Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/XbcIj0Tc7X0E1rtXgzCPNPH61HM.roa
File: XbcIj0Tc7X0E1rtXgzCPNPH61HM.roa (raw, json)
Hash identifier: sYV4DbKNOOsNKiObg9srG6wFcuIvJ0LJz1ASDCePkTA=
Subject key identifier: 5D:B7:08:8F:44:DC:ED:7D:04:D6:BB:57:83:30:8F:34:F1:FA:D4:73
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0182C206190FD52B6A04FB8516BAE6D9801D
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/XbcIj0Tc7X0E1rtXgzCPNPH61HM.roa
Signing time: Sun 21 Aug 2022 20:09:15 +0000
ROA not before: Sun 21 Aug 2022 20:09:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212996
IP address blocks: 2a0c:9a40:8d00::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c2:06:19:0f:d5:2b:6a:04:fb:85:16:ba:e6:d9:80:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Aug 21 20:09:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5db7088f44dced7d04d6bb5783308f34f1fad473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:ea:53:8c:82:b8:e2:3f:09:b0:49:eb:c9:
b9:bc:c7:58:1a:26:1a:b8:9b:4a:f0:7b:70:76:9a:
9e:6b:dc:c2:f0:b2:1b:f7:3a:ec:b8:ef:24:ad:f4:
9b:b7:6b:5f:3e:53:c6:ca:8b:20:28:ef:9e:be:ae:
b2:5b:f8:f3:ac:ec:02:08:85:be:77:a6:37:48:e6:
c0:e3:37:86:b4:a6:9e:43:64:b8:94:16:5e:08:f2:
e1:dd:f1:1c:0d:a3:c2:56:03:f2:af:90:21:35:27:
54:ed:34:47:5f:80:a5:3e:2e:d0:e8:fc:e3:1f:69:
bc:1b:2f:61:27:1e:75:b2:a7:57:77:76:60:41:03:
d3:aa:8c:51:d6:b8:e8:16:9e:6a:6c:57:0a:38:8a:
7b:fc:b3:81:fb:71:92:d2:90:57:61:c9:6b:bd:86:
cc:12:23:99:ee:cc:87:d6:62:54:7d:8f:97:ec:f0:
e2:96:62:a1:15:3c:c2:33:5b:56:1a:7d:3f:6f:ff:
8a:5f:88:85:32:39:6a:6a:30:63:cf:63:04:24:d0:
ac:71:c9:6f:d3:23:55:34:81:de:e8:1f:06:08:55:
a0:25:05:ef:4b:c3:72:47:04:5a:c0:db:d9:c5:4c:
ae:1a:f6:d5:7d:26:7c:c1:9f:92:b7:a1:5f:4a:9d:
e9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B7:08:8F:44:DC:ED:7D:04:D6:BB:57:83:30:8F:34:F1:FA:D4:73
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/XbcIj0Tc7X0E1rtXgzCPNPH61HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8d00::/40
Signature Algorithm: sha256WithRSAEncryption
43:26:9c:22:0d:fd:02:2c:8c:a2:18:03:1c:8d:ee:ed:e4:c4:
ca:7f:10:5d:16:94:8a:4d:23:33:81:fb:e0:23:56:6b:e3:45:
d7:6a:09:cb:f5:1c:aa:b0:b2:bd:0d:58:fd:eb:f2:ba:d2:9e:
d6:a8:42:8f:49:2b:7a:c1:d5:1c:e7:56:c9:dc:68:d5:a9:64:
b1:0d:b0:98:8b:4b:52:ca:41:7e:9e:e7:61:ab:9a:ff:b0:b0:
c7:7f:2d:68:c6:85:08:52:e5:c8:1d:fd:64:ce:88:ee:34:db:
59:92:e1:7a:bd:82:95:cf:50:a6:cf:d2:88:2f:f9:a5:56:b8:
57:d8:3a:bd:30:ec:7a:68:fa:d5:71:ef:6e:f8:0a:87:ea:1d:
5d:a6:4b:fd:d7:98:58:e7:17:85:80:c2:19:68:e2:80:22:e6:
c4:e7:bc:ae:f0:f1:b5:57:86:c3:6a:7f:d8:97:19:e6:5a:8e:
72:83:0d:b8:07:ea:60:10:51:d1:db:08:f4:da:18:bb:40:e6:
63:ff:a7:c2:7f:d0:42:d8:4a:35:1f:c2:8d:c6:91:90:2e:a9:
33:91:80:81:02:1f:8e:e5:13:c0:9d:94:30:2c:ce:d5:99:4b:
7f:80:d6:b1:fc:7e:89:e7:33:4c:10:55:3c:6e:99:79:c9:4a:
0f:15:c2:9c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYLCBhkP1StqBPuFFrrm2YAdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjIwODIxMjAwOTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGI3MDg4ZjQ0ZGNlZDdkMDRkNmJiNTc4MzMwOGYzNGYxZmFkNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkDqU4yCuOI/CbBJ68m5vMdYGiYa
uJtK8Htwdpqea9zC8LIb9zrsuO8krfSbt2tfPlPGyosgKO+evq6yW/jzrOwCCIW+
d6Y3SObA4zeGtKaeQ2S4lBZeCPLh3fEcDaPCVgPyr5AhNSdU7TRHX4ClPi7Q6Pzj
H2m8Gy9hJx51sqdXd3ZgQQPTqoxR1rjoFp5qbFcKOIp7/LOB+3GS0pBXYclrvYbM
EiOZ7syH1mJUfY+X7PDilmKhFTzCM1tWGn0/b/+KX4iFMjlqajBjz2MEJNCscclv
0yNVNIHe6B8GCFWgJQXvS8NyRwRawNvZxUyuGvbVfSZ8wZ+St6FfSp3pBQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFF23CI9E3O19BNa7V4MwjzTx+tRzMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvWGJjSWowVGM3WDBFMXJ0WGd6Q1BOUEg2MUhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaQI0w
DQYJKoZIhvcNAQELBQADggEBAEMmnCIN/QIsjKIYAxyN7u3kxMp/EF0WlIpNIzOB
++AjVmvjRddqCcv1HKqwsr0NWP3r8rrSntaoQo9JK3rB1RznVsncaNWpZLENsJiL
S1LKQX6e52Grmv+wsMd/LWjGhQhS5cgd/WTOiO4021mS4Xq9gpXPUKbP0ogv+aVW
uFfYOr0w7Hpo+tVx7274CofqHV2mS/3XmFjnF4WAwhlo4oAi5sTnvK7w8bVXhsNq
f9iXGeZajnKDDbgH6mAQUdHbCPTaGLtA5mP/p8J/0ELYSjUfwo3GkZAuqTORgIEC
H47lE8CdlDAsztWZS3+A1rH8fonnM0wQVTxumXnJSg8Vwpw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:28 2023 by rpki-client on console-ams.rpki-client.org