Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rtYYRzUdNxSIEyH8XbklyZ1LQog.roa
File: rtYYRzUdNxSIEyH8XbklyZ1LQog.roa (raw, json)
Hash identifier: Etune1iaf/nQVvZqiQl22VO+7ZzPxwGGbzgZqKWNKYw=
Subject key identifier: AE:D6:18:47:35:1D:37:14:88:13:21:FC:5D:B9:25:C9:9D:4B:42:88
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182C446E1DDCC13734A63234D75543F1DE7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rtYYRzUdNxSIEyH8XbklyZ1LQog.roa
Signing time: Mon 22 Aug 2022 06:39:15 +0000
ROA not before: Mon 22 Aug 2022 06:39:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205175
IP address blocks: 2a00:1728:31::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c4:46:e1:dd:cc:13:73:4a:63:23:4d:75:54:3f:1d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 22 06:39:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aed61847351d3714881321fc5db925c99d4b4288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:86:c5:37:13:b4:4d:50:51:02:69:38:6f:
ba:42:42:6d:73:9f:da:ba:d5:8e:45:9f:55:04:b5:
ba:e8:e4:2b:67:00:e1:1e:f3:d4:95:dd:46:10:ba:
f2:fc:ff:4f:10:57:d8:0a:b7:88:d6:91:45:e3:fb:
89:11:fc:72:51:cf:39:0c:95:44:53:5c:22:6e:7c:
00:98:e2:c1:f3:3b:cf:0e:d4:b6:b6:47:7a:83:a0:
27:ed:4b:83:7d:d2:a7:6d:bf:66:ca:5a:f2:4e:af:
f9:fb:15:c8:20:d1:8b:78:09:de:15:d3:5c:f9:3f:
b3:ce:b9:c5:46:04:69:8a:15:6f:c5:49:67:f1:80:
e9:32:12:f2:6b:23:27:7d:bd:9d:e3:a5:24:d1:3b:
25:89:02:5c:ae:fe:e1:0b:af:68:46:80:27:53:b0:
b2:e4:26:77:82:36:ac:d9:5c:e4:c0:6a:a9:25:77:
38:07:ff:5a:da:5a:8a:10:76:d6:f7:81:83:b5:ea:
0c:09:c4:e6:62:78:d2:ab:64:42:c6:4a:51:ce:e4:
1d:42:f5:7c:e1:68:9a:d8:17:6b:f3:55:17:21:a4:
9f:7e:80:3d:bd:a9:59:bc:25:74:d1:5f:5e:a0:83:
6c:33:7d:57:7a:e4:7a:0e:8c:cb:8f:2b:4f:b0:3b:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D6:18:47:35:1D:37:14:88:13:21:FC:5D:B9:25:C9:9D:4B:42:88
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rtYYRzUdNxSIEyH8XbklyZ1LQog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1728:31::/48
Signature Algorithm: sha256WithRSAEncryption
23:31:10:56:01:2f:9b:c2:bb:39:fb:b7:05:c5:78:27:80:75:
e2:e4:e1:04:13:5d:d1:31:2c:f5:e3:70:96:7c:7f:0b:1b:57:
6a:52:f8:87:f3:72:b3:52:88:a2:4d:41:32:14:b0:b4:f9:37:
c5:3e:73:91:2b:8d:85:42:69:27:d5:2e:83:74:ef:95:c7:92:
9d:09:41:cb:2c:ec:73:57:e1:11:9c:ea:66:58:6f:6f:87:f7:
02:c4:f2:0c:09:b7:92:f3:92:c9:b0:99:ad:fb:35:b2:65:6e:
61:fb:81:60:66:c7:32:b7:9e:28:e2:4f:e5:18:e6:fb:72:fa:
16:98:0d:ff:5c:f6:ac:e8:3a:84:6d:4f:6c:d6:d5:a4:c9:d9:
f5:83:f0:44:df:be:bf:6c:cc:a0:b7:52:0f:c9:67:39:83:65:
4b:f3:7a:00:85:b0:43:65:32:1b:ac:f3:7a:dd:ec:0f:59:a5:
44:69:87:c5:cf:b2:d2:e1:1f:03:45:21:0b:a9:89:2c:71:01:
ad:c6:78:09:98:74:3b:e7:b3:87:b7:bc:98:21:f7:1d:45:b2:
4e:8b:55:20:22:56:94:eb:03:31:33:a6:e5:ba:2f:5e:f9:92:
e8:89:cb:59:f2:38:d0:03:d5:aa:e8:eb:39:dd:54:bf:04:4d:
66:17:ae:17
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYLERuHdzBNzSmMjTXVUPx3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIwODIyMDYzOTE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWQ2MTg0NzM1MWQzNzE0ODgxMzIxZmM1ZGI5MjVjOTlkNGI0Mjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqaGxTcTtE1QUQJpOG+6QkJtc5/a
utWORZ9VBLW66OQrZwDhHvPUld1GELry/P9PEFfYCreI1pFF4/uJEfxyUc85DJVE
U1wibnwAmOLB8zvPDtS2tkd6g6An7UuDfdKnbb9mylryTq/5+xXIINGLeAneFdNc
+T+zzrnFRgRpihVvxUln8YDpMhLyayMnfb2d46Uk0TsliQJcrv7hC69oRoAnU7Cy
5CZ3gjas2VzkwGqpJXc4B/9a2lqKEHbW94GDteoMCcTmYnjSq2RCxkpRzuQdQvV8
4Wia2Bdr81UXIaSffoA9valZvCV00V9eoINsM31XeuR6DozLjytPsDtv5QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFK7WGEc1HTcUiBMh/F25JcmdS0KIMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcnRZWVJ6VWROeFNJRXlIOFhia2x5WjFMUW9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgAXKAAx
MA0GCSqGSIb3DQEBCwUAA4IBAQAjMRBWAS+bwrs5+7cFxXgngHXi5OEEE13RMSz1
43CWfH8LG1dqUviH83KzUoiiTUEyFLC0+TfFPnORK42FQmkn1S6DdO+Vx5KdCUHL
LOxzV+ERnOpmWG9vh/cCxPIMCbeS85LJsJmt+zWyZW5h+4FgZscyt54o4k/lGOb7
cvoWmA3/XPas6DqEbU9s1tWkydn1g/BE376/bMygt1IPyWc5g2VL83oAhbBDZTIb
rPN63ewPWaVEaYfFz7LS4R8DRSELqYkscQGtxngJmHQ757OHt7yYIfcdRbJOi1Ug
IlaU6wMxM6blui9e+ZLoictZ8jjQA9Wq6Os53VS/BE1mF64X
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:20 2024 by rpki-client on console-fra.rpki-client.org