Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/Tqo27WkC7TkrzK_uHyTIerNH46c.roa
File: Tqo27WkC7TkrzK_uHyTIerNH46c.roa (raw, json)
Hash identifier: Qrb+rrlsZIfAuNZkv+XAcAC78sSsYxR9QST97I5rGxQ=
Subject key identifier: 4E:AA:36:ED:69:02:ED:39:2B:CC:AF:EE:1F:24:C8:7A:B3:47:E3:A7
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 3D4E04D6
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/Tqo27WkC7TkrzK_uHyTIerNH46c.roa
Signing time: Sat 01 Jan 2022 06:55:11 +0000
ROA not before: Sat 01 Jan 2022 06:55:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24940
IP address blocks: 2001:67c:1164::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1028523222 (0x3d4e04d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 1 06:55:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4eaa36ed6902ed392bccafee1f24c87ab347e3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:66:6c:60:ea:42:f0:f7:da:68:d3:d4:ad:df:
41:44:f0:79:75:c3:29:f8:f1:3e:63:9f:f6:d7:d8:
f9:7f:1e:91:01:03:e0:5a:6e:06:a6:6d:e0:1b:f0:
c0:b4:bb:af:88:bb:51:d9:9b:ca:73:13:a0:36:e8:
b1:38:cf:1e:51:33:0b:f4:78:ba:9c:7f:17:59:5c:
1b:32:20:cd:c8:2e:7a:b3:c2:46:3f:a5:05:c9:ec:
a0:06:77:aa:43:44:31:85:50:41:ad:8f:bb:09:cd:
f6:6d:76:b5:31:9d:f2:2e:c1:24:f8:c0:e5:6c:3b:
c4:c2:e4:f9:35:19:0e:bf:b5:c0:d9:3c:bc:be:e7:
86:57:44:bb:93:20:92:8c:d4:94:7d:89:93:da:74:
b8:46:6f:a4:70:cb:01:6f:12:3e:cc:23:3c:ee:4b:
6f:cf:18:b3:81:d4:7c:16:c6:62:de:89:de:4d:ed:
9b:4f:57:03:f6:38:07:51:9b:82:fd:e6:59:6c:22:
b8:4a:e2:a3:d4:66:f5:06:96:12:48:7a:18:bc:7d:
ee:fb:0e:b3:6e:de:00:34:bc:23:2a:23:e0:07:35:
21:af:3a:a5:67:c8:0a:cd:b5:ef:b0:f6:f0:43:5f:
0e:64:6e:57:85:18:d1:7f:46:4a:ae:40:71:29:08:
b1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AA:36:ED:69:02:ED:39:2B:CC:AF:EE:1F:24:C8:7A:B3:47:E3:A7
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/Tqo27WkC7TkrzK_uHyTIerNH46c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1164::/48
Signature Algorithm: sha256WithRSAEncryption
4c:a2:2f:f8:d9:75:c1:0b:b6:43:ce:38:12:0a:d5:68:0c:df:
85:4c:0b:90:35:9b:62:06:9e:8e:b2:fe:a6:00:8f:86:bd:34:
d9:83:31:f7:73:7f:6d:44:3c:48:80:78:9e:b0:e0:27:32:cd:
7c:ed:58:7c:79:32:94:11:d8:31:3f:c9:d7:f7:aa:d3:19:bc:
a0:a8:77:63:1c:7a:49:ee:65:24:77:cc:02:c5:81:c4:b8:c3:
98:1f:0f:41:f1:f5:f3:2b:40:cf:b7:20:89:ec:33:b4:45:82:
d3:a9:87:73:c4:b0:53:25:05:ad:b0:83:16:3f:c3:35:35:b8:
2b:6a:23:0b:0a:55:f9:4b:82:47:b6:05:3d:c1:58:3d:65:30:
a7:9a:90:6b:e7:b6:88:0c:46:88:d6:d1:7b:11:c1:7a:9c:c2:
36:1f:b3:82:95:86:96:4a:3e:da:db:65:fd:af:89:0e:f8:8a:
75:37:10:10:00:80:c4:ca:0d:44:13:b2:6f:25:7e:c6:54:59:
21:92:3c:35:bc:81:82:5f:96:7c:b4:86:56:36:65:35:6e:c6:
cb:e5:9c:49:70:6a:44:af:fe:33:cd:54:ca:73:b5:06:0b:50:
e9:6a:54:d8:a2:25:4c:63:0d:80:5e:03:70:51:53:ce:b8:3c:
d6:57:04:0f
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEPU4E1jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YTZlZDBmYjdiMzIwODMyYWMxNTgwNTM0YzdiMjYzZjMwNGU5ODFiMB4XDTIyMDEw
MTA2NTUxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGVhYTM2ZWQ2OTAy
ZWQzOTJiY2NhZmVlMWYyNGM4N2FiMzQ3ZTNhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOVmbGDqQvD32mjT1K3fQUTweXXDKfjxPmOf9tfY+X8ekQED
4FpuBqZt4BvwwLS7r4i7UdmbynMToDbosTjPHlEzC/R4upx/F1lcGzIgzcguerPC
Rj+lBcnsoAZ3qkNEMYVQQa2PuwnN9m12tTGd8i7BJPjA5Ww7xMLk+TUZDr+1wNk8
vL7nhldEu5MgkozUlH2Jk9p0uEZvpHDLAW8SPswjPO5Lb88Ys4HUfBbGYt6J3k3t
m09XA/Y4B1Gbgv3mWWwiuErio9Rm9QaWEkh6GLx97vsOs27eADS8Iyoj4Ac1Ia86
pWfICs2177D28ENfDmRuV4UY0X9GSq5AcSkIsQUCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBROqjbtaQLtOSvMr+4fJMh6s0fjpzAfBgNVHSMEGDAWgBS6btD7ezIIMqwV
gFNMeyY/ME6YGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VtN1EtM3N5Q0RLc0ZZQlRUSHNtUHpCT21Ccy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjAvNDIwNDFkLTU5MzEtNDgyNC05MjU0LTE2MWYzNDIzODdkMS8x
L1RxbzI3V2tDN1RrcnpLX3VIeVRJZXJOSDQ2Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAv
NDIwNDFkLTU5MzEtNDgyNC05MjU0LTE2MWYzNDIzODdkMS8xL3VtN1EtM3N5Q0RL
c0ZZQlRUSHNtUHpCT21Ccy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwRZDANBgkqhkiG9w0BAQsF
AAOCAQEATKIv+Nl1wQu2Q844EgrVaAzfhUwLkDWbYgaejrL+pgCPhr002YMx93N/
bUQ8SIB4nrDgJzLNfO1YfHkylBHYMT/J1/eq0xm8oKh3Yxx6Se5lJHfMAsWBxLjD
mB8PQfH18ytAz7cgiewztEWC06mHc8SwUyUFrbCDFj/DNTW4K2ojCwpV+UuCR7YF
PcFYPWUwp5qQa+e2iAxGiNbRexHBepzCNh+zgpWGlko+2ttl/a+JDviKdTcQEACA
xMoNRBOybyV+xlRZIZI8NbyBgl+WfLSGVjZlNW7Gy+WcSXBqRK/+M81UynO1BgtQ
6WpU2KIlTGMNgF4DcFFTzrg81lcEDw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:03 2024 by rpki-client on console-fra.rpki-client.org