Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wiq9bmdZDgkRMhOPx4fL2DJ6Tzs.roa
File: wiq9bmdZDgkRMhOPx4fL2DJ6Tzs.roa (raw, json)
Hash identifier: qP95JBaoZm3QyIV64Xb0U8mNMfJEwQoEI+sLWU+Au8w=
Subject key identifier: C2:2A:BD:6E:67:59:0E:09:11:32:13:8F:C7:87:CB:D8:32:7A:4F:3B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 02F0C4CF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wiq9bmdZDgkRMhOPx4fL2DJ6Tzs.roa
Signing time: Thu 28 Apr 2022 10:29:52 +0000
ROA not before: Thu 28 Apr 2022 10:29:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47824
IP address blocks: 2a10:67c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49333455 (0x2f0c4cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 28 10:29:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c22abd6e67590e091132138fc787cbd8327a4f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9b:16:1f:e3:d8:be:e6:30:5d:a7:aa:95:70:
ae:72:d5:a5:b0:b2:b9:74:17:43:de:bf:8a:64:b0:
cf:e4:9f:dd:07:81:ba:8a:e7:a4:e3:89:3a:0c:d3:
52:2f:1c:40:1d:d1:90:72:be:d6:a5:8f:2d:96:1b:
d0:19:0e:b5:78:73:7f:ea:28:d8:b0:b7:df:9a:8a:
8f:c5:21:ac:d8:8f:83:d4:5f:28:94:fd:06:7d:2f:
ae:b4:94:cb:29:a0:29:e2:e3:5c:87:9c:9b:1c:e4:
06:fe:82:8b:7c:b8:7c:11:dc:34:bf:c5:58:08:45:
00:99:7c:cb:1c:3c:63:15:bf:0b:e6:3c:8b:19:a5:
2f:be:00:d7:c6:16:6e:d8:85:90:e4:a4:d3:5e:9f:
58:e4:a8:8d:a2:eb:a2:78:cf:1f:12:34:91:99:0a:
7f:50:6b:e2:a5:cd:8e:3f:ad:02:02:41:e0:51:f9:
a1:f5:92:3f:76:52:c7:f8:57:ed:c3:76:35:fa:7c:
f3:1c:31:6d:4a:f1:7d:9e:da:66:4c:45:e4:ae:6b:
72:73:62:9a:cd:ad:dc:0e:03:b5:b5:86:7e:18:b7:
1e:dc:bf:47:4b:55:fa:77:3e:80:81:b1:7a:f7:d4:
93:b2:6d:cf:70:c0:f3:6e:a6:af:78:46:15:f2:f2:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2A:BD:6E:67:59:0E:09:11:32:13:8F:C7:87:CB:D8:32:7A:4F:3B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wiq9bmdZDgkRMhOPx4fL2DJ6Tzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:67c0::/29
Signature Algorithm: sha256WithRSAEncryption
c8:38:76:f2:3a:f7:a7:83:6f:2d:3b:0b:ac:88:f4:8e:cf:1d:
eb:5b:33:e0:61:e6:a2:23:b3:3e:d1:62:11:ff:56:77:94:e3:
22:3f:6d:f6:06:f5:05:6c:67:a2:03:cf:b9:8c:67:e2:82:60:
bc:a0:11:05:fe:6f:74:76:0e:cf:2f:54:a5:26:a5:14:37:a4:
26:bf:5e:1a:1a:7e:22:37:59:f2:ed:21:05:41:4c:9b:6f:9d:
fc:2a:5d:9b:12:74:39:7f:5e:49:fe:79:3e:18:b7:ac:b3:2f:
ab:a4:39:b1:01:96:25:07:9b:df:0d:54:70:e7:1e:41:ec:31:
87:90:0b:70:6d:29:a7:69:39:c1:f2:6c:47:63:58:e8:04:b8:
ea:28:9f:78:b4:2c:1c:c1:3e:90:5d:37:2a:56:2a:34:53:4e:
21:aa:04:11:f5:e3:7e:5f:1b:b8:87:64:cb:09:2e:90:7e:85:
0a:da:83:74:40:6c:71:27:04:6d:8f:e2:76:95:0e:c5:7b:95:
cd:11:76:de:81:c7:ac:33:43:2e:ae:f6:bc:fd:39:ea:54:10:
bd:1b:69:fb:e4:af:df:54:8f:12:39:4c:2d:26:67:5f:1b:dc:
d8:de:cb:4e:03:29:63:f2:ee:cb:1f:40:76:9e:57:cb:84:70:
73:6c:bf:82
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAvDEzzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDU1OWFhZmJmYzA5MzEyNDJlMWQ2MzcyOThjZjFkZDIyM2U0YzI2MB4XDTIyMDQy
ODEwMjk1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzIyYWJkNmU2NzU5
MGUwOTExMzIxMzhmYzc4N2NiZDgzMjdhNGYzYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN+bFh/j2L7mMF2nqpVwrnLVpbCyuXQXQ96/imSwz+Sf3QeB
uornpOOJOgzTUi8cQB3RkHK+1qWPLZYb0BkOtXhzf+oo2LC335qKj8UhrNiPg9Rf
KJT9Bn0vrrSUyymgKeLjXIecmxzkBv6Ci3y4fBHcNL/FWAhFAJl8yxw8YxW/C+Y8
ixmlL74A18YWbtiFkOSk016fWOSojaLronjPHxI0kZkKf1Br4qXNjj+tAgJB4FH5
ofWSP3ZSx/hX7cN2Nfp88xwxbUrxfZ7aZkxF5K5rcnNims2t3A4DtbWGfhi3Hty/
R0tV+nc+gIGxevfUk7Jtz3DA826mr3hGFfLyzyUCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBTCKr1uZ1kOCREyE4/Hh8vYMnpPOzAfBgNVHSMEGDAWgBR9VZqvv8CTEkLh
1jcpjPHdIj5MJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8x
L3dpcTlibWRaRGdrUk1oT1B4NGZMMkRKNlR6cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
NDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8xL2ZWV2FyN19Ba3hK
QzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoQZ8AwDQYJKoZIhvcNAQELBQAD
ggEBAMg4dvI696eDby07C6yI9I7PHetbM+Bh5qIjsz7RYhH/VneU4yI/bfYG9QVs
Z6IDz7mMZ+KCYLygEQX+b3R2Ds8vVKUmpRQ3pCa/XhoafiI3WfLtIQVBTJtvnfwq
XZsSdDl/Xkn+eT4Yt6yzL6ukObEBliUHm98NVHDnHkHsMYeQC3BtKadpOcHybEdj
WOgEuOoon3i0LBzBPpBdNypWKjRTTiGqBBH1435fG7iHZMsJLpB+hQrag3RAbHEn
BG2P4naVDsV7lc0Rdt6Bx6wzQy6u9rz9OepUEL0bafvkr99UjxI5TC0mZ18b3Nje
y04DKWPy7ssfQHaeV8uEcHNsv4I=
-----END CERTIFICATE-----
Generated at Mon May 12 13:26:36 2025 by rpki-client