Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/XekebBhv5IiwVi7wnt9SzBV7avI.roa
File: XekebBhv5IiwVi7wnt9SzBV7avI.roa (raw, json)
Hash identifier: B1Op602utZrwLw63aw7hJbYG8mY16zXjQQiNvOCL4n4=
Subject key identifier: 5D:E9:1E:6C:18:6F:E4:88:B0:56:2E:F0:9E:DF:52:CC:15:7B:6A:F2
Certificate issuer: /CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Certificate serial: 018559683DBE9A1D5D398114934562792FA7
Authority key identifier: 55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/XekebBhv5IiwVi7wnt9SzBV7avI.roa
Signing time: Wed 28 Dec 2022 15:44:41 +0000
ROA not before: Wed 28 Dec 2022 15:44:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201364
IP address blocks: 2a0d:8041::/32 maxlen: 32
2a09:5984::/32 maxlen: 32
2a09:f347::/32 maxlen: 32
2a09:5980::/32 maxlen: 32
2a0d:8044::/32 maxlen: 32
2a09:5985::/32 maxlen: 32
2a09:f346::/32 maxlen: 32
2a09:f343::/32 maxlen: 32
2a0d:8045::/32 maxlen: 32
2a09:f340::/32 maxlen: 32
2a0d:8042::/32 maxlen: 32
2a09:5986::/32 maxlen: 32
2a0d:8043::/32 maxlen: 32
2a09:5982::/32 maxlen: 32
2a09:f342::/32 maxlen: 32
2a09:f341::/32 maxlen: 32
2a09:f345::/32 maxlen: 32
2a09:5983::/32 maxlen: 32
2a0d:8047::/32 maxlen: 32
2a0d:8040::/32 maxlen: 32
2a09:f344::/32 maxlen: 32
2a09:5987::/32 maxlen: 32
2a0d:8046::/32 maxlen: 32
2a09:5981::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:59:68:3d:be:9a:1d:5d:39:81:14:93:45:62:79:2f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Validity
Not Before: Dec 28 15:44:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5de91e6c186fe488b0562ef09edf52cc157b6af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:99:b4:e2:60:84:c9:7d:72:29:38:25:6e:
a2:c7:dc:53:ae:d9:52:d1:30:ba:74:ea:4a:cc:f9:
4e:0f:6b:d6:1d:51:5d:3d:13:ba:2c:79:54:26:ee:
fe:a8:a3:b6:4d:39:9a:8b:7f:00:5e:51:4f:4e:dd:
4d:36:4a:5f:a0:4b:3e:17:6b:8e:49:2e:70:f0:8b:
88:1e:b2:93:e7:21:4d:4c:d4:b7:e8:9e:ab:75:f9:
e1:c8:ba:d4:cf:d4:3d:cc:b7:f5:dd:7c:57:28:8f:
cf:f8:2d:3a:93:9a:77:8c:42:c5:b7:10:6d:ba:16:
68:70:b1:d4:be:a0:04:28:3b:8d:3a:25:97:91:a2:
1d:e9:86:af:82:16:42:54:8a:62:e7:35:7b:66:e7:
ec:63:91:b0:9d:b8:e2:de:b7:94:a7:99:29:44:df:
21:f3:7b:fd:34:ce:86:88:75:3c:80:8e:2c:ec:07:
20:9a:56:91:36:e2:b3:2f:6d:f7:69:9f:9a:2b:c3:
70:c2:1f:23:e8:44:34:ea:2d:8c:38:17:ff:a7:51:
30:23:81:1f:19:d1:f5:06:b2:b0:40:82:16:e8:48:
eb:7d:f8:c3:8f:4e:63:84:b7:7c:85:65:54:8b:55:
85:fa:3f:1b:ae:4c:b8:34:1d:22:3e:7b:5e:8a:f4:
bf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E9:1E:6C:18:6F:E4:88:B0:56:2E:F0:9E:DF:52:CC:15:7B:6A:F2
X509v3 Authority Key Identifier:
keyid:55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/XekebBhv5IiwVi7wnt9SzBV7avI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:5980::/29
