Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Z6s3IJl42Pm7skH5xDpkBXkRWYw.roa
File: Z6s3IJl42Pm7skH5xDpkBXkRWYw.roa (raw, json)
Hash identifier: E8xBFQMb8BjGQSMPLUBTthjrLaNI20GMRlqyHXckoGw=
Subject key identifier: 67:AB:37:20:99:78:D8:F9:BB:B2:41:F9:C4:3A:64:05:79:11:59:8C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018244E215050FAE7E5F4BFB064389348885
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Z6s3IJl42Pm7skH5xDpkBXkRWYw.roa
Signing time: Thu 28 Jul 2022 12:57:23 +0000
ROA not before: Thu 28 Jul 2022 12:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201814
IP address blocks: 2a0f:e940::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:44:e2:15:05:0f:ae:7e:5f:4b:fb:06:43:89:34:88:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 28 12:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67ab37209978d8f9bbb241f9c43a64057911598c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f3:01:dd:b6:23:cb:5d:7e:fa:a9:74:1d:94:
de:47:b4:54:5b:65:44:c0:8d:9f:81:e2:33:44:7f:
8b:e4:11:b4:c2:50:ea:83:82:1f:76:8b:f5:ca:64:
c2:65:c0:66:af:33:55:dd:34:3b:30:14:cf:16:95:
06:1c:ff:6a:09:60:61:dc:bf:1d:68:13:cb:cf:e8:
dc:c2:57:9e:cb:cc:94:21:5f:dd:be:35:8b:4b:9a:
69:42:56:ee:9b:73:3a:b6:ce:34:83:7c:e6:02:95:
36:27:e2:03:aa:32:ea:54:d1:73:a6:c3:16:33:09:
cc:f7:47:f3:f0:2e:51:00:fd:24:1b:bb:98:66:af:
25:1c:cf:c1:6f:94:67:c9:18:15:9d:53:60:60:5d:
28:d4:14:7e:10:fb:42:d9:32:34:31:f1:00:9f:36:
06:9f:a5:1b:84:e9:a6:22:7b:d1:05:1e:0f:bd:90:
45:17:e2:b3:f4:41:d6:eb:a8:1e:ef:f4:cd:a2:d5:
3f:7d:8f:80:83:cb:50:db:94:f7:f0:f3:fc:b3:7e:
e5:bb:66:53:c4:fc:6b:8f:ed:a6:2d:7c:59:e5:c0:
57:fc:88:4e:5e:e8:97:fc:da:cb:20:96:e6:fc:68:
98:b6:8c:1b:bc:37:af:e0:5d:62:65:29:63:2b:c6:
2d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AB:37:20:99:78:D8:F9:BB:B2:41:F9:C4:3A:64:05:79:11:59:8C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Z6s3IJl42Pm7skH5xDpkBXkRWYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e940::/29
Signature Algorithm: sha256WithRSAEncryption
06:24:ec:01:17:f0:e3:78:f7:11:14:4a:79:bb:ab:49:38:4e:
e6:b5:f8:88:6a:04:ff:10:8f:6a:4f:9c:14:10:4f:0a:47:31:
9a:26:3f:1f:19:0a:b3:65:18:2c:23:2a:36:45:26:d8:e6:ef:
1a:0b:e5:4f:cd:19:76:6b:bd:47:29:30:9d:87:c1:b1:2f:6c:
68:9f:dd:d2:ba:9b:9d:3a:50:70:ee:48:49:06:32:73:a2:29:
a4:2f:fc:0e:26:e8:16:6d:15:ce:60:b0:17:29:71:98:90:93:
9e:fc:89:1a:e1:18:f9:9f:f0:d5:c2:ca:0d:7b:7d:a5:84:48:
8f:98:9d:86:53:96:9a:55:3f:68:aa:79:39:78:f5:d6:98:39:
fe:b3:52:57:48:43:79:d3:1e:36:67:bf:90:55:75:10:58:0f:
5a:0b:75:75:58:d0:0e:30:59:92:b5:72:ee:5e:80:a4:8e:90:
99:47:71:58:a4:14:d8:36:4f:77:a7:31:38:b9:06:87:7d:b9:
45:6d:fc:46:ca:17:d3:c7:fb:8e:92:0a:32:f9:ea:e5:d7:9d:
67:58:75:4f:e0:6b:ed:8c:c1:a2:19:61:7d:ef:d0:39:77:21:
6d:39:40:9a:06:dd:cd:60:84:7d:de:1a:fc:90:be:9d:1a:50:
26:90:6c:2c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYJE4hUFD65+X0v7BkOJNIiFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjIwNzI4MTI1NzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2FiMzcyMDk5NzhkOGY5YmJiMjQxZjljNDNhNjQwNTc5MTE1OThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvMB3bYjy11++ql0HZTeR7RUW2VE
wI2fgeIzRH+L5BG0wlDqg4Ifdov1ymTCZcBmrzNV3TQ7MBTPFpUGHP9qCWBh3L8d
aBPLz+jcwleey8yUIV/dvjWLS5ppQlbum3M6ts40g3zmApU2J+IDqjLqVNFzpsMW
MwnM90fz8C5RAP0kG7uYZq8lHM/Bb5RnyRgVnVNgYF0o1BR+EPtC2TI0MfEAnzYG
n6UbhOmmInvRBR4PvZBFF+Kz9EHW66ge7/TNotU/fY+Ag8tQ25T38PP8s37lu2ZT
xPxrj+2mLXxZ5cBX/IhOXuiX/NrLIJbm/GiYtowbvDev4F1iZSljK8YtEQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGerNyCZeNj5u7JB+cQ6ZAV5EVmMMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvWjZzM0lKbDQyUG03c2tINXhEcGtCWGtSV1l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg/pQDAN
BgkqhkiG9w0BAQsFAAOCAQEABiTsARfw43j3ERRKeburSThO5rX4iGoE/xCPak+c
FBBPCkcxmiY/HxkKs2UYLCMqNkUm2ObvGgvlT80Zdmu9RykwnYfBsS9saJ/d0rqb
nTpQcO5ISQYyc6IppC/8DiboFm0VzmCwFylxmJCTnvyJGuEY+Z/w1cLKDXt9pYRI
j5idhlOWmlU/aKp5OXj11pg5/rNSV0hDedMeNme/kFV1EFgPWgt1dVjQDjBZkrVy
7l6ApI6QmUdxWKQU2DZPd6cxOLkGh325RW38RsoX08f7jpIKMvnq5dedZ1h1T+Br
7YzBohlhfe/QOXchbTlAmgbdzWCEfd4a/JC+nRpQJpBsLA==
-----END CERTIFICATE-----
Generated at Sun May 11 03:56:32 2025 by rpki-client