Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/94qyfb6FdUttqpojryE5UVUb0sE.roa
File: 94qyfb6FdUttqpojryE5UVUb0sE.roa (raw, json)
Hash identifier: z7yrvaC2d50cMfhqTRqtp05+/2FiSr5inxrKzir1iWY=
Subject key identifier: F7:8A:B2:7D:BE:85:75:4B:6D:AA:9A:23:AF:21:39:51:55:1B:D2:C1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018BB8EACC02950A51AD1291C60BA7F55E97
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/94qyfb6FdUttqpojryE5UVUb0sE.roa
Signing time: Fri 10 Nov 2023 11:07:57 +0000
ROA not before: Fri 10 Nov 2023 11:07:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205544
IP address blocks: 2a0f:e6c6:1::/48 maxlen: 48
2a13:e101:1::/48 maxlen: 48
2a0f:e1c0:1::/48 maxlen: 48
2a12:ecc0:1::/48 maxlen: 48
2a13:3380:1::/48 maxlen: 48
2a0f:e6c7:1::/48 maxlen: 48
2a0f:e6c5:1::/48 maxlen: 48
2a13:e100:1::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:ea:cc:02:95:0a:51:ad:12:91:c6:0b:a7:f5:5e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 10 11:07:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f78ab27dbe85754b6daa9a23af213951551bd2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:63:ef:13:fc:7c:0f:a5:37:d5:3d:d8:f8:8b:
f5:fa:b6:1a:f6:a9:b5:c8:39:9f:ef:ce:bd:d4:9e:
7e:e6:b4:d9:72:80:5f:5a:7d:27:bb:c0:b1:97:5e:
68:12:25:0f:60:ef:51:99:ae:38:34:11:88:3d:e3:
95:9c:2b:a7:10:7b:bd:ae:9d:bd:0b:ea:1f:07:27:
01:a4:5a:59:75:52:92:7b:20:8d:e8:8e:48:d2:a8:
87:08:b3:8a:f8:5c:6f:a3:d1:84:55:2f:8c:a2:cf:
3f:37:7d:55:b8:82:fd:6c:65:52:df:4d:88:fc:64:
32:a4:40:c9:8c:d0:0f:f8:fc:7a:3a:b5:52:ff:b5:
27:a2:71:64:88:43:66:56:4e:51:7c:52:7b:4b:bd:
40:fd:1f:2a:47:85:38:2d:8d:c4:7b:28:9b:13:f3:
05:89:32:c5:95:41:54:e9:09:1d:8d:b8:d0:37:5b:
ee:41:8d:ad:6e:45:7b:01:9b:77:96:2c:b3:7f:e1:
0a:5c:b1:be:75:a0:b9:83:7a:f9:f2:d5:14:87:07:
43:e1:b4:3a:7e:79:dc:df:af:92:ec:f4:54:08:01:
b3:4f:cf:fc:2a:06:84:e9:30:4e:de:6f:bd:ac:ab:
72:6c:2e:8c:49:68:fd:a9:7c:02:a5:c1:50:7e:6d:
6d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8A:B2:7D:BE:85:75:4B:6D:AA:9A:23:AF:21:39:51:55:1B:D2:C1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/94qyfb6FdUttqpojryE5UVUb0sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e1c0:1::/48
2a0f:e440::/29
2a0f:e6c5:1::/48
2a0f:e6c6:1::/48
2a0f:e6c7:1::/48
2a12:ecc0:1::/48
2a13:3380:1::/48
2a13:e100:1::/48
