Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/4iycrbkw_vQe-agA9vcycba5ZjM.roa
File: 4iycrbkw_vQe-agA9vcycba5ZjM.roa (raw, json)
Hash identifier: M7SR8sYakx12nEMjhp51i5AFmImD1dWwJW7vf2iwJP4=
Subject key identifier: E2:2C:9C:AD:B9:30:FE:F4:1E:F9:A8:00:F6:F7:32:71:B6:B9:66:33
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: BA7F23
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/4iycrbkw_vQe-agA9vcycba5ZjM.roa
Signing time: Mon 21 Feb 2022 15:13:32 +0000
ROA not before: Mon 21 Feb 2022 15:13:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48314
IP address blocks: 2a12:3e80:100::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12222243 (0xba7f23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: Feb 21 15:13:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e22c9cadb930fef41ef9a800f6f73271b6b96633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0e:2f:8c:02:b3:52:a8:3e:49:ab:64:e2:37:
5d:5b:7e:f0:62:84:d0:22:cd:00:8f:74:dc:79:12:
6d:44:a9:c9:48:79:76:16:d4:d6:16:89:e8:1d:8a:
74:31:7a:75:4f:e5:b1:2b:a8:86:d0:e9:5e:d6:31:
b2:73:f7:74:d3:43:16:9c:35:7b:84:48:9e:c3:4d:
da:ea:d1:00:59:6f:1e:e2:b4:12:e6:df:3f:1e:1c:
58:9b:3e:1c:1e:11:2b:d5:6b:c5:df:e9:34:7d:c2:
0f:f8:e7:04:ed:24:9b:b6:6b:fb:4d:34:9b:dc:30:
32:4d:c1:40:1a:e6:ed:af:9c:f4:1b:40:7c:05:00:
a0:ac:66:fa:fb:d3:a9:c2:40:3b:84:d7:78:34:97:
dc:6f:22:8d:9e:2a:00:5e:a8:8d:cc:ce:d1:2d:d1:
7f:37:76:b9:cf:ac:62:00:9f:cf:87:f9:35:a1:1d:
5e:f8:a5:94:b7:29:8e:f7:72:2c:46:d3:bd:f3:9d:
f1:63:3e:df:bc:6d:c6:51:eb:35:8c:a9:b7:8a:e3:
22:d1:29:41:d1:99:27:60:48:39:e7:9d:15:8f:0c:
de:17:8c:38:a3:70:36:05:39:96:c1:0d:b1:89:4b:
d3:d1:03:7e:52:f9:df:59:b1:af:c0:d1:e9:68:15:
f7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2C:9C:AD:B9:30:FE:F4:1E:F9:A8:00:F6:F7:32:71:B6:B9:66:33
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/4iycrbkw_vQe-agA9vcycba5ZjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3e80:100::/48
Signature Algorithm: sha256WithRSAEncryption
15:42:b1:7d:31:2a:39:96:77:b5:74:dc:95:10:55:eb:a6:ff:
3f:b8:73:53:ef:68:67:d4:59:07:b2:c1:41:5d:59:9e:6a:2f:
00:62:d0:d4:75:ea:5f:d8:4d:fa:52:30:4b:17:84:e4:d7:42:
e5:36:fa:a1:9f:34:02:85:b2:b4:7c:c5:75:c6:2f:15:13:42:
86:03:a5:7c:c1:8d:ac:74:d9:88:28:f1:42:24:3f:9a:56:d8:
b8:21:d6:f3:c8:df:e3:86:44:17:cb:00:30:f3:f8:da:13:13:
9d:f5:50:9e:9c:03:6c:ee:8a:56:8e:1c:88:5b:4c:98:c7:c2:
e2:6a:0b:f8:da:60:0b:dc:66:11:b2:cb:43:1c:8e:b9:88:36:
41:99:50:c3:0a:0e:13:40:d8:32:df:0d:5b:3a:1f:76:3f:03:
62:5c:12:6a:35:0a:49:c2:ec:bb:1d:fb:4b:08:3f:43:55:d9:
b4:3b:07:99:6f:91:b8:27:40:af:17:91:c2:45:ae:33:85:01:
f4:c1:19:6f:af:f6:9f:1d:90:d0:00:0d:c8:31:d1:3c:59:9c:
c7:fe:3e:5f:1c:e6:b4:07:29:d0:63:28:03:db:dd:6a:1c:06:
df:e1:f8:66:8a:99:77:53:f1:9a:84:20:bd:c7:ad:3d:65:04:
62:fe:0b:4b
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEALp/IzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NmFmNDMzOTc0ZGYzNzNiNzBhYmQ3NmIxM2UxYzcwYzc3NWY1NTRiMB4XDTIyMDIy
MTE1MTMzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTIyYzljYWRiOTMw
ZmVmNDFlZjlhODAwZjZmNzMyNzFiNmI5NjYzMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJMOL4wCs1KoPkmrZOI3XVt+8GKE0CLNAI903HkSbUSpyUh5
dhbU1haJ6B2KdDF6dU/lsSuohtDpXtYxsnP3dNNDFpw1e4RInsNN2urRAFlvHuK0
EubfPx4cWJs+HB4RK9Vrxd/pNH3CD/jnBO0km7Zr+000m9wwMk3BQBrm7a+c9BtA
fAUAoKxm+vvTqcJAO4TXeDSX3G8ijZ4qAF6ojczO0S3Rfzd2uc+sYgCfz4f5NaEd
XvillLcpjvdyLEbTvfOd8WM+37xtxlHrNYypt4rjItEpQdGZJ2BIOeedFY8M3heM
OKNwNgU5lsENsYlL09EDflL531mxr8DR6WgV98MCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTiLJytuTD+9B75qAD29zJxtrlmMzAfBgNVHSMEGDAWgBT2r0M5dN83O3Cr
12sT4ccMd19VSzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlxOURPWFRmTnp0d3E5ZHJFLUhIREhkZlZVcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvZjljYWYwLTJjMmUtNDg5Ny04YTNiLWEyNmJjNjUzYjA2Yi8x
LzRpeWNyYmt3X3ZRZS1hZ0E5dmN5Y2JhNVpqTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
ZjljYWYwLTJjMmUtNDg5Ny04YTNiLWEyNmJjNjUzYjA2Yi8xLzlxOURPWFRmTnp0
d3E5ZHJFLUhIREhkZlZVcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoSPoABADANBgkqhkiG9w0BAQsF
AAOCAQEAFUKxfTEqOZZ3tXTclRBV66b/P7hzU+9oZ9RZB7LBQV1ZnmovAGLQ1HXq
X9hN+lIwSxeE5NdC5Tb6oZ80AoWytHzFdcYvFRNChgOlfMGNrHTZiCjxQiQ/mlbY
uCHW88jf44ZEF8sAMPP42hMTnfVQnpwDbO6KVo4ciFtMmMfC4moL+NpgC9xmEbLL
QxyOuYg2QZlQwwoOE0DYMt8NWzofdj8DYlwSajUKScLsux37Swg/Q1XZtDsHmW+R
uCdArxeRwkWuM4UB9MEZb6/2nx2Q0AANyDHRPFmcx/4+XxzmtAcp0GMoA9vdahwG
3+H4ZoqZd1PxmoQgvcetPWUEYv4LSw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:18 2024 by rpki-client on console-ams.rpki-client.org