Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/1UfbROeJ7tinMtE_bsTsvfTibco.roa
File: 1UfbROeJ7tinMtE_bsTsvfTibco.roa (raw, json)
Hash identifier: xuH2bgcLrn6ba8T01LnWRxu1TJ1YPqp12SB0+dJ6We4=
Subject key identifier: D5:47:DB:44:E7:89:EE:D8:A7:32:D1:3F:6E:C4:EC:BD:F4:E2:6D:CA
Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial: 0799BC02
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/1UfbROeJ7tinMtE_bsTsvfTibco.roa
Signing time: Sat 01 Jan 2022 02:52:52 +0000
ROA not before: Sat 01 Jan 2022 02:52:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207834
IP address blocks: 2a0e:3940:3200::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127515650 (0x799bc02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Validity
Not Before: Jan 1 02:52:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d547db44e789eed8a732d13f6ec4ecbdf4e26dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7a:bc:b3:39:f3:fe:05:e1:60:b2:db:99:84:
5e:19:06:8b:0a:58:c5:0c:5b:97:16:fb:d3:8a:30:
0e:08:67:60:d5:1a:e1:2d:94:36:9c:1d:16:4e:37:
ab:19:09:5e:e7:ec:49:68:d0:55:fa:49:cc:39:bc:
fb:1d:89:bf:7d:23:65:0b:8f:1b:d9:e9:72:3f:c0:
9a:4f:3a:9d:ae:6a:8b:49:06:4d:d3:60:50:78:b4:
b5:c2:c1:72:3d:30:57:b8:ce:e0:65:eb:a8:2e:5f:
51:1e:dd:d1:91:4b:eb:40:f0:c2:dd:2e:42:8b:73:
2a:af:0c:17:6c:27:66:59:2d:ef:d1:49:5f:58:0e:
ee:a7:c1:f0:4d:b6:4d:c6:f9:fd:0d:3f:27:7d:f1:
91:2e:bf:8c:4f:28:9e:28:14:29:e2:bf:2c:96:2c:
c5:0b:4a:eb:a4:f8:53:44:c5:9f:20:62:60:4f:f1:
2c:01:79:42:63:70:1d:4f:a2:14:5a:c0:88:00:0e:
65:05:34:a4:1d:16:26:32:5d:60:ae:0c:af:90:18:
2d:77:f5:92:68:8c:5b:cd:b1:90:26:55:b2:ca:95:
74:7a:b9:fe:4a:eb:aa:97:0e:09:4f:e1:1a:da:09:
b5:0f:b8:c8:46:96:66:c4:2f:7c:72:15:7d:4f:15:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:47:DB:44:E7:89:EE:D8:A7:32:D1:3F:6E:C4:EC:BD:F4:E2:6D:CA
X509v3 Authority Key Identifier:
keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/1UfbROeJ7tinMtE_bsTsvfTibco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3940:3200::/44
Signature Algorithm: sha256WithRSAEncryption
8d:c5:9b:c1:58:06:3a:2d:a0:a2:31:a0:61:2b:6e:fe:1a:32:
38:8e:ce:aa:de:87:94:97:29:1d:98:57:27:5b:b4:f9:45:62:
97:74:0a:b0:8c:2d:81:08:cc:51:30:20:c5:af:bc:75:74:0e:
8a:8f:c4:40:9c:2e:44:fa:45:08:64:1e:d3:8f:3f:da:75:ff:
e8:9e:ba:7d:5f:bd:e4:53:75:f3:ad:54:d5:b7:f5:95:c8:49:
76:78:ec:8e:27:74:86:20:96:2d:2e:3f:77:ce:99:84:a8:68:
64:58:ec:30:60:3d:a9:6d:b5:82:05:08:01:cc:ef:3a:85:30:
1b:04:6d:cc:40:8a:6c:e5:5b:36:57:c1:79:10:be:b1:ab:61:
2b:75:4e:9b:32:ad:62:3e:a0:c9:f1:78:1a:3d:23:d9:a1:82:
9e:82:12:1c:60:8d:4f:79:51:77:e8:15:6a:20:67:76:0d:1a:
41:1b:0f:48:bf:96:fb:a8:aa:f6:bb:8b:f1:a6:da:11:61:84:
41:03:0d:bc:1e:d7:da:be:8a:f5:f4:3d:82:b4:9a:86:5b:89:
3b:95:16:59:61:c3:d0:0b:e6:5c:2d:94:39:2b:f1:a3:b4:e6:
21:36:24:09:0d:af:0d:b3:59:36:df:9a:d4:a6:3b:a7:b2:1b:
dd:f5:f3:63
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEB5m8AjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZjYxYWE1ZDFiZWZkN2EwZmUzZTRkZmUzYWE4ZGE3M2VmY2ZiYTM0MB4XDTIyMDEw
MTAyNTI1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDU0N2RiNDRlNzg5
ZWVkOGE3MzJkMTNmNmVjNGVjYmRmNGUyNmRjYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMp6vLM58/4F4WCy25mEXhkGiwpYxQxblxb704owDghnYNUa
4S2UNpwdFk43qxkJXufsSWjQVfpJzDm8+x2Jv30jZQuPG9npcj/Amk86na5qi0kG
TdNgUHi0tcLBcj0wV7jO4GXrqC5fUR7d0ZFL60Dwwt0uQotzKq8MF2wnZlkt79FJ
X1gO7qfB8E22Tcb5/Q0/J33xkS6/jE8onigUKeK/LJYsxQtK66T4U0TFnyBiYE/x
LAF5QmNwHU+iFFrAiAAOZQU0pB0WJjJdYK4Mr5AYLXf1kmiMW82xkCZVssqVdHq5
/krrqpcOCU/hGtoJtQ+4yEaWZsQvfHIVfU8VIrcCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTVR9tE54nu2Kcy0T9uxOy99OJtyjAfBgNVHSMEGDAWgBQfYapdG+/XoP4+
Tf46qNpz78+6NDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0gyR3FYUnZ2MTZELVBrMy1PcWphYy1fUHVqUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDcvMGFkNDE0LTNkZjEtNGIzOC04NjllLWM2MjFlOGRmOTVmZi8x
LzFVZmJST2VKN3Rpbk10RV9ic1RzdmZUaWJjby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcv
MGFkNDE0LTNkZjEtNGIzOC04NjllLWM2MjFlOGRmOTVmZi8xL0gyR3FYUnZ2MTZE
LVBrMy1PcWphYy1fUHVqUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoOOUAyADANBgkqhkiG9w0BAQsF
AAOCAQEAjcWbwVgGOi2gojGgYStu/hoyOI7Oqt6HlJcpHZhXJ1u0+UVil3QKsIwt
gQjMUTAgxa+8dXQOio/EQJwuRPpFCGQe048/2nX/6J66fV+95FN1861U1bf1lchJ
dnjsjid0hiCWLS4/d86ZhKhoZFjsMGA9qW21ggUIAczvOoUwGwRtzECKbOVbNlfB
eRC+sathK3VOmzKtYj6gyfF4Gj0j2aGCnoISHGCNT3lRd+gVaiBndg0aQRsPSL+W
+6iq9ruL8abaEWGEQQMNvB7X2r6K9fQ9grSahluJO5UWWWHD0AvmXC2UOSvxo7Tm
ITYkCQ2vDbNZNt+a1KY7p7Ib3fXzYw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:26 2024 by rpki-client on console-ams.rpki-client.org