2a09:f340::/29
2a0d:8040::/29
Signature Algorithm: sha256WithRSAEncryption
33:26:d8:94:77:0b:72:c5:ff:c0:5d:f3:b4:10:b4:49:a1:02:
28:f7:23:1b:76:74:a8:76:52:1f:35:a4:f1:56:b0:3f:88:08:
06:9a:a2:5c:b4:66:c6:d7:97:a7:32:81:db:e8:84:2f:9f:00:
90:c6:60:e3:6a:70:5c:68:44:b0:ba:ae:a7:15:94:e6:dc:27:
b3:ed:2c:9e:cc:53:af:87:8a:ce:5c:ee:1c:f5:26:35:71:80:
5a:fa:51:77:f8:bc:30:e2:80:c2:1d:0c:d6:eb:68:c1:00:e0:
f6:a1:ea:a0:da:11:58:fb:f7:62:44:79:fb:d0:3d:6a:9e:0c:
03:a1:32:de:52:3a:19:50:8b:ce:1e:74:09:ec:a5:b3:a4:a0:
e7:6d:8b:e5:64:58:c6:ce:ed:bc:c1:a5:00:aa:50:76:60:5e:
73:1d:9a:9f:db:f6:21:9e:1f:89:be:6d:d7:04:ac:62:99:d1:
f4:bf:a1:79:55:05:5c:1e:00:09:ab:51:2f:6e:9e:68:f8:f7:
3c:12:68:6a:81:4d:4d:a3:88:3e:ce:57:a6:13:4d:f1:81:55:
44:ba:4d:6c:15:66:31:d6:5a:86:c9:d2:e5:cc:1c:50:2b:7a:
d8:9e:e9:7f:1d:74:28:67:99:79:57:a7:ae:43:54:29:a1:c7:
76:63:8f:26
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVZaD2+mh1dOYEUk0VieS+nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NTBlMDZlZTAyYzVhMzJlNTRkYzg5ODUzYjRhYTM3OGY4
NjA0ZjcwHhcNMjIxMjI4MTU0NDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGU5MWU2YzE4NmZlNDg4YjA1NjJlZjA5ZWRmNTJjYzE1N2I2YWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4mZtOJghMl9cik4JW6ix9xTrtlS
0TC6dOpKzPlOD2vWHVFdPRO6LHlUJu7+qKO2TTmai38AXlFPTt1NNkpfoEs+F2uO
SS5w8IuIHrKT5yFNTNS36J6rdfnhyLrUz9Q9zLf13XxXKI/P+C06k5p3jELFtxBt
uhZocLHUvqAEKDuNOiWXkaId6YavghZCVIpi5zV7ZufsY5Gwnbji3reUp5kpRN8h
83v9NM6GiHU8gI4s7AcgmlaRNuKzL233aZ+aK8Nwwh8j6EQ06i2MOBf/p1EwI4Ef
GdH1BrKwQIIW6EjrffjDj05jhLd8hWVUi1WF+j8brky4NB0iPnteivS/SwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFF3pHmwYb+SIsFYu8J7fUswVe2ryMB8GA1UdIwQY
MBaAFFVQ4G7gLFoy5U3ImFO0qjePhgT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlZEZ2J1QXNXakxsVGNpWVU3U3FONC1HQlBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kZWViNGMtOTlkNi00YTllLTgyMDAt
N2NhYTk3OTI3MTQyLzEvWGVrZWJCaHY1SWl3Vmk3d250OVN6QlY3YXZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kZWViNGMtOTlkNi00YTllLTgyMDAtN2NhYTk3OTI3MTQy
LzEvVlZEZ2J1QXNXakxsVGNpWVU3U3FONC1HQlBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKglZgAMF
AyoJ80ADBQMqDYBAMA0GCSqGSIb3DQEBCwUAA4IBAQAzJtiUdwtyxf/AXfO0ELRJ
oQIo9yMbdnSodlIfNaTxVrA/iAgGmqJctGbG15enMoHb6IQvnwCQxmDjanBcaESw
uq6nFZTm3Cez7SyezFOvh4rOXO4c9SY1cYBa+lF3+Lww4oDCHQzW62jBAOD2oeqg
2hFY+/diRHn70D1qngwDoTLeUjoZUIvOHnQJ7KWzpKDnbYvlZFjGzu28waUAqlB2
YF5zHZqf2/Yhnh+Jvm3XBKximdH0v6F5VQVcHgAJq1Evbp5o+Pc8EmhqgU1No4g+
zlemE03xgVVEuk1sFWYx1lqGydLlzBxQK3rYnul/HXQoZ5l5V6euQ1Qpocd2Y48m
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:11 2024 by rpki-client on console-ams.rpki-client.org