Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ejhosfyy1isMNECz6GhNfSxMfCI.roa
File: Ejhosfyy1isMNECz6GhNfSxMfCI.roa (raw, json)
Hash identifier: U54RsafI0zeG2tw8qYjBAc9h2fZd1x6ESwoYbtO1urE=
Subject key identifier: 12:38:68:B1:FC:B2:D6:2B:0C:34:40:B3:E8:68:4D:7D:2C:4C:7C:22
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01890B75CF4F1D3624B96D57CF0F4D312943
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ejhosfyy1isMNECz6GhNfSxMfCI.roa
Signing time: Fri 30 Jun 2023 08:40:17 +0000
ROA not before: Fri 30 Jun 2023 08:40:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200021
IP address blocks: 2a0f:2100::/29 maxlen: 29
2a0e:5a80::/29 maxlen: 29
2a0f:e00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0b:75:cf:4f:1d:36:24:b9:6d:57:cf:0f:4d:31:29:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 30 08:40:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=123868b1fcb2d62b0c3440b3e8684d7d2c4c7c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d3:76:32:4f:b5:90:16:d4:bc:94:da:d9:e2:
15:8b:1d:5c:4c:d2:14:86:41:59:b3:43:f8:e3:a2:
8a:fd:8a:e9:e1:72:d2:22:53:5a:1c:7a:ba:a9:c8:
30:d5:05:13:46:0f:61:d7:53:de:52:dd:d0:34:49:
07:f6:9e:9a:ed:42:27:48:cc:bb:dc:3c:ff:2d:fb:
13:6d:01:f5:9e:03:91:f2:7a:54:e5:49:8c:d1:33:
5d:99:a4:d8:1d:fb:d2:f3:80:09:d4:97:a7:7c:74:
d2:9e:0f:6e:9b:a1:f9:87:77:7b:61:11:88:0e:8b:
b3:61:7f:5f:74:16:87:ea:68:ad:c1:1e:4e:f2:7b:
5c:c5:9b:77:d7:83:1d:14:b7:c0:38:40:c5:6a:35:
d3:4e:4f:33:ed:58:53:e1:92:44:5a:16:77:dc:54:
e7:56:ad:51:98:09:6e:95:12:09:70:ee:d4:44:0a:
89:fb:d1:fa:2b:1c:e9:c9:84:84:5a:76:02:4c:74:
66:52:44:6d:8c:6e:dd:90:f4:97:2a:dd:9d:48:62:
14:44:a1:a1:7b:34:4e:3d:94:e4:ec:5c:c4:ba:a3:
dc:f5:2c:ad:3f:53:6e:62:19:64:5c:bd:c7:c3:93:
82:b8:a2:4f:36:5d:8c:4a:27:04:a7:12:62:4a:73:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:38:68:B1:FC:B2:D6:2B:0C:34:40:B3:E8:68:4D:7D:2C:4C:7C:22
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ejhosfyy1isMNECz6GhNfSxMfCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5a80::/29
2a0f:e00::/29
2a0f:2100::/29
Signature Algorithm: sha256WithRSAEncryption
01:ce:46:93:9d:17:d9:5d:da:b5:31:da:0d:8c:1d:af:ac:3d:
f0:06:fc:e8:d9:26:1b:bc:45:e9:38:88:de:88:3d:03:8a:7b:
65:51:1a:d0:8a:5f:e6:39:70:a0:18:ac:fc:2d:b9:c1:a7:11:
85:1e:83:99:d2:3f:70:79:bb:0c:b9:18:68:2e:6e:4f:6a:91:
9a:42:ab:c7:91:a6:e7:2e:2c:f2:16:8a:04:bc:fe:82:73:e3:
e3:d2:df:50:fe:af:e2:e4:e0:02:3b:f3:e9:7b:9e:7d:90:c5:
f4:60:01:10:24:95:02:7e:2e:92:54:9c:2b:35:f3:bb:ff:79:
c2:e7:a2:c6:7c:2b:de:86:ff:cd:37:f6:5b:ac:ad:e8:75:11:
a1:3d:9f:f4:01:1f:aa:c1:78:ab:3c:86:05:05:76:72:5c:65:
6b:69:0f:30:3c:d9:bb:7c:5d:e9:1f:f0:7a:22:24:4a:65:ed:
04:67:82:46:52:9f:56:0e:7e:9d:2a:dd:6f:ac:4a:8b:aa:3c:
c2:21:5e:29:3b:90:bd:79:91:2d:40:85:44:51:17:81:ec:22:
8b:df:a2:c1:50:28:20:9c:69:56:1c:af:4d:14:5a:8f:26:a4:
3e:08:a1:e6:cd:91:7f:07:63:c0:f3:8c:89:23:64:00:59:38:
d4:d1:08:6a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYkLdc9PHTYkuW1Xzw9NMSlDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwNjMwMDg0MDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjM4NjhiMWZjYjJkNjJiMGMzNDQwYjNlODY4NGQ3ZDJjNGM3YzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktN2Mk+1kBbUvJTa2eIVix1cTNIU
hkFZs0P446KK/Yrp4XLSIlNaHHq6qcgw1QUTRg9h11PeUt3QNEkH9p6a7UInSMy7
3Dz/LfsTbQH1ngOR8npU5UmM0TNdmaTYHfvS84AJ1JenfHTSng9um6H5h3d7YRGI
DouzYX9fdBaH6mitwR5O8ntcxZt314MdFLfAOEDFajXTTk8z7VhT4ZJEWhZ33FTn
Vq1RmAlulRIJcO7URAqJ+9H6KxzpyYSEWnYCTHRmUkRtjG7dkPSXKt2dSGIURKGh
ezROPZTk7FzEuqPc9SytP1NuYhlkXL3Hw5OCuKJPNl2MSicEpxJiSnOvFQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBI4aLH8stYrDDRAs+hoTX0sTHwiMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvRWpob3NmeXkxaXNNTkVDejZHaE5mU3hNZkNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKg5agAMF
AyoPDgADBQMqDyEAMA0GCSqGSIb3DQEBCwUAA4IBAQABzkaTnRfZXdq1MdoNjB2v
rD3wBvzo2SYbvEXpOIjeiD0DintlURrQil/mOXCgGKz8LbnBpxGFHoOZ0j9websM
uRhoLm5PapGaQqvHkabnLizyFooEvP6Cc+Pj0t9Q/q/i5OACO/Ppe559kMX0YAEQ
JJUCfi6SVJwrNfO7/3nC56LGfCvehv/NN/ZbrK3odRGhPZ/0AR+qwXirPIYFBXZy
XGVraQ8wPNm7fF3pH/B6IiRKZe0EZ4JGUp9WDn6dKt1vrEqLqjzCIV4pO5C9eZEt
QIVEUReB7CKL36LBUCggnGlWHK9NFFqPJqQ+CKHmzZF/B2PA84yJI2QAWTjU0Qhq
-----END CERTIFICATE-----
Generated at Thu May 8 16:20:42 2025 by rpki-client