Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/yRE07nm4HD3xsUMWRQVRubDAqTE.roa
File: yRE07nm4HD3xsUMWRQVRubDAqTE.roa (raw, json)
Hash identifier: Xk6MNx09amYomvvcdUs51kXSszEH88t1qmRMtid+1yM=
Subject key identifier: C9:11:34:EE:79:B8:1C:3D:F1:B1:43:16:45:05:51:B9:B0:C0:A9:31
Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial: 04D8439C
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/yRE07nm4HD3xsUMWRQVRubDAqTE.roa
Signing time: Wed 08 Jun 2022 14:24:02 +0000
ROA not before: Wed 08 Jun 2022 14:24:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206436
IP address blocks: 2a10:8581::/48 maxlen: 48
2a10:8581:1::/48 maxlen: 48
2a10:8580::/48 maxlen: 48
2a10:8580:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81281948 (0x4d8439c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
Validity
Not Before: Jun 8 14:24:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c91134ee79b81c3df1b14316450551b9b0c0a931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:72:a2:07:d0:63:95:01:eb:21:32:46:e1:7b:
46:57:63:b1:98:21:bb:e5:70:96:1e:4a:08:67:21:
3c:dc:de:85:f9:00:a5:4b:49:ad:29:a0:49:e6:84:
a8:1f:9f:a3:c7:02:3b:16:79:45:bb:44:22:11:e5:
5c:30:0a:67:5e:21:6c:7b:69:14:f0:08:a3:c8:22:
24:24:fb:45:7d:3a:58:c9:56:a7:5f:0e:46:56:e5:
80:8e:e1:ea:a1:9f:27:1d:d0:d8:e9:ea:05:a9:9c:
26:29:eb:b7:8a:88:b2:26:23:90:84:a1:31:13:ae:
d9:cc:7e:26:23:06:35:ab:54:5d:e4:a3:f6:b1:dc:
e0:10:43:52:cc:de:38:ba:a8:d8:2e:8f:2e:05:d5:
3a:e5:29:ca:e5:25:a4:ba:10:46:de:be:a3:0d:07:
d5:a7:6d:ed:13:b5:d5:3a:1f:8d:19:3d:cb:ea:c5:
5c:92:d3:a9:83:02:57:9c:10:c0:56:c8:29:2d:8c:
07:49:5d:1b:d1:44:58:1b:01:bd:65:58:95:1f:d6:
c9:5b:79:ff:4a:42:e6:9d:e7:a2:dc:35:84:41:f9:
b7:9e:90:55:25:14:32:73:3b:46:66:2d:1d:9b:c4:
47:74:56:64:82:d2:fe:38:5d:82:c8:1a:71:d5:35:
34:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:11:34:EE:79:B8:1C:3D:F1:B1:43:16:45:05:51:B9:B0:C0:A9:31
X509v3 Authority Key Identifier:
keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/yRE07nm4HD3xsUMWRQVRubDAqTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:8580::/47
2a10:8581::/47
Signature Algorithm: sha256WithRSAEncryption
2e:40:64:f6:26:d6:43:28:ff:56:a0:82:71:ad:27:89:54:ad:
a4:43:65:dc:5c:dc:c3:84:65:5a:02:52:6c:e8:05:76:dd:cb:
c4:3f:72:f5:25:d2:d4:46:a7:29:21:8c:35:6f:b8:52:75:56:
54:07:52:51:55:a5:99:f6:75:b6:0e:06:30:fd:2e:ae:7a:c8:
52:37:c0:58:7e:29:af:59:a4:11:34:c6:0d:d2:66:d9:0a:64:
0e:22:63:7d:0a:7f:e9:27:12:ca:8f:32:52:e4:76:5a:c2:d0:
37:91:42:30:bd:3f:6b:0d:dd:c8:f2:60:54:25:39:db:23:8f:
5e:d5:39:9f:a2:cc:e4:3f:64:10:fc:08:00:72:27:ca:5d:7c:
6f:8f:52:b5:3a:a4:67:29:58:23:04:ea:90:0e:a4:4e:be:e3:
52:6f:b2:f9:a0:5a:66:84:d2:77:11:c8:19:00:6b:6a:1d:cb:
13:a8:30:6b:ed:a9:b3:6f:19:b7:81:7d:1d:5a:4d:fa:a6:bc:
16:ea:33:8a:cf:b9:c9:cb:c3:16:f8:e0:4a:c5:26:12:81:fd:
8d:f0:ed:f3:42:2b:fa:62:54:05:70:ac:51:10:5f:bf:a3:a1:
ad:b5:b6:18:42:63:a5:41:8f:65:01:40:8b:30:1d:65:d7:ed:
17:4a:4d:56
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBNhDnDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NDZjYTdiNjA0ZWMwOGY2ZjU0YjBlNzQ4OTA2NTQ3ZGQzNzU2NzRkMB4XDTIyMDYw
ODE0MjQwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzkxMTM0ZWU3OWI4
MWMzZGYxYjE0MzE2NDUwNTUxYjliMGMwYTkzMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJVyogfQY5UB6yEyRuF7RldjsZghu+Vwlh5KCGchPNzehfkA
pUtJrSmgSeaEqB+fo8cCOxZ5RbtEIhHlXDAKZ14hbHtpFPAIo8giJCT7RX06WMlW
p18ORlblgI7h6qGfJx3Q2OnqBamcJinrt4qIsiYjkIShMROu2cx+JiMGNatUXeSj
9rHc4BBDUszeOLqo2C6PLgXVOuUpyuUlpLoQRt6+ow0H1adt7RO11TofjRk9y+rF
XJLTqYMCV5wQwFbIKS2MB0ldG9FEWBsBvWVYlR/WyVt5/0pC5p3notw1hEH5t56Q
VSUUMnM7RmYtHZvER3RWZILS/jhdgsgacdU1NAECAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTJETTuebgcPfGxQxZFBVG5sMCpMTAfBgNVHSMEGDAWgBQEbKe2BOwI9vVL
DnSJBlR903VnTTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JHeW50Z1RzQ1BiMVN3NTBpUVpVZmROMVowMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmEvMzkyZWE1LTljYTgtNGIwZi05Mzg4LTA5Mzk2MWQzOGM4Ni8x
L3lSRTA3bm00SEQzeHNVTVdSUVZSdWJEQXFURS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEv
MzkyZWE1LTljYTgtNGIwZi05Mzg4LTA5Mzk2MWQzOGM4Ni8xL0JHeW50Z1RzQ1Bi
MVN3NTBpUVpVZmROMVowMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHASoQhYAAAAMHASoQhYEAADANBgkq
hkiG9w0BAQsFAAOCAQEALkBk9ibWQyj/VqCCca0niVStpENl3Fzcw4RlWgJSbOgF
dt3LxD9y9SXS1EanKSGMNW+4UnVWVAdSUVWlmfZ1tg4GMP0urnrIUjfAWH4pr1mk
ETTGDdJm2QpkDiJjfQp/6ScSyo8yUuR2WsLQN5FCML0/aw3dyPJgVCU52yOPXtU5
n6LM5D9kEPwIAHInyl18b49StTqkZylYIwTqkA6kTr7jUm+y+aBaZoTSdxHIGQBr
ah3LE6gwa+2ps28Zt4F9HVpN+qa8Fuozis+5ycvDFvjgSsUmEoH9jfDt80Ir+mJU
BXCsURBfv6OhrbW2GEJjpUGPZQFAizAdZdftF0pNVg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:31 2024 by rpki-client on console-fra.rpki-client.org