Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_XeALoC7OE_oj_cBEJJ7KaEMQHU.roa
File: _XeALoC7OE_oj_cBEJJ7KaEMQHU.roa (raw, json)
Hash identifier: x9Rkpir5wynG15WRmxsP1YKZUvzZAbdKZPqnxzB+74g=
Subject key identifier: FD:77:80:2E:80:BB:38:4F:E8:8F:F7:01:10:92:7B:29:A1:0C:40:75
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01C43830
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_XeALoC7OE_oj_cBEJJ7KaEMQHU.roa
Signing time: Sun 06 Feb 2022 15:48:34 +0000
ROA not before: Sun 06 Feb 2022 15:48:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209968
IP address blocks: 2a0f:1e85::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29636656 (0x1c43830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 6 15:48:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd77802e80bb384fe88ff70110927b29a10c4075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:83:42:25:47:1e:aa:a5:b7:b3:9d:c6:b0:25:
8e:8c:68:95:28:5d:70:57:43:94:3d:8a:ba:34:e4:
0d:70:1b:06:ce:03:64:12:0d:9a:86:3a:d7:ac:2e:
07:8b:cb:83:a4:4c:dc:98:57:b5:4c:78:98:26:6c:
38:93:94:e4:6a:5e:d8:20:b3:e9:8b:72:f7:f7:79:
73:bf:e6:82:d8:0c:fb:93:a2:3c:4d:e8:e6:b5:e1:
5a:64:97:44:15:f4:49:56:80:98:6e:06:e4:a8:1f:
b7:49:b5:b2:5b:3e:f6:cd:55:0e:35:cf:55:d2:27:
77:12:22:b9:a1:c3:d2:3d:32:dc:0f:86:cc:91:21:
de:a3:f0:c1:69:ff:95:8f:e0:1d:44:f6:5b:9b:af:
13:ff:2e:cb:57:88:d3:e3:f3:b8:87:37:c4:a5:c5:
3e:8f:a3:b9:97:9e:82:25:04:36:b5:f2:33:fe:50:
96:8a:ab:d0:73:73:09:1d:cb:a6:2b:3c:f7:ba:79:
7e:c4:ee:b8:fc:5d:e1:cb:f3:fe:05:ae:45:0c:c7:
7b:a6:7a:bf:c3:da:3d:28:f3:73:69:01:8d:53:18:
2e:03:7d:81:a5:a2:9a:b9:d2:c4:5f:e0:9d:34:0b:
12:ce:a6:68:07:cf:cb:88:ad:d6:e3:b5:4e:79:f9:
6d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:77:80:2E:80:BB:38:4F:E8:8F:F7:01:10:92:7B:29:A1:0C:40:75
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_XeALoC7OE_oj_cBEJJ7KaEMQHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1e85::/32
Signature Algorithm: sha256WithRSAEncryption
07:6b:1c:93:a2:51:24:81:f7:6e:dc:66:9d:45:35:66:ce:00:
96:9e:d7:25:57:a5:4e:af:81:2d:6f:04:e0:ed:a9:98:9c:d4:
c8:25:4d:97:18:fe:aa:1d:d6:fc:55:04:29:df:7e:bd:4f:32:
20:e2:ed:83:7b:5c:f1:82:73:b2:51:76:8d:26:d1:d4:23:30:
2e:94:13:26:b2:ab:46:17:f3:53:67:bc:9b:8e:20:f5:e9:3d:
0e:71:ca:ca:d1:43:7b:89:1c:ac:96:e5:8a:b3:2b:de:e6:0f:
7c:5d:aa:30:74:15:4c:58:09:a6:82:13:63:fd:89:72:ff:53:
57:b7:b4:cc:b7:25:75:75:9e:af:23:ce:67:2d:b7:f0:6f:5e:
87:f4:8c:02:1d:67:09:c7:0b:b5:27:1d:cc:6a:41:8f:c8:10:
99:db:b7:82:82:74:f2:d8:06:2a:ea:ae:45:93:0d:af:24:5b:
27:b7:85:d7:45:7f:f4:14:5e:a4:0b:3e:14:5a:0c:79:34:a7:
14:96:22:cc:d7:16:bb:c8:ca:f8:ea:76:de:dd:b1:8c:9e:e6:
b9:0a:9e:91:46:0e:67:1d:55:18:26:4e:de:dd:e8:48:cc:c3:
0f:05:21:ab:e1:ed:e0:12:28:35:df:4a:c7:57:cc:1b:fd:ca:
40:fd:c1:55
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAcQ4MDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDU1OWFhZmJmYzA5MzEyNDJlMWQ2MzcyOThjZjFkZDIyM2U0YzI2MB4XDTIyMDIw
NjE1NDgzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmQ3NzgwMmU4MGJi
Mzg0ZmU4OGZmNzAxMTA5MjdiMjlhMTBjNDA3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMCDQiVHHqqlt7OdxrAljoxolShdcFdDlD2KujTkDXAbBs4D
ZBINmoY616wuB4vLg6RM3JhXtUx4mCZsOJOU5Gpe2CCz6Yty9/d5c7/mgtgM+5Oi
PE3o5rXhWmSXRBX0SVaAmG4G5Kgft0m1sls+9s1VDjXPVdIndxIiuaHD0j0y3A+G
zJEh3qPwwWn/lY/gHUT2W5uvE/8uy1eI0+PzuIc3xKXFPo+juZeegiUENrXyM/5Q
loqr0HNzCR3Lpis897p5fsTuuPxd4cvz/gWuRQzHe6Z6v8PaPSjzc2kBjVMYLgN9
gaWimrnSxF/gnTQLEs6maAfPy4it1uO1Tnn5bd8CAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT9d4AugLs4T+iP9wEQknspoQxAdTAfBgNVHSMEGDAWgBR9VZqvv8CTEkLh
1jcpjPHdIj5MJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8x
L19YZUFMb0M3T0Vfb2pfY0JFSko3S2FFTVFIVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
NDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8xL2ZWV2FyN19Ba3hK
QzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoPHoUwDQYJKoZIhvcNAQELBQAD
ggEBAAdrHJOiUSSB927cZp1FNWbOAJae1yVXpU6vgS1vBODtqZic1MglTZcY/qod
1vxVBCnffr1PMiDi7YN7XPGCc7JRdo0m0dQjMC6UEyayq0YX81NnvJuOIPXpPQ5x
ysrRQ3uJHKyW5YqzK97mD3xdqjB0FUxYCaaCE2P9iXL/U1e3tMy3JXV1nq8jzmct
t/BvXof0jAIdZwnHC7UnHcxqQY/IEJnbt4KCdPLYBirqrkWTDa8kWye3hddFf/QU
XqQLPhRaDHk0pxSWIszXFrvIyvjqdt7dsYye5rkKnpFGDmcdVRgmTt7d6EjMww8F
Iavh7eASKDXfSsdXzBv9ykD9wVU=
-----END CERTIFICATE-----
Generated at Thu May 8 22:13:17 2025 by rpki-client