Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iV2DNjLe0QJcqN8t8cr-3Lp3kpU.roa
File: iV2DNjLe0QJcqN8t8cr-3Lp3kpU.roa (raw, json)
Hash identifier: ktM3BIkmuBgRM2kCYRWspnsGNLNJIFcWkh+40Ht0r0I=
Subject key identifier: 89:5D:83:36:32:DE:D1:02:5C:A8:DF:2D:F1:CA:FE:DC:BA:77:92:95
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018676463322345418CB90D5E0B83B21B637
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iV2DNjLe0QJcqN8t8cr-3Lp3kpU.roa
Signing time: Tue 21 Feb 2023 23:19:17 +0000
ROA not before: Tue 21 Feb 2023 23:19:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135073
IP address blocks: 2a0e:2240:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:76:46:33:22:34:54:18:cb:90:d5:e0:b8:3b:21:b6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 21 23:19:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=895d833632ded1025ca8df2df1cafedcba779295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:ca:99:5e:f4:5b:16:21:6b:a3:ae:d4:1f:
c5:8d:93:c9:32:cb:94:7b:b8:68:d6:1f:3d:34:05:
ce:e2:39:c3:ee:d4:f5:e5:d3:e7:72:c1:1d:cb:fc:
38:61:25:72:83:b1:fe:5d:a3:70:6e:b5:0b:fe:be:
f4:6e:ab:e3:50:12:8d:ab:ba:c1:d1:84:ab:bc:40:
40:c9:d8:7b:43:bf:75:93:13:99:fc:db:8e:ab:7f:
b7:58:22:5d:2f:87:ba:48:8b:e5:a1:86:2b:dd:4c:
57:f9:2f:ea:31:97:68:0e:59:77:e7:50:42:68:bd:
5d:f5:c5:29:05:93:65:70:de:a4:d5:84:3f:6d:5e:
ca:c0:5f:cd:d8:39:4e:04:54:aa:88:b9:18:50:b4:
36:8a:e4:3d:32:d5:60:df:a3:9d:52:9e:6a:71:d2:
e0:49:cd:1c:2d:62:90:bc:6f:27:5b:d0:ba:d4:40:
bd:c3:9a:57:90:57:10:b0:b5:d7:cb:3c:78:fd:a3:
1d:14:2c:1b:cf:3c:0a:9d:8a:90:3a:2e:98:2f:cc:
bc:56:60:42:1c:1d:08:8b:22:d1:11:89:a9:64:dc:
1a:f5:97:46:6a:9f:03:53:11:c8:2f:8b:03:25:b8:
7f:0b:12:2e:5b:bc:15:50:63:2b:f9:fa:bc:1d:8d:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5D:83:36:32:DE:D1:02:5C:A8:DF:2D:F1:CA:FE:DC:BA:77:92:95
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iV2DNjLe0QJcqN8t8cr-3Lp3kpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:2240:1::/48
Signature Algorithm: sha256WithRSAEncryption
75:25:10:90:38:c7:de:79:16:d5:90:f4:45:21:05:bc:77:d7:
ac:f6:79:55:cd:f0:7d:d7:c3:5a:10:ea:9f:25:d5:82:1d:85:
9a:f3:08:e2:bc:12:93:f5:5e:ea:5f:19:36:2d:c5:b8:bb:65:
14:1c:1c:8c:69:54:2c:66:1e:97:13:d4:4d:b3:c8:69:11:17:
3b:37:9e:f6:ce:06:15:7b:14:77:70:eb:fa:e7:f1:46:eb:bd:
65:5b:6d:56:70:5b:54:bc:b2:44:7b:98:50:bd:10:4b:37:7c:
62:f0:0d:df:ae:f4:fd:fc:10:57:9b:92:05:78:4d:d5:d2:ee:
00:6a:d3:eb:79:7d:c1:4d:bc:6f:fe:bd:c8:43:b6:ac:bb:56:
d9:ca:04:19:56:9f:af:a7:6c:7c:56:7c:c7:3d:ed:a9:f4:bc:
9d:f4:f0:42:fa:1f:d3:28:c3:0c:91:cc:07:84:37:e4:a0:b1:
25:1f:c3:cb:8a:db:eb:54:fd:b5:c5:0b:7c:73:e9:12:f9:48:
96:b1:15:e4:a7:d0:b9:63:cd:d0:dc:81:11:c9:a0:9e:7f:34:
aa:bf:a5:32:68:9c:19:79:a4:94:63:16:ab:84:50:4c:30:51:
91:da:d0:1e:01:62:72:47:24:e4:a6:20:0e:94:16:00:b7:c6:
2a:a4:88:fb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYZ2RjMiNFQYy5DV4Lg7IbY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwMjIxMjMxOTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTVkODMzNjMyZGVkMTAyNWNhOGRmMmRmMWNhZmVkY2JhNzc5Mjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpXKmV70WxYha6Ou1B/FjZPJMsuU
e7ho1h89NAXO4jnD7tT15dPncsEdy/w4YSVyg7H+XaNwbrUL/r70bqvjUBKNq7rB
0YSrvEBAydh7Q791kxOZ/NuOq3+3WCJdL4e6SIvloYYr3UxX+S/qMZdoDll351BC
aL1d9cUpBZNlcN6k1YQ/bV7KwF/N2DlOBFSqiLkYULQ2iuQ9MtVg36OdUp5qcdLg
Sc0cLWKQvG8nW9C61EC9w5pXkFcQsLXXyzx4/aMdFCwbzzwKnYqQOi6YL8y8VmBC
HB0IiyLREYmpZNwa9ZdGap8DUxHIL4sDJbh/CxIuW7wVUGMr+fq8HY09uQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIldgzYy3tECXKjfLfHK/ty6d5KVMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvaVYyRE5qTGUwUUpjcU44dDhjci0zTHAza3BVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg4iQAAB
MA0GCSqGSIb3DQEBCwUAA4IBAQB1JRCQOMfeeRbVkPRFIQW8d9es9nlVzfB918Na
EOqfJdWCHYWa8wjivBKT9V7qXxk2LcW4u2UUHByMaVQsZh6XE9RNs8hpERc7N572
zgYVexR3cOv65/FG671lW21WcFtUvLJEe5hQvRBLN3xi8A3frvT9/BBXm5IFeE3V
0u4AatPreX3BTbxv/r3IQ7asu1bZygQZVp+vp2x8VnzHPe2p9Lyd9PBC+h/TKMMM
kcwHhDfkoLElH8PLitvrVP21xQt8c+kS+UiWsRXkp9C5Y83Q3IERyaCefzSqv6Uy
aJwZeaSUYxarhFBMMFGR2tAeAWJyRyTkpiAOlBYAt8YqpIj7
-----END CERTIFICATE-----
Generated at Mon May 12 07:28:01 2025 by rpki-client