Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/EtN7E1zdenRKJBw0YGfoVcl37l8.roa
File: EtN7E1zdenRKJBw0YGfoVcl37l8.roa (raw, json)
Hash identifier: rF584C6FN1I77j+w4mPJcNxVJ6bh84Z1Sg2rp/Wmx2E=
Subject key identifier: 12:D3:7B:13:5C:DD:7A:74:4A:24:1C:34:60:67:E8:55:C9:77:EE:5F
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 018534F0218E43DC86F692D8FB00D0749CDA
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/EtN7E1zdenRKJBw0YGfoVcl37l8.roa
Signing time: Wed 21 Dec 2022 13:47:10 +0000
ROA not before: Wed 21 Dec 2022 13:47:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31743
IP address blocks: 2a10:8800::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:f0:21:8e:43:dc:86:f6:92:d8:fb:00:d0:74:9c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Dec 21 13:47:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12d37b135cdd7a744a241c346067e855c977ee5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:ae:b1:1c:92:e9:48:ba:90:b1:12:2c:e5:
8a:bb:93:64:77:2d:57:10:2c:20:ae:c0:1b:14:09:
1d:75:f1:3d:92:29:49:42:64:0f:b9:18:db:f5:80:
94:c0:a9:fe:85:0a:4b:71:4a:c4:9a:36:e2:cf:c5:
e4:7c:61:13:84:1f:f4:85:68:7c:77:96:17:e9:f5:
13:73:eb:d3:65:5c:ef:7f:f5:91:97:a2:2a:de:55:
6f:60:9d:7d:67:26:c4:d8:fe:a9:a8:8d:70:71:95:
58:3b:a0:01:54:3b:e9:c4:80:91:34:6c:8e:98:96:
bf:f1:7a:38:d2:95:2a:17:e5:86:6b:b6:bb:e4:02:
f4:71:3f:2a:a0:c7:c3:68:d6:c3:bc:54:ee:29:a8:
cb:3b:e9:4f:80:1f:1c:16:cc:67:57:bc:2a:34:70:
c4:e4:7f:aa:7b:9a:14:5a:b0:f5:5d:3c:04:43:2e:
a5:3a:40:a1:e9:e2:88:18:3b:e3:7d:26:c3:88:d4:
d8:6f:39:c3:c2:9f:88:bf:17:ca:cb:da:92:81:3a:
ce:4b:80:86:0b:a5:ef:d8:48:f3:48:fd:4b:b6:11:
33:29:3c:6e:47:1e:cd:4e:93:42:54:0e:81:8e:58:
87:01:c7:f6:1f:11:04:41:e9:4a:d2:8d:ad:c0:cf:
2a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D3:7B:13:5C:DD:7A:74:4A:24:1C:34:60:67:E8:55:C9:77:EE:5F
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/EtN7E1zdenRKJBw0YGfoVcl37l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:8800::/29
Signature Algorithm: sha256WithRSAEncryption
7d:c7:ba:40:cb:74:da:0b:bf:09:e3:90:67:02:34:51:29:ce:
23:d6:06:55:3e:d9:53:72:7c:ad:82:67:e8:93:33:3d:3a:be:
ac:be:08:cf:b7:fc:b1:66:3f:70:f6:cf:c6:9e:2c:10:ab:a9:
c8:73:a9:af:8c:98:0e:c5:50:f7:30:eb:ba:a7:cd:cb:5b:d0:
68:9a:91:e6:22:aa:a4:14:ac:6d:ed:0f:40:6d:50:0c:df:b4:
b5:eb:93:0b:9a:9c:c3:a8:19:7b:e9:04:81:a6:43:ff:31:86:
58:a9:e5:e1:88:0c:14:50:e7:83:29:74:11:e9:d9:12:d3:4a:
01:46:27:cd:bf:52:87:a0:da:ad:4c:f8:c2:fa:ce:cc:d4:0d:
9f:0b:17:b1:ae:0b:64:87:15:f8:15:76:a4:a9:2a:08:24:90:
fc:0e:aa:92:a3:8e:4a:fb:01:d1:b1:3b:e9:e7:ef:05:d7:e8:
7f:8f:90:c8:c7:0b:8f:09:dd:92:2e:49:f5:0b:9a:13:25:4a:
d4:a2:88:7f:f5:96:10:e9:04:16:61:19:3a:ce:1e:41:1c:f3:
29:31:48:68:66:6b:19:09:cf:54:4c:98:6c:a0:9f:15:50:e8:
f9:06:40:09:df:ee:99:e2:a7:a3:8e:8f:21:ce:25:59:27:f0:
b9:5c:43:42
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYU08CGOQ9yG9pLY+wDQdJzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNGU0MDUzNTlhMjEzMTcwOGZjMDI0MzhkNDcyNTY4ZTJj
MDM0NzAwHhcNMjIxMjIxMTM0NzEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmQzN2IxMzVjZGQ3YTc0NGEyNDFjMzQ2MDY3ZTg1NWM5NzdlZTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVqusRyS6Ui6kLESLOWKu5Nkdy1X
ECwgrsAbFAkddfE9kilJQmQPuRjb9YCUwKn+hQpLcUrEmjbiz8XkfGEThB/0hWh8
d5YX6fUTc+vTZVzvf/WRl6Iq3lVvYJ19ZybE2P6pqI1wcZVYO6ABVDvpxICRNGyO
mJa/8Xo40pUqF+WGa7a75AL0cT8qoMfDaNbDvFTuKajLO+lPgB8cFsxnV7wqNHDE
5H+qe5oUWrD1XTwEQy6lOkCh6eKIGDvjfSbDiNTYbznDwp+IvxfKy9qSgTrOS4CG
C6Xv2EjzSP1LthEzKTxuRx7NTpNCVA6BjliHAcf2HxEEQelK0o2twM8qfQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBLTexNc3Xp0SiQcNGBn6FXJd+5fMB8GA1UdIwQY
MBaAFPpOQFNZohMXCPwCQ41HJWjiwDRwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rNUFVMW1pRXhjSV9BSkRqVWNsYU9MQU5IQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvNmEzZjM1LTM1YjgtNDllMC05ZjQ0
LWI4MThmYWVjYjcxNy8xL0V0TjdFMXpkZW5SS0pCdzBZR2ZvVmNsMzdsOC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDcvNmEzZjM1LTM1YjgtNDllMC05ZjQ0LWI4MThmYWVjYjcx
Ny8xLzEtazVBVTFtaUV4Y0lfQUpEalVjbGFPTEFOSEEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQMqEIgA
MA0GCSqGSIb3DQEBCwUAA4IBAQB9x7pAy3TaC78J45BnAjRRKc4j1gZVPtlTcnyt
gmfokzM9Or6svgjPt/yxZj9w9s/GniwQq6nIc6mvjJgOxVD3MOu6p83LW9BompHm
IqqkFKxt7Q9AbVAM37S165MLmpzDqBl76QSBpkP/MYZYqeXhiAwUUOeDKXQR6dkS
00oBRifNv1KHoNqtTPjC+s7M1A2fCxexrgtkhxX4FXakqSoIJJD8DqqSo45K+wHR
sTvp5+8F1+h/j5DIxwuPCd2SLkn1C5oTJUrUooh/9ZYQ6QQWYRk6zh5BHPMpMUho
ZmsZCc9UTJhsoJ8VUOj5BkAJ3+6Z4qejjo8hziVZJ/C5XENC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:50 2024 by rpki-client on console-fra.rpki-client.org