Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/1-5ZDh2BwxruUzVzfllbwKZvETZ0.roa
File: 1-5ZDh2BwxruUzVzfllbwKZvETZ0.roa (raw, json)
Hash identifier: fuFVdRrdfCybMMV0AL56fQyIXUScJfsyT+iFZ3qfhN0=
Subject key identifier: FB:96:43:87:60:70:C6:BB:94:CD:5C:DF:96:56:F0:29:9B:C4:4D:9D
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: DFD9
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/1-5ZDh2BwxruUzVzfllbwKZvETZ0.roa
Signing time: Sun 03 Apr 2022 19:12:48 +0000
ROA not before: Sun 03 Apr 2022 19:12:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 2a12:b840::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57305 (0xdfd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Apr 3 19:12:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb9643876070c6bb94cd5cdf9656f0299bc44d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:0d:0b:ef:f0:e9:30:a2:79:ba:58:3c:26:
46:2b:1c:ea:58:50:c8:7f:1b:24:7e:fd:fe:ec:e9:
e1:c7:4a:2a:09:29:21:bc:e6:92:22:0a:52:6f:d3:
20:97:b2:06:b2:b4:cb:81:95:1b:ae:13:cb:fc:76:
85:9e:ac:47:ed:23:dc:8e:7e:a2:6e:a4:83:13:de:
ea:fe:0c:21:35:e9:82:c0:eb:aa:50:31:e0:ee:9e:
88:10:36:67:c8:99:f6:31:a7:a4:c0:3b:58:ef:84:
67:df:31:c1:2f:44:3c:7f:af:ee:3e:e9:87:08:20:
dc:da:25:3f:37:e8:09:4b:53:36:ec:8e:1e:1f:6a:
45:46:1d:ac:0b:1d:27:2b:88:ff:20:3d:3c:39:f5:
00:90:20:7c:ea:bc:39:d9:4b:0a:d3:04:7d:db:8e:
3a:67:af:38:0b:75:c2:3d:eb:8e:00:bc:07:29:a8:
f3:a7:0c:3a:6c:6c:b6:a8:79:d6:63:57:cf:fe:f9:
89:bb:c2:51:86:ec:0c:f1:c4:8d:3b:93:0d:0c:61:
6e:36:56:c1:a2:82:8c:23:8c:08:94:e7:50:9d:65:
5f:b2:cf:c5:a9:96:51:01:b3:84:d4:ec:12:14:b4:
96:7c:d3:f7:ad:3b:01:c9:31:e4:99:7f:69:91:2d:
a4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:96:43:87:60:70:C6:BB:94:CD:5C:DF:96:56:F0:29:9B:C4:4D:9D
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/1-5ZDh2BwxruUzVzfllbwKZvETZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:b840::/32
Signature Algorithm: sha256WithRSAEncryption
18:b7:58:25:d6:27:52:c7:80:f7:83:1c:62:af:ab:bc:c7:b7:
d9:41:b3:3b:73:f4:de:88:fb:d8:e3:26:88:7b:5c:b5:90:91:
af:b3:b5:30:89:e8:c7:7e:45:c6:f0:c8:12:31:2a:1e:87:d0:
61:07:92:b0:da:33:14:e5:7f:92:8e:43:65:a2:e7:bf:e6:a9:
39:c6:b3:57:2e:73:df:43:4a:c0:a0:0c:71:b3:4d:7e:ec:ce:
f7:b3:cc:7c:fa:42:75:2c:71:23:f3:24:d0:1d:7f:41:17:38:
d7:67:be:c8:f9:e4:89:50:e1:84:5f:41:a2:9b:e4:03:e6:49:
c4:d3:f8:11:19:53:4a:94:bb:d5:c1:5a:d7:86:1b:b8:7c:3c:
0b:df:34:ea:42:e6:75:92:ca:4c:83:52:1b:83:64:ec:6e:bc:
ba:24:21:77:07:39:d1:8d:f7:00:a6:d3:d6:24:fd:05:b0:a5:
a5:fe:2a:40:e3:ef:2d:f5:a2:61:50:6f:7f:f7:f5:c3:f2:26:
f9:44:1e:9e:63:4d:4f:93:cb:71:0f:be:68:96:87:c5:0a:11:
b0:d8:5c:14:17:03:38:47:e4:6d:50:18:6b:64:57:46:e0:6a:
73:6c:b4:5f:d8:cc:84:fc:e7:f9:52:df:7a:45:33:0d:02:2b:
58:74:4a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:38:28 2025 by rpki-client