Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/IATJXbIxtW50WPdkPgs38LzAy7c.roa
File: IATJXbIxtW50WPdkPgs38LzAy7c.roa (raw, json)
Hash identifier: ZYG2/TX5O0A8pyHRI2uEqzarUi3QRr5DsjGfg5Hiay8=
Subject key identifier: 20:04:C9:5D:B2:31:B5:6E:74:58:F7:64:3E:0B:37:F0:BC:C0:CB:B7
Certificate issuer: /CN=b4fb331fa42fb451e4551c6f91cbb9c19ee37a4e
Certificate serial: 069D7B8B
Authority key identifier: B4:FB:33:1F:A4:2F:B4:51:E4:55:1C:6F:91:CB:B9:C1:9E:E3:7A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPszH6QvtFHkVRxvkcu5wZ7jek4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/IATJXbIxtW50WPdkPgs38LzAy7c.roa
Signing time: Sat 01 Jan 2022 07:59:43 +0000
ROA not before: Sat 01 Jan 2022 07:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1654
IP address blocks: 2a02:bf8:1601::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110984075 (0x69d7b8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fb331fa42fb451e4551c6f91cbb9c19ee37a4e
Validity
Not Before: Jan 1 07:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2004c95db231b56e7458f7643e0b37f0bcc0cbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:db:01:b7:6d:d1:4e:fd:71:cb:6c:5c:ca:a3:
51:23:e5:13:be:d9:06:58:67:9f:7e:28:1c:dc:f5:
83:60:d1:34:1e:e7:74:c1:9b:1b:71:10:9d:bb:f1:
88:31:f3:d8:15:f1:8b:86:cd:66:4b:c9:c9:1b:19:
75:98:87:d8:48:b4:56:2c:d2:fc:3c:f9:7a:4e:dd:
70:df:6a:85:68:e6:c5:12:fd:ea:3f:12:32:d8:7c:
bb:77:26:88:36:7e:54:d4:31:91:4a:2d:89:40:d1:
75:ed:02:5c:e0:f5:a1:8a:98:cb:c6:e5:07:42:e3:
56:7a:34:e7:8e:b8:69:37:23:3a:5b:b9:9d:c0:a4:
55:62:a8:3b:44:8f:9a:db:91:2d:9a:23:88:3f:f5:
dd:db:b1:92:cb:4b:71:da:be:6c:35:af:95:4f:68:
de:ad:c7:5b:e4:28:6f:29:0d:52:18:ad:cf:df:76:
ef:08:60:ee:a6:29:58:86:f5:d8:d6:41:b2:5a:83:
18:57:ed:78:9d:e9:7e:95:61:5e:e7:0b:e2:a7:01:
eb:eb:6c:8f:2e:eb:13:86:b2:af:14:f3:75:fe:5c:
1c:4f:5d:0d:e0:e6:65:ca:00:4f:b6:d0:f6:db:64:
87:c4:51:f3:9d:f6:6b:c6:13:fb:26:36:0b:86:e7:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:04:C9:5D:B2:31:B5:6E:74:58:F7:64:3E:0B:37:F0:BC:C0:CB:B7
X509v3 Authority Key Identifier:
keyid:B4:FB:33:1F:A4:2F:B4:51:E4:55:1C:6F:91:CB:B9:C1:9E:E3:7A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPszH6QvtFHkVRxvkcu5wZ7jek4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/IATJXbIxtW50WPdkPgs38LzAy7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/tPszH6QvtFHkVRxvkcu5wZ7jek4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:bf8:1601::/48
Signature Algorithm: sha256WithRSAEncryption
