6:79:a7:71:8b:83:ed:11:fa:e2:
5b:d6:2d:9c:62:82:c7:74:89:eb:dd:78:d8:77:71:
c0:cc:fd:ee:40:59:d8:6f:08:63:38:66:63:14:03:
ec:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:24:3F:8E:E7:EC:53:C1:A3:8C:F2:C4:13:35:EC:32:26:AF:FF:2B
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/LyQ_jufsU8GjjPLEEzXsMiav_ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4e87:1000::/48
Signature Algorithm: sha256WithRSAEncryption
b7:e5:51:d0:d2:45:bd:b8:9c:0e:d7:81:4f:fa:a1:8b:3c:f3:
9e:65:59:1d:bc:f5:35:42:bc:ff:41:7c:66:5b:19:f8:57:73:
2b:45:2d:21:63:cb:51:a8:a2:54:ed:56:58:cf:6d:31:ff:91:
4c:ab:b1:f6:70:09:c0:db:ba:95:cc:0e:f7:7e:15:fa:b6:41:
f9:53:52:90:ac:16:f0:35:0f:96:e7:08:0b:95:56:9a:68:86:
55:af:1b:c7:30:8f:9f:1b:8d:a0:f9:65:7d:34:b6:5a:77:d1:
80:88:2e:6a:e0:81:0a:ff:4a:09:63:4f:68:6a:87:39:bd:d5:
f7:d6:09:7e:42:23:6a:34:b4:a8:2b:68:cb:57:87:7e:7f:be:
46:f6:c8:e6:8f:5b:67:65:69:66:d8:18:39:a7:e7:00:d3:65:
3c:3c:dc:30:d7:f8:f5:eb:f9:3b:8f:8a:c1:96:35:66:53:c9:
4d:5d:a1:4b:46:54:ca:e9:c2:dc:a1:28:05:69:48:92:d0:f5:
ee:ae:a8:ca:2c:35:d5:4d:8d:32:fc:5c:06:8f:ce:e5:38:84:
30:5e:14:24:78:f7:d4:aa:7c:50:2a:9e:64:99:9b:21:f4:65:
1d:3f:a0:f6:8b:52:c1:43:fd:f3:a9:2c:f9:07:df:d8:b5:08:
e3:de:8b:e2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYyM+QHEHbWiSmOlIjq5vl3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNWVkOTkyMWM2M2JmMTBkYjA4NGJhZDMzMmVhOWZmOWY4
MTk5ZTYwHhcNMjMxMjIxMTUyMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjI0M2Y4ZWU3ZWM1M2MxYTM4Y2YyYzQxMzM1ZWMzMjI2YWZmZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/Z5ogcF14vZwektLghtP6T/rqiP
otvJdF75gN558f5br3Egx1F5sS303FkFOtLCjeRrslc1jfNW/EDbJvSZu6NAFYm9
dW/VtQ4g8Ufc4r0M3lvgDUFSXhURgU/faX6I2DgGB598rDlMbrWF/LeFZ17NWp7J
GEvRtxwH8F8a7ULj1N+KCV26RZfgp/lGQpFgbNvW67e5/04xQm1sJrg+8MuocTY9
zrYf0C1xg8tSOON9Tkll4D0XwKvpuC46T86gId8SU2lhMXWX3wK8N8UuyIfU1bUU
4rZ5p3GLg+0R+uJb1i2cYoLHdInr3XjYd3HAzP3uQFnYbwhjOGZjFAPs5wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFC8kP47n7FPBo4zyxBM17DImr/8rMB8GA1UdIwQY
MBaAFF9e2ZIcY78Q2whLrTMuqf+fgZnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEt
ZGYyN2YxMGM3MDk3LzEvTHlRX2p1ZnNVOEdqalBMRUV6WHNNaWF2X3lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEtZGYyN2YxMGM3MDk3
LzEvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhROhxAA
MA0GCSqGSIb3DQEBCwUAA4IBAQC35VHQ0kW9uJwO14FP+qGLPPOeZVkdvPU1Qrz/
QXxmWxn4V3MrRS0hY8tRqKJU7VZYz20x/5FMq7H2cAnA27qVzA73fhX6tkH5U1KQ
rBbwNQ+W5wgLlVaaaIZVrxvHMI+fG42g+WV9NLZad9GAiC5q4IEK/0oJY09oaoc5
vdX31gl+QiNqNLSoK2jLV4d+f75G9sjmj1tnZWlm2Bg5p+cA02U8PNww1/j16/k7
j4rBljVmU8lNXaFLRlTK6cLcoSgFaUiS0PXurqjKLDXVTY0y/FwGj87lOIQwXhQk
ePfUqnxQKp5kmZsh9GUdP6D2i1LBQ/3zqSz5B9/YtQjj3ovi
-----END CERTIFICATE-----
Generated at Sat May 10 04:54:00 2025 by rpki-client