Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/1a231nS0M6UzPXjAwMymbZlrEI4.roa
File: 1a231nS0M6UzPXjAwMymbZlrEI4.roa (raw, json)
Hash identifier: 1GnNVNWLVR+P1Qoibrnsa1tGKaP05mK+/EEhGAlfAJQ=
Subject key identifier: D5:AD:B7:D6:74:B4:33:A5:33:3D:78:C0:C0:CC:A6:6D:99:6B:10:8E
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 434295E2
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/1a231nS0M6UzPXjAwMymbZlrEI4.roa
Signing time: Sat 01 Jan 2022 07:59:52 +0000
ROA not before: Sat 01 Jan 2022 07:59:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34305
IP address blocks: 2a03:f85:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1128437218 (0x434295e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 1 07:59:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5adb7d674b433a5333d78c0c0cca66d996b108e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3a:70:09:a9:d5:b0:bf:28:73:bd:1a:3b:36:
cf:36:74:dc:31:f3:fd:71:c8:2a:bc:40:19:97:eb:
0e:4c:01:b7:82:53:1a:19:66:f2:b8:a8:19:17:71:
71:a8:f5:b9:2b:ea:26:56:56:e9:5a:f1:72:d2:37:
26:9c:08:2c:86:10:99:62:eb:17:8b:42:2e:89:7b:
d2:bf:8e:6a:5f:a8:8a:ed:24:fe:97:00:75:75:94:
b4:b1:cb:26:e1:ee:a7:b5:4b:1c:66:bc:8e:6b:7a:
05:b8:7a:58:ad:ae:28:3e:d3:73:0f:f7:58:6e:2c:
ae:3a:38:fe:70:90:0c:16:f5:0c:65:17:44:bc:80:
a4:6f:95:81:33:1c:26:af:f9:0f:cb:e4:de:55:f0:
08:a8:46:41:13:07:ba:88:38:0f:2b:01:f1:80:58:
14:d1:c7:58:f5:ea:cd:09:f0:e0:c5:7c:e4:29:07:
36:de:cc:cd:0c:30:39:c1:54:db:0a:73:50:8d:53:
5c:08:3a:80:8e:54:01:54:80:22:30:6d:a9:a6:3c:
aa:b6:ee:53:2f:03:37:d2:2b:02:1b:4a:73:9d:9b:
f1:d1:19:81:b8:23:fb:b6:1a:13:98:31:f4:d3:03:
9f:57:e4:d1:84:95:b4:16:4d:6d:a4:47:fa:ca:8c:
ce:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AD:B7:D6:74:B4:33:A5:33:3D:78:C0:C0:CC:A6:6D:99:6B:10:8E
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/1a231nS0M6UzPXjAwMymbZlrEI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f85:1::/48
Signature Algorithm: sha256WithRSAEncryption
44:5d:ba:31:d0:b3:13:f1:ae:89:30:03:6f:e2:2f:74:d0:26:
56:58:0f:e7:9b:fe:1e:e0:39:ed:1e:56:4e:dc:d8:b8:1f:d0:
b8:b6:49:ea:51:3f:0e:6d:ae:9e:cd:7c:f5:78:57:e8:77:ed:
7e:70:80:5e:c8:52:f9:34:fc:c0:9b:1a:ff:4e:f4:64:8d:f5:
30:6d:c6:ea:75:12:c6:07:87:eb:5c:c1:62:90:44:f0:3d:8b:
fa:1b:b7:bc:74:4d:b0:bd:39:b1:e2:b7:eb:d4:6d:54:74:40:
3f:a2:72:23:21:12:9c:4e:e6:73:60:bb:07:07:e2:87:1a:23:
91:64:24:62:94:63:46:93:ad:4e:85:62:08:61:c3:f3:48:0a:
80:96:69:b6:af:16:b2:f5:38:6a:15:13:73:18:4d:21:d3:1a:
f4:8e:98:98:a0:0f:3a:b8:02:1a:f7:2b:ce:0b:b6:3f:f5:18:
83:e3:ad:bb:13:e9:93:dc:a0:80:f6:ed:59:ea:97:59:97:c8:
2b:ab:3a:b8:8f:bc:81:b7:67:01:7c:cd:6d:ba:86:68:bb:87:
73:52:e8:bd:f1:3d:1f:af:4b:12:dd:21:2a:35:a6:14:b0:e9:
7c:2f:1b:06:1d:06:32:06:96:ee:1a:8f:e3:1e:24:3f:06:bc:
59:b1:76:8a
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEQ0KV4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MjE3YjQ3MmM4NDFjMWQ2ODU1MGEyNGYxOTM2ZDI5Y2M2YzI4ZjZhMB4XDTIyMDEw
MTA3NTk1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDVhZGI3ZDY3NGI0
MzNhNTMzM2Q3OGMwYzBjY2E2NmQ5OTZiMTA4ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJE6cAmp1bC/KHO9Gjs2zzZ03DHz/XHIKrxAGZfrDkwBt4JT
Ghlm8rioGRdxcaj1uSvqJlZW6VrxctI3JpwILIYQmWLrF4tCLol70r+Oal+oiu0k
/pcAdXWUtLHLJuHup7VLHGa8jmt6Bbh6WK2uKD7Tcw/3WG4srjo4/nCQDBb1DGUX
RLyApG+VgTMcJq/5D8vk3lXwCKhGQRMHuog4DysB8YBYFNHHWPXqzQnw4MV85CkH
Nt7MzQwwOcFU2wpzUI1TXAg6gI5UAVSAIjBtqaY8qrbuUy8DN9IrAhtKc52b8dEZ
gbgj+7YaE5gx9NMDn1fk0YSVtBZNbaRH+sqMzu8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTVrbfWdLQzpTM9eMDAzKZtmWsQjjAfBgNVHSMEGDAWgBTSF7RyyEHB1oVQ
ok8ZNtKcxsKPajAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBoZTBjc2hCd2RhRlVLSlBHVGJTbk1iQ2oyby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTAvMjkwZTQ0LWI0NzktNDZjZi1hYjRiLWIzOGUyNjc3YjNkYy8x
LzFhMjMxblMwTTZVelBYakF3TXltYlpsckVJNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAv
MjkwZTQ0LWI0NzktNDZjZi1hYjRiLWIzOGUyNjc3YjNkYy8xLzBoZTBjc2hCd2Rh
RlVLSlBHVGJTbk1iQ2oyby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoDD4UAATANBgkqhkiG9w0BAQsF
AAOCAQEARF26MdCzE/GuiTADb+IvdNAmVlgP55v+HuA57R5WTtzYuB/QuLZJ6lE/
Dm2uns189XhX6HftfnCAXshS+TT8wJsa/070ZI31MG3G6nUSxgeH61zBYpBE8D2L
+hu3vHRNsL05seK369RtVHRAP6JyIyESnE7mc2C7BwfihxojkWQkYpRjRpOtToVi
CGHD80gKgJZptq8WsvU4ahUTcxhNIdMa9I6YmKAPOrgCGvcrzgu2P/UYg+OtuxPp
k9yggPbtWeqXWZfIK6s6uI+8gbdnAXzNbbqGaLuHc1LovfE9H69LEt0hKjWmFLDp
fC8bBh0GMgaW7hqP4x4kPwa8WbF2ig==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:28 2024 by rpki-client on console-fra.rpki-client.org