Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/8yrndMiuXkXD_ohN7Ha9oui9lvc.roa
File: 8yrndMiuXkXD_ohN7Ha9oui9lvc.roa (raw, json)
Hash identifier: Nsxb2yjAEoDwfAiElZDaorB5adRHLB7YS5Y0e5sDhE4=
Subject key identifier: F3:2A:E7:74:C8:AE:5E:45:C3:FE:88:4D:EC:76:BD:A2:E8:BD:96:F7
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 061A8728
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/8yrndMiuXkXD_ohN7Ha9oui9lvc.roa
Signing time: Sat 01 Jan 2022 06:56:42 +0000
ROA not before: Sat 01 Jan 2022 06:56:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207530
IP address blocks: 2a09:d2c1:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102401832 (0x61a8728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: Jan 1 06:56:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f32ae774c8ae5e45c3fe884dec76bda2e8bd96f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ca:62:3c:fe:99:9e:3b:16:9c:28:68:76:6f:
a5:90:7c:51:89:9d:af:70:a6:8b:44:98:69:d6:da:
46:f7:20:dd:29:b0:6f:fb:93:90:0f:81:7b:a1:3e:
48:5a:88:bc:05:3c:4c:4e:bf:d8:f3:f6:a7:bc:4f:
45:8d:8a:fd:27:04:6b:e2:ef:b2:11:fe:89:d2:47:
25:2a:7f:94:e9:18:98:19:14:93:44:51:ce:4d:3a:
6b:a3:1e:f0:d5:8c:33:bb:25:14:69:49:ef:ef:6d:
e0:f3:4b:7d:99:56:94:13:a6:e5:b7:6c:02:3e:0a:
27:d8:63:ed:8f:f1:dc:08:c4:51:dc:08:f0:76:85:
84:02:e7:2c:38:16:f3:2a:48:50:b5:ca:2a:9f:12:
12:a2:0d:8f:83:c8:a9:f8:6d:9b:8f:cf:e5:e5:41:
80:e6:59:59:33:33:ce:eb:24:0d:3f:fe:d5:3a:b0:
a2:23:6b:04:16:2d:c6:39:81:97:21:bc:82:88:7c:
b4:9b:71:e7:50:86:5b:c8:77:ac:55:e5:cc:fe:63:
19:1d:77:8c:0e:e9:4a:61:27:19:7d:e0:86:6b:47:
42:51:1d:9f:3d:66:d7:d6:79:9a:bc:11:c3:09:61:
3a:5b:29:48:d0:1b:0d:ed:3f:99:50:1b:6d:39:58:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2A:E7:74:C8:AE:5E:45:C3:FE:88:4D:EC:76:BD:A2:E8:BD:96:F7
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/8yrndMiuXkXD_ohN7Ha9oui9lvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:d2c1:9::/48
Signature Algorithm: sha256WithRSAEncryption
12:18:f1:a7:b1:5d:57:2d:70:8c:7d:d5:50:a8:59:7c:4e:a0:
58:36:33:f1:0b:02:29:6d:85:95:26:a3:e4:7b:41:a3:62:35:
6d:2c:34:98:8b:5d:5f:b3:bf:d3:b9:6a:40:4d:30:34:2c:72:
02:09:92:b5:00:56:33:dd:78:cd:ed:ce:1d:61:ca:fa:02:e1:
e3:b7:28:d1:88:9a:f1:23:37:81:0f:cb:3a:d4:cf:c1:70:a9:
e4:3a:8e:20:2e:97:41:49:73:5e:a5:4b:bd:5c:d0:4a:d8:2e:
6b:ff:26:66:fd:22:62:ba:9a:88:10:00:3e:f9:27:3c:dd:e6:
10:0c:be:8a:bd:ed:f1:da:04:5b:57:8f:66:9a:bf:72:55:25:
3f:8f:2b:a5:3c:ac:ae:64:29:40:af:04:6a:8e:57:31:3d:5d:
49:f8:5b:b2:d5:58:14:a2:00:27:af:41:bd:e5:b2:56:1e:8e:
a3:32:9f:74:56:98:e1:07:c1:e2:4d:a1:bb:34:84:bb:81:0f:
45:8d:37:eb:5a:43:39:c6:36:5d:7b:7d:a9:f2:21:f7:86:25:
1c:a9:b0:3f:62:ab:d2:5c:c6:c4:cb:e6:f8:9c:45:ed:31:31:
6a:f5:8b:c1:f1:b8:5e:f0:a5:a1:e5:c1:75:63:26:c5:92:dd:
1c:60:0a:9c
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBhqHKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZmNkNzNmODJjMjYwZGE4NzM4NmRjZjdiZTI2ZDVjNTQ0NTUyNmZhMB4XDTIyMDEw
MTA2NTY0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjMyYWU3NzRjOGFl
NWU0NWMzZmU4ODRkZWM3NmJkYTJlOGJkOTZmNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPTKYjz+mZ47FpwoaHZvpZB8UYmdr3Cmi0SYadbaRvcg3Smw
b/uTkA+Be6E+SFqIvAU8TE6/2PP2p7xPRY2K/ScEa+LvshH+idJHJSp/lOkYmBkU
k0RRzk06a6Me8NWMM7slFGlJ7+9t4PNLfZlWlBOm5bdsAj4KJ9hj7Y/x3AjEUdwI
8HaFhALnLDgW8ypIULXKKp8SEqINj4PIqfhtm4/P5eVBgOZZWTMzzuskDT/+1Tqw
oiNrBBYtxjmBlyG8goh8tJtx51CGW8h3rFXlzP5jGR13jA7pSmEnGX3ghmtHQlEd
nz1m19Z5mrwRwwlhOlspSNAbDe0/mVAbbTlYWocCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTzKud0yK5eRcP+iE3sdr2i6L2W9zAfBgNVHSMEGDAWgBTPzXP4LCYNqHOG
3Pe+JtXFRFUm+jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3o4MXotQ3dtRGFoemh0ejN2aWJWeFVSVkp2by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvNDBhZGUwLTk4ZGEtNGFhNS1iODE3LTZlZGMxYjIyNTYyNS8x
Lzh5cm5kTWl1WGtYRF9vaE43SGE5b3VpOWx2Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
NDBhZGUwLTk4ZGEtNGFhNS1iODE3LTZlZGMxYjIyNTYyNS8xL3o4MXotQ3dtRGFo
emh0ejN2aWJWeFVSVkp2by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoJ0sEACTANBgkqhkiG9w0BAQsF
AAOCAQEAEhjxp7FdVy1wjH3VUKhZfE6gWDYz8QsCKW2FlSaj5HtBo2I1bSw0mItd
X7O/07lqQE0wNCxyAgmStQBWM914ze3OHWHK+gLh47co0Yia8SM3gQ/LOtTPwXCp
5DqOIC6XQUlzXqVLvVzQStgua/8mZv0iYrqaiBAAPvknPN3mEAy+ir3t8doEW1eP
Zpq/clUlP48rpTysrmQpQK8Eao5XMT1dSfhbstVYFKIAJ69BveWyVh6OozKfdFaY
4QfB4k2huzSEu4EPRY0361pDOcY2XXt9qfIh94YlHKmwP2Kr0lzGxMvm+JxF7TEx
avWLwfG4XvCloeXBdWMmxZLdHGAKnA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:36 2024 by rpki-client on console-fra.rpki-client.org