2a13:e101:1::/48
Signature Algorithm: sha256WithRSAEncryption
44:50:f8:72:36:4a:7d:85:30:61:26:5d:86:39:75:8e:26:2c:
e7:53:67:b3:69:09:34:b5:37:f5:89:41:6f:c8:e0:4f:21:58:
9e:7e:d5:17:3f:8f:5f:92:09:0e:ed:69:74:71:39:b0:63:2b:
87:a7:9e:da:56:18:10:6f:67:a1:3b:16:4f:fe:db:7a:4e:1d:
23:e2:b3:d6:4a:b9:5d:d2:e1:f4:03:d9:ef:a8:40:6c:ef:b7:
26:d1:a8:0f:70:aa:e9:75:65:6d:3a:83:36:01:0a:05:79:19:
c4:98:80:b8:79:0d:07:4b:0d:5c:5f:5c:d6:fa:b3:32:da:7d:
5a:72:ad:3c:1f:bb:b3:1e:dc:51:f9:76:30:14:ba:26:5e:1a:
de:bf:72:48:25:c1:ae:21:14:1d:d7:4e:15:89:b2:ec:fd:1d:
74:a1:ce:5a:a9:74:0a:78:e7:23:c2:2b:5b:d2:91:5f:1b:e9:
4e:d6:9a:c6:dc:61:6f:37:b0:0f:10:74:72:7a:e4:1f:bb:d0:
20:23:e8:62:7e:47:ba:ee:e8:dc:b2:ca:e0:01:02:3d:21:32:
54:11:86:f9:99:a4:60:07:00:d8:be:ac:cf:d9:67:e8:4a:8f:
bf:a2:3b:80:89:4b:6b:ad:ce:61:e7:6e:0a:9c:78:f3:44:9f:
91:68:d2:5d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAYu46swClQpRrRKRxgun9V6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMxMTEwMTEwNzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzhhYjI3ZGJlODU3NTRiNmRhYTlhMjNhZjIxMzk1MTU1MWJkMmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGPvE/x8D6U31T3Y+Iv1+rYa9qm1
yDmf78691J5+5rTZcoBfWn0nu8Cxl15oEiUPYO9Rma44NBGIPeOVnCunEHu9rp29
C+ofBycBpFpZdVKSeyCN6I5I0qiHCLOK+Fxvo9GEVS+Mos8/N31VuIL9bGVS302I
/GQypEDJjNAP+Px6OrVS/7UnonFkiENmVk5RfFJ7S71A/R8qR4U4LY3EeyibE/MF
iTLFlUFU6QkdjbjQN1vuQY2tbkV7AZt3liyzf+EKXLG+daC5g3r58tUUhwdD4bQ6
fnnc36+S7PRUCAGzT8/8KgaE6TBO3m+9rKtybC6MSWj9qXwCpcFQfm1tGQIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFPeKsn2+hXVLbaqaI68hOVFVG9LBMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvOTRxeWZiNkZkVXR0cXBvanJ5RTVVVlViMHNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzBVBAIAAjBPAwcAKg/hwAAB
AwUDKg/kQAMHACoP5sUAAQMHACoP5sYAAQMHACoP5scAAQMHACoS7MAAAQMHACoT
M4AAAQMHACoT4QAAAQMHACoT4QEAATANBgkqhkiG9w0BAQsFAAOCAQEARFD4cjZK
fYUwYSZdhjl1jiYs51Nns2kJNLU39YlBb8jgTyFYnn7VFz+PX5IJDu1pdHE5sGMr
h6ee2lYYEG9noTsWT/7bek4dI+Kz1kq5XdLh9APZ76hAbO+3JtGoD3Cq6XVlbTqD
NgEKBXkZxJiAuHkNB0sNXF9c1vqzMtp9WnKtPB+7sx7cUfl2MBS6Jl4a3r9ySCXB
riEUHddOFYmy7P0ddKHOWql0CnjnI8IrW9KRXxvpTtaaxtxhbzewDxB0cnrkH7vQ
ICPoYn5Huu7o3LLK4AECPSEyVBGG+ZmkYAcA2L6sz9ln6EqPv6I7gIlLa63OYedu
Cpx480SfkWjSXQ==
-----END CERTIFICATE-----
Generated at Thu May 8 20:07:34 2025 by rpki-client