Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/DcG0jKXQEs_OU9ifG4K-YBLsPo4.roa
File: DcG0jKXQEs_OU9ifG4K-YBLsPo4.roa (raw, json)
Hash identifier: /W0Acm9NGFbtqy7Zed52rVM5x4sy7eN9wFZyWxMs76Q=
Subject key identifier: 0D:C1:B4:8C:A5:D0:12:CF:CE:53:D8:9F:1B:82:BE:60:12:EC:3E:8E
Certificate issuer: /CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Certificate serial: 018A40764BE9CCCD03186591C69B8340C738
Authority key identifier: 00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/DcG0jKXQEs_OU9ifG4K-YBLsPo4.roa
Signing time: Tue 29 Aug 2023 08:43:28 +0000
ROA not before: Tue 29 Aug 2023 08:43:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206155
IP address blocks: 2001:678:3cc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:76:4b:e9:cc:cd:03:18:65:91:c6:9b:83:40:c7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Validity
Not Before: Aug 29 08:43:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dc1b48ca5d012cfce53d89f1b82be6012ec3e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:34:ca:ff:f2:04:f1:f3:9d:25:70:bc:1f:
11:da:02:df:b9:c4:05:6d:11:d9:2f:fb:5b:af:06:
3b:2e:49:59:a3:46:60:a7:df:c5:1e:37:6b:06:bd:
92:ed:78:0d:89:33:bf:9c:56:68:48:4e:bd:8d:35:
d7:9d:a1:d7:41:3e:c4:d3:45:b3:ed:44:f3:14:95:
d3:a3:0a:f1:bb:03:3c:34:a3:f7:37:90:5b:c0:f8:
e1:0f:e5:2d:8e:91:56:4a:df:61:5a:89:5c:45:74:
92:09:36:47:d3:ec:09:08:a7:1c:ea:92:2d:da:2f:
02:28:e6:1d:8d:b7:c6:a2:e9:0f:14:0a:6d:88:fe:
c2:7a:73:94:32:be:32:70:6e:a9:6c:df:ad:19:70:
26:91:3d:c0:1b:10:2e:9e:d2:d5:98:cd:ff:ba:27:
b0:0d:2b:0b:6f:df:e6:ab:32:77:9a:04:ba:cf:ea:
4a:a7:61:36:d9:a9:dd:13:bd:df:bc:49:52:d1:2a:
52:ff:6e:b3:c6:e0:f9:11:84:d0:ec:29:fb:c3:41:
cc:41:f5:a6:6b:65:c8:24:af:8c:ad:4e:de:c5:96:
fb:d6:32:5a:1f:51:d6:3b:99:24:ec:28:e2:22:11:
7c:96:88:eb:09:4d:ff:f1:59:eb:ff:7a:19:0b:74:
92:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C1:B4:8C:A5:D0:12:CF:CE:53:D8:9F:1B:82:BE:60:12:EC:3E:8E
X509v3 Authority Key Identifier:
keyid:00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/DcG0jKXQEs_OU9ifG4K-YBLsPo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:3cc::/48
Signature Algorithm: sha256WithRSAEncryption
07:8b:9c:5b:91:42:11:d6:8b:b2:89:0b:03:d9:f0:89:e0:db:
73:89:35:35:1d:84:07:d9:82:04:de:ea:df:fb:07:a8:5a:17:
2b:6b:8b:e1:24:80:4b:84:49:e2:b7:c3:63:09:2f:99:d3:46:
4b:eb:de:9f:f2:ce:5e:0a:e0:b0:6c:f4:00:b8:ec:b0:63:0c:
8a:8d:ac:52:5e:53:69:e0:86:66:f2:a3:bb:71:7b:8c:f7:68:
aa:ab:46:6e:5c:3e:be:08:19:f5:e8:20:08:01:e2:cb:73:f6:
11:f5:4f:d9:2e:5b:0e:f1:f4:2c:b9:ac:e9:16:51:49:a3:82:
ef:03:b9:41:06:6f:b3:54:48:1c:e7:d5:01:b1:68:9e:8c:ce:
36:e2:d6:a8:58:65:51:4e:a3:77:fc:fa:dd:16:c2:33:34:78:
72:98:bd:d3:64:03:af:44:50:d8:30:15:e4:e0:15:44:94:8e:
8b:c2:27:3f:42:a0:10:12:17:53:03:06:84:9f:65:1a:96:b8:
af:86:2b:de:aa:87:a5:f7:dc:ba:1d:8d:8d:07:e0:7b:fe:54:
65:2d:e8:44:94:4e:81:77:89:58:17:75:7a:94:91:d0:66:52:
27:12:8a:cb:a9:26:81:a2:bf:7f:9d:bb:6d:07:26:61:b9:34:
7d:58:82:ae
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYpAdkvpzM0DGGWRxpuDQMc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYjRmZTQzOTRlMzNmYzIyYWM1Y2JiNTQ1ZjljZDEwOTQw
ODc1NjcwHhcNMjMwODI5MDg0MzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGMxYjQ4Y2E1ZDAxMmNmY2U1M2Q4OWYxYjgyYmU2MDEyZWMzZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0as0yv/yBPHznSVwvB8R2gLfucQF
bRHZL/tbrwY7LklZo0Zgp9/FHjdrBr2S7XgNiTO/nFZoSE69jTXXnaHXQT7E00Wz
7UTzFJXTowrxuwM8NKP3N5BbwPjhD+UtjpFWSt9hWolcRXSSCTZH0+wJCKcc6pIt
2i8CKOYdjbfGoukPFAptiP7CenOUMr4ycG6pbN+tGXAmkT3AGxAuntLVmM3/uiew
DSsLb9/mqzJ3mgS6z+pKp2E22andE73fvElS0SpS/26zxuD5EYTQ7Cn7w0HMQfWm
a2XIJK+MrU7exZb71jJaH1HWO5kk7CjiIhF8lojrCU3/8Vnr/3oZC3SSVQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFA3BtIyl0BLPzlPYnxuCvmAS7D6OMB8GA1UdIwQY
MBaAFAC0/kOU4z/CKsXLtUX5zRCUCHVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUxULVE1VGpQOElxeGN1MVJmbk5FSlFJZFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kYmU5MjMtYWFlZi00OTEyLTg0M2Yt
YTRlZmM0M2EwNDc4LzEvRGNHMGpLWFFFc19PVTlpZkc0Sy1ZQkxzUG80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kYmU5MjMtYWFlZi00OTEyLTg0M2YtYTRlZmM0M2EwNDc4
LzEvQUxULVE1VGpQOElxeGN1MVJmbk5FSlFJZFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAPM
MA0GCSqGSIb3DQEBCwUAA4IBAQAHi5xbkUIR1ouyiQsD2fCJ4NtziTU1HYQH2YIE
3urf+weoWhcra4vhJIBLhEnit8NjCS+Z00ZL696f8s5eCuCwbPQAuOywYwyKjaxS
XlNp4IZm8qO7cXuM92iqq0ZuXD6+CBn16CAIAeLLc/YR9U/ZLlsO8fQsuazpFlFJ
o4LvA7lBBm+zVEgc59UBsWiejM424taoWGVRTqN3/PrdFsIzNHhymL3TZAOvRFDY
MBXk4BVElI6Lwic/QqAQEhdTAwaEn2Ualrivhiveqoel99y6HY2NB+B7/lRlLehE
lE6Bd4lYF3V6lJHQZlInEorLqSaBor9/nbttByZhuTR9WIKu
-----END CERTIFICATE-----
Generated at Sat May 10 20:14:55 2025 by rpki-client