9e:5c:05:34:b5:e6:be:39:2f:79:4e:89:a3:a2:91:47:f8:ec:
1b:33:92:b5:8e:7d:33:82:43:05:ff:cb:6a:ae:c6:32:10:cf:
e6:1d:82:b9:22:dc:3f:d3:42:4d:b7:5b:fc:8b:ed:2f:ab:98:
5e:8f:07:08:e3:d0:55:f6:b5:5e:80:f5:25:8d:e3:16:e2:57:
f2:2b:f5:30:f7:d3:ed:5d:99:7b:0e:80:4f:ba:28:98:b3:4f:
5f:68:15:29:b9:43:94:13:f1:6b:71:0c:c4:6a:b2:e3:c6:da:
87:8f:92:bf:67:89:7c:34:0e:29:6d:aa:aa:fc:60:55:70:ff:
1c:56:d0:30:9c:c9:d1:83:aa:4e:43:2a:c7:50:f5:0f:5f:86:
e2:8d:d2:ba:76:27:bc:ea:70:4a:08:58:ad:e4:d2:ab:8e:39:
21:b5:06:33:65:b2:f5:1c:62:25:d7:52:d0:ca:f2:c6:fb:65:
aa:fb:57:38:b7:61:1a:bd:4e:71:88:66:00:58:28:9b:26:fd:
49:b6:0b:44:c0:86:92:7a:2e:30:7b:ae:56:ae:cd:33:26:82:
a2:4b:0c:a7:fb:cf:de:f2:9f:d5:72:0d:db:5a:a0:2b:53:d5:
01:54:41:ad:a8:d3:41:34:35:9d:5d:61:4c:87:05:e0:9c:be:
e5:5a:8b:b8
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBp17izANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NGZiMzMxZmE0MmZiNDUxZTQ1NTFjNmY5MWNiYjljMTllZTM3YTRlMB4XDTIyMDEw
MTA3NTk0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjAwNGM5NWRiMjMx
YjU2ZTc0NThmNzY0M2UwYjM3ZjBiY2MwY2JiNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIzbAbdt0U79cctsXMqjUSPlE77ZBlhnn34oHNz1g2DRNB7n
dMGbG3EQnbvxiDHz2BXxi4bNZkvJyRsZdZiH2Ei0VizS/Dz5ek7dcN9qhWjmxRL9
6j8SMth8u3cmiDZ+VNQxkUotiUDRde0CXOD1oYqYy8blB0LjVno05464aTcjOlu5
ncCkVWKoO0SPmtuRLZojiD/13duxkstLcdq+bDWvlU9o3q3HW+QobykNUhitz992
7whg7qYpWIb12NZBslqDGFfteJ3pfpVhXucL4qcB6+tsjy7rE4ayrxTzdf5cHE9d
DeDmZcoAT7bQ9ttkh8RR8532a8YT+yY2C4bnu98CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQgBMldsjG1bnRY92Q+CzfwvMDLtzAfBgNVHSMEGDAWgBS0+zMfpC+0UeRV
HG+Ry7nBnuN6TjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RQc3pINlF2dEZIa1ZSeHZrY3U1d1o3amVrNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvZDlhNjcyLTI2YzMtNGFiNC1iNTNiLTA5OWZkMjEwMTM4NS8x
L0lBVEpYYkl4dFc1MFdQZGtQZ3MzOEx6QXk3Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
ZDlhNjcyLTI2YzMtNGFiNC1iNTNiLTA5OWZkMjEwMTM4NS8xL3RQc3pINlF2dEZI
a1ZSeHZrY3U1d1o3amVrNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoCC/gWATANBgkqhkiG9w0BAQsF
AAOCAQEAnlwFNLXmvjkveU6Jo6KRR/jsGzOStY59M4JDBf/Laq7GMhDP5h2CuSLc
P9NCTbdb/IvtL6uYXo8HCOPQVfa1XoD1JY3jFuJX8iv1MPfT7V2Zew6AT7oomLNP
X2gVKblDlBPxa3EMxGqy48bah4+Sv2eJfDQOKW2qqvxgVXD/HFbQMJzJ0YOqTkMq
x1D1D1+G4o3SunYnvOpwSghYreTSq445IbUGM2Wy9RxiJddS0MryxvtlqvtXOLdh
Gr1OcYhmAFgomyb9SbYLRMCGknouMHuuVq7NMyaCoksMp/vP3vKf1XIN21qgK1PV
AVRBrajTQTQ1nV1hTIcF4Jy+5VqLuA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:21 2024 by rpki-client on console-fra.rpki-client.org