Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_-9wGna4PM1DhRYy2vJZoEdOiww.roa
File: _-9wGna4PM1DhRYy2vJZoEdOiww.roa (raw, json)
Hash identifier: 1Lkw09VOS+fEkVLHcZi+LrpE2nA7XAiO08XXoUTyV3w=
Subject key identifier: FF:EF:70:1A:76:B8:3C:CD:43:85:16:32:DA:F2:59:A0:47:4E:8B:0C
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01866AC149933691D16DD4FECC7D788B4D91
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_-9wGna4PM1DhRYy2vJZoEdOiww.roa
Signing time: Sun 19 Feb 2023 17:38:17 +0000
ROA not before: Sun 19 Feb 2023 17:38:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:a780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6a:c1:49:93:36:91:d1:6d:d4:fe:cc:7d:78:8b:4d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Feb 19 17:38:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffef701a76b83ccd43851632daf259a0474e8b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:16:4f:d5:e6:5b:f7:70:f7:33:a2:45:36:
a6:9c:f3:d4:9e:6a:18:fe:a9:4c:73:12:e7:ae:91:
1c:88:42:7e:48:e1:6f:6a:a8:fa:ef:a2:b9:1c:76:
db:98:9c:60:68:32:3c:02:5d:10:e8:b7:05:ac:f4:
34:56:bd:12:82:17:b5:67:3e:3b:eb:e6:54:53:cc:
9d:f3:55:8f:9e:cd:38:b8:fe:67:11:43:0a:3d:5f:
16:7d:fc:6b:f8:76:1e:1f:6d:99:80:d9:6c:11:a4:
5a:8f:0a:c8:e0:c3:cb:b3:1a:58:bf:f9:50:89:41:
53:de:d7:a5:58:15:bd:9b:fb:cb:fd:5c:c7:98:28:
27:30:bf:bb:2f:94:a5:3e:e9:7b:61:24:b9:6d:34:
c0:98:1c:61:37:93:8a:a0:74:61:97:60:b1:f6:be:
3f:c2:9a:ef:1b:59:c9:97:f4:1d:dd:ef:a3:10:4d:
d6:26:b8:44:63:36:26:ab:31:87:07:b6:3f:84:74:
27:87:18:e3:14:83:1f:55:31:f2:5c:dc:28:e0:74:
3a:03:c2:95:ea:ac:76:b5:51:3d:f6:eb:93:bd:6e:
9f:f3:04:ae:0e:ab:83:bf:08:72:2f:87:ab:35:09:
21:24:1c:85:66:67:34:c9:9f:13:96:85:2a:64:b0:
90:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EF:70:1A:76:B8:3C:CD:43:85:16:32:DA:F2:59:A0:47:4E:8B:0C
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_-9wGna4PM1DhRYy2vJZoEdOiww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:a780::/29
Signature Algorithm: sha256WithRSAEncryption
74:51:55:17:4e:05:1e:2a:f0:3d:d5:97:f4:79:db:29:4f:dd:
2a:2a:16:53:ae:f9:d7:37:82:04:20:a4:0b:86:47:47:13:23:
8d:64:61:ee:d2:9f:4a:fb:36:dc:42:97:e3:d2:61:66:8c:fa:
44:52:5d:a0:d6:b1:fc:22:e4:7f:b5:fd:78:cf:9f:ba:57:f7:
0c:51:fc:ef:38:d5:4a:f1:94:c0:ab:ed:29:df:07:88:32:17:
4d:b7:9a:d3:0b:45:a6:b9:17:a6:2f:ad:28:5a:4f:2a:77:55:
18:00:41:d8:6a:48:a6:52:7e:ce:99:87:29:1d:67:83:cd:62:
20:13:6a:3c:60:4b:4f:47:53:e7:01:f0:14:3b:e4:69:85:ac:
0e:fd:30:c1:47:35:11:f4:8b:ce:06:02:39:98:5e:93:5c:43:
df:79:48:0e:88:fa:2b:c4:6c:6a:cb:80:21:91:b1:df:d1:27:
24:49:e1:08:11:05:f8:7d:40:2f:e9:cc:a7:ef:85:51:85:6c:
53:79:b8:ec:2b:46:bc:77:e1:50:88:3d:ef:1b:38:12:f5:99:
64:36:1f:aa:c3:bd:d4:ed:2d:0e:49:a8:c9:a0:a4:88:f3:ce:
e2:0c:5b:e7:8d:79:01:f8:ec:c7:20:52:a2:3f:98:e8:5e:69:
94:19:1e:ef
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYZqwUmTNpHRbdT+zH14i02RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwMjE5MTczODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmVmNzAxYTc2YjgzY2NkNDM4NTE2MzJkYWYyNTlhMDQ3NGU4YjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApucWT9XmW/dw9zOiRTamnPPUnmoY
/qlMcxLnrpEciEJ+SOFvaqj676K5HHbbmJxgaDI8Al0Q6LcFrPQ0Vr0Sghe1Zz47
6+ZUU8yd81WPns04uP5nEUMKPV8Wffxr+HYeH22ZgNlsEaRajwrI4MPLsxpYv/lQ
iUFT3telWBW9m/vL/VzHmCgnML+7L5SlPul7YSS5bTTAmBxhN5OKoHRhl2Cx9r4/
wprvG1nJl/Qd3e+jEE3WJrhEYzYmqzGHB7Y/hHQnhxjjFIMfVTHyXNwo4HQ6A8KV
6qx2tVE99uuTvW6f8wSuDquDvwhyL4erNQkhJByFZmc0yZ8TloUqZLCQ7wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFP/vcBp2uDzNQ4UWMtryWaBHTosMMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvXy05d0duYTRQTTFEaFJZeTJ2SlpvRWRPaXd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhGngDAN
BgkqhkiG9w0BAQsFAAOCAQEAdFFVF04FHirwPdWX9HnbKU/dKioWU6751zeCBCCk
C4ZHRxMjjWRh7tKfSvs23EKX49JhZoz6RFJdoNax/CLkf7X9eM+fulf3DFH87zjV
SvGUwKvtKd8HiDIXTbea0wtFprkXpi+tKFpPKndVGABB2GpIplJ+zpmHKR1ng81i
IBNqPGBLT0dT5wHwFDvkaYWsDv0wwUc1EfSLzgYCOZhek1xD33lIDoj6K8RsasuA
IZGx39EnJEnhCBEF+H1AL+nMp++FUYVsU3m47CtGvHfhUIg97xs4EvWZZDYfqsO9
1O0tDkmoyaCkiPPO4gxb5415AfjsxyBSoj+Y6F5plBke7w==
-----END CERTIFICATE-----
Generated at Wed May 14 18:20:33 2025 by rpki-client