Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2dzVewe97x2mcr73l5JN-vOKaY4.roa
File: 2dzVewe97x2mcr73l5JN-vOKaY4.roa (raw, json)
Hash identifier: l1oTBt62srzB9rZ+lX9VyesE74p9CB3RXmPObW197tQ=
Subject key identifier: D9:DC:D5:7B:07:BD:EF:1D:A6:72:BE:F7:97:92:4D:FA:F3:8A:69:8E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018BA3A1E00A9CC5E481DE800689B23C7E7A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2dzVewe97x2mcr73l5JN-vOKaY4.roa
Signing time: Mon 06 Nov 2023 07:56:16 +0000
ROA not before: Mon 06 Nov 2023 07:56:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8772
IP address blocks: 2a13:9080::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a3:a1:e0:0a:9c:c5:e4:81:de:80:06:89:b2:3c:7e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 6 07:56:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9dcd57b07bdef1da672bef797924dfaf38a698e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:a8:fc:90:f3:ae:d8:fe:b1:55:fc:c4:18:
ff:8c:10:63:65:39:6f:ca:a4:a7:5b:50:43:a9:92:
33:60:a9:4d:89:94:f8:af:28:7a:69:9c:f8:47:bb:
62:c1:92:10:da:9a:8d:66:ad:6b:d2:3a:56:65:e6:
aa:63:0a:a5:d0:6f:51:f4:57:b6:e1:9b:69:20:34:
df:c2:15:c8:b3:30:8a:7a:4e:6b:cc:cb:a3:ab:24:
4f:ae:62:cc:cb:24:c3:a5:5e:82:de:15:e2:a3:86:
80:5d:7b:2b:2e:4d:c3:a9:9b:2a:bf:d6:9f:41:cc:
d6:1c:25:a4:bd:b0:57:54:1d:25:b0:c3:5d:c9:81:
59:b1:af:06:0f:1c:ab:c4:31:43:96:73:32:d4:9f:
4b:a5:d7:40:7e:92:e4:77:f1:fa:27:35:e4:41:64:
72:e9:e8:24:11:e5:d8:f7:ef:f2:2e:fa:cb:a1:b7:
02:b6:8b:d4:8a:ce:53:89:39:54:dc:22:0c:a7:ac:
94:a2:e7:a9:85:35:a4:13:a4:a3:4d:6a:e2:dd:86:
ba:2b:b9:05:3c:aa:5c:66:dc:93:0c:49:3d:d1:36:
ee:45:e9:76:a7:6d:5c:89:f1:b3:89:46:cd:8b:36:
b5:bc:6b:e6:f6:59:29:98:8c:f1:66:fe:cb:26:71:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DC:D5:7B:07:BD:EF:1D:A6:72:BE:F7:97:92:4D:FA:F3:8A:69:8E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2dzVewe97x2mcr73l5JN-vOKaY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9080::/29
Signature Algorithm: sha256WithRSAEncryption
1b:bc:c1:2d:76:27:2b:40:fb:f7:7a:86:13:23:05:ae:f5:35:
3c:fe:27:28:83:5a:2c:7c:23:6f:8e:15:d2:00:58:2a:7a:6c:
e4:5d:65:49:f7:20:9a:8c:e7:00:f8:5f:6d:67:52:d1:b3:63:
49:80:57:00:bf:9f:0f:2b:54:f4:52:15:04:2f:37:17:36:26:
52:e0:3d:19:9b:18:eb:57:66:e8:6d:8d:b0:dd:59:86:e0:9e:
0e:39:af:19:a2:ed:07:1a:de:9a:74:07:38:ca:95:cc:52:16:
57:94:0c:06:ba:f0:5a:26:a0:54:36:2d:78:cf:9b:3b:30:ab:
13:3c:da:1b:6f:cc:95:70:e4:81:fa:bb:7d:c2:03:c4:ce:65:
48:af:47:9c:7b:5c:a0:87:1a:53:e6:17:21:3d:bb:18:2e:6c:
e7:ac:ee:b9:ff:0f:15:8e:5c:37:80:34:79:55:34:5e:6c:a4:
2c:0f:d5:aa:8a:52:0d:95:19:a6:f1:27:f3:d5:c9:8a:11:5d:
02:d3:c0:9b:ad:71:75:a1:99:56:db:f8:b0:87:5a:86:5b:58:
84:bd:e6:b4:5f:fa:77:a4:e9:9d:8c:18:7c:ee:6a:0d:f3:be:
bc:ad:87:7f:27:32:13:33:ac:7e:f8:50:d2:4e:1c:1c:38:6e:
9c:2d:c7:0d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYujoeAKnMXkgd6ABomyPH56MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMxMTA2MDc1NjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWRjZDU3YjA3YmRlZjFkYTY3MmJlZjc5NzkyNGRmYWYzOGE2OThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK6o/JDzrtj+sVX8xBj/jBBjZTlv
yqSnW1BDqZIzYKlNiZT4ryh6aZz4R7tiwZIQ2pqNZq1r0jpWZeaqYwql0G9R9Fe2
4ZtpIDTfwhXIszCKek5rzMujqyRPrmLMyyTDpV6C3hXio4aAXXsrLk3DqZsqv9af
QczWHCWkvbBXVB0lsMNdyYFZsa8GDxyrxDFDlnMy1J9LpddAfpLkd/H6JzXkQWRy
6egkEeXY9+/yLvrLobcCtovUis5TiTlU3CIMp6yUouephTWkE6SjTWri3Ya6K7kF
PKpcZtyTDEk90TbuRel2p21cifGziUbNiza1vGvm9lkpmIzxZv7LJnGO4wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNnc1XsHve8dpnK+95eSTfrzimmOMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvMmR6VmV3ZTk3eDJtY3I3M2w1Sk4tdk9LYVk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhOQgDAN
BgkqhkiG9w0BAQsFAAOCAQEAG7zBLXYnK0D793qGEyMFrvU1PP4nKINaLHwjb44V
0gBYKnps5F1lSfcgmoznAPhfbWdS0bNjSYBXAL+fDytU9FIVBC83FzYmUuA9GZsY
61dm6G2NsN1ZhuCeDjmvGaLtBxremnQHOMqVzFIWV5QMBrrwWiagVDYteM+bOzCr
EzzaG2/MlXDkgfq7fcIDxM5lSK9HnHtcoIcaU+YXIT27GC5s56zuuf8PFY5cN4A0
eVU0XmykLA/VqopSDZUZpvEn89XJihFdAtPAm61xdaGZVtv4sIdahltYhL3mtF/6
d6TpnYwYfO5qDfO+vK2HfycyEzOsfvhQ0k4cHDhunC3HDQ==
-----END CERTIFICATE-----
Generated at Tue May 13 22:09:36 2025 by rpki-client