Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/VSLQ-wm0cqqehOgGhTGVA5giWV8.roa
File: VSLQ-wm0cqqehOgGhTGVA5giWV8.roa (raw, json)
Hash identifier: 5zWLslSh8j3hg7QWCA329hIw72Y3UyvV1GHklXBP0i0=
Subject key identifier: 55:22:D0:FB:09:B4:72:AA:9E:84:E8:06:85:31:95:03:98:22:59:5F
Certificate issuer: /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial: 0187040C9A59233CADB9E39A8E12D6FE4BD7
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/VSLQ-wm0cqqehOgGhTGVA5giWV8.roa
Signing time: Tue 21 Mar 2023 12:02:27 +0000
ROA not before: Tue 21 Mar 2023 12:02:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14713
IP address blocks: 2a09:77c0::/30 maxlen: 32
2a09:77c4::/30 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:04:0c:9a:59:23:3c:ad:b9:e3:9a:8e:12:d6:fe:4b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Validity
Not Before: Mar 21 12:02:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5522d0fb09b472aa9e84e806853195039822595f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:c6:9d:e2:ae:8f:28:ff:1b:99:aa:4a:fa:
73:b1:46:c0:60:1a:ee:0b:89:f9:9f:fa:e6:09:fe:
26:49:f6:d3:28:1f:dd:8b:27:bc:b2:5e:e1:ba:b1:
18:1f:c5:63:d7:a6:90:e1:d1:08:27:8d:21:ce:78:
5c:d0:ac:3f:9a:9e:27:17:a0:83:7e:f7:30:f9:2f:
94:04:7c:77:31:4b:44:e0:99:ba:85:ee:e4:d8:54:
eb:f0:e8:4e:ad:9b:3d:b4:32:17:40:b0:65:3c:76:
9f:22:42:30:ef:a5:f6:30:7a:63:fa:f9:43:f0:41:
6a:ee:5b:ef:53:80:f6:13:f8:88:19:53:e0:10:71:
6c:bd:31:43:43:19:77:07:6f:21:ad:44:ae:b0:b9:
cc:00:01:1d:d0:87:df:d9:46:a3:cc:f9:9e:10:af:
58:ff:12:60:b7:64:f1:81:c1:e4:97:1d:f9:52:3a:
60:14:32:b8:83:9d:fe:ce:91:72:60:ad:72:80:b9:
c5:ce:15:cd:c5:a6:ba:95:29:10:6e:30:8c:03:62:
88:cd:86:58:2f:cc:9c:3d:06:c1:cc:fb:7d:1d:97:
8c:2c:93:9c:86:f9:0c:c3:80:96:b2:e1:34:4c:be:
75:fd:77:12:1b:c7:14:79:79:3c:6e:83:38:cd:d4:
52:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:22:D0:FB:09:B4:72:AA:9E:84:E8:06:85:31:95:03:98:22:59:5F
X509v3 Authority Key Identifier:
keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/VSLQ-wm0cqqehOgGhTGVA5giWV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
05:90:9c:a6:f6:da:27:49:98:85:ce:c8:4d:4c:ff:3d:5b:ee:
e2:db:83:87:22:68:63:6d:ae:6f:5c:bd:a2:90:e2:f6:b7:64:
4b:d9:ab:20:81:e5:1f:5d:d3:8c:10:09:e9:44:30:9b:3f:af:
a8:c5:5b:7e:d9:49:a4:78:07:24:f5:b6:e7:30:50:8b:73:e9:
88:06:d5:48:62:48:c9:53:4d:68:11:09:76:78:8d:b9:51:d3:
c5:fa:76:79:c7:fa:d6:7e:4b:5d:cc:70:9b:2d:91:5a:c9:93:
5c:fc:c0:69:08:2f:7f:53:44:08:26:7b:86:91:e0:9b:02:04:
51:d5:7b:19:15:65:4b:66:96:fa:48:89:78:12:1a:cf:aa:2b:
00:4f:fb:fb:a9:37:7d:67:b7:e7:31:7b:0b:80:e0:27:4a:f2:
47:a7:46:b5:3f:07:01:0b:82:53:58:c6:a6:9e:f4:d3:88:84:
c8:34:cf:c1:40:62:35:51:e3:a2:05:7f:17:cf:d1:8a:28:41:
3d:f9:d6:f9:32:08:57:95:31:a9:83:d4:3f:e0:fc:48:15:40:
e8:4d:ad:c0:4c:6d:41:21:35:19:39:64:00:69:82:bc:48:12:
a9:65:0b:a9:60:d7:b0:7d:31:fa:f8:eb:20:99:f0:74:0c:64:
22:73:d7:ed
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYcEDJpZIzytueOajhLW/kvXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOGY5NjFjNmVmYmI3ZjljZTc0MjE3YjFkNWRiYjU0ZTk4
MWM2ZjIwHhcNMjMwMzIxMTIwMjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTIyZDBmYjA5YjQ3MmFhOWU4NGU4MDY4NTMxOTUwMzk4MjI1OTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3HGneKujyj/G5mqSvpzsUbAYBru
C4n5n/rmCf4mSfbTKB/diye8sl7hurEYH8Vj16aQ4dEIJ40hznhc0Kw/mp4nF6CD
fvcw+S+UBHx3MUtE4Jm6he7k2FTr8OhOrZs9tDIXQLBlPHafIkIw76X2MHpj+vlD
8EFq7lvvU4D2E/iIGVPgEHFsvTFDQxl3B28hrUSusLnMAAEd0Iff2UajzPmeEK9Y
/xJgt2TxgcHklx35UjpgFDK4g53+zpFyYK1ygLnFzhXNxaa6lSkQbjCMA2KIzYZY
L8ycPQbBzPt9HZeMLJOchvkMw4CWsuE0TL51/XcSG8cUeXk8boM4zdRSnQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFUi0PsJtHKqnoToBoUxlQOYIllfMB8GA1UdIwQY
MBaAFN+Plhxu+7f5znQhex1du1TpgcbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzQtV0hHNzd0X25PZENGN0hWMjdWT21CeHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85MGU3MGYtODVkYy00NGE5LWJiMjMt
MjdmMmJjMTYyYTA3LzEvVlNMUS13bTBjcXFlaE9nR2hUR1ZBNWdpV1Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi85MGU3MGYtODVkYy00NGE5LWJiMjMtMjdmMmJjMTYyYTA3
LzEvMzQtV0hHNzd0X25PZENGN0hWMjdWT21CeHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgl3wDAN
BgkqhkiG9w0BAQsFAAOCAQEABZCcpvbaJ0mYhc7ITUz/PVvu4tuDhyJoY22ub1y9
opDi9rdkS9mrIIHlH13TjBAJ6UQwmz+vqMVbftlJpHgHJPW25zBQi3PpiAbVSGJI
yVNNaBEJdniNuVHTxfp2ecf61n5LXcxwmy2RWsmTXPzAaQgvf1NECCZ7hpHgmwIE
UdV7GRVlS2aW+kiJeBIaz6orAE/7+6k3fWe35zF7C4DgJ0ryR6dGtT8HAQuCU1jG
pp7004iEyDTPwUBiNVHjogV/F8/RiihBPfnW+TIIV5UxqYPUP+D8SBVA6E2twExt
QSE1GTlkAGmCvEgSqWULqWDXsH0x+vjrIJnwdAxkInPX7Q==
-----END CERTIFICATE-----
Generated at Tue May 6 21:08:38 2025 by rpki-client