Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/4XSHKdFAh8BGRX_ashzFAakbZCA.roa
File: 4XSHKdFAh8BGRX_ashzFAakbZCA.roa (raw, json)
Hash identifier: Z6+aK4RLIZ8qBCLTZK+eqmQ54S2MjZ5rONqqNaX09yw=
Subject key identifier: E1:74:87:29:D1:40:87:C0:46:45:7F:DA:B2:1C:C5:01:A9:1B:64:20
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 433BBEC7
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/4XSHKdFAh8BGRX_ashzFAakbZCA.roa
Signing time: Sat 01 Jan 2022 07:59:49 +0000
ROA not before: Sat 01 Jan 2022 07:59:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16265
IP address blocks: 2a03:f85:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1127988935 (0x433bbec7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 1 07:59:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1748729d14087c046457fdab21cc501a91b6420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:67:28:9d:4a:67:84:2a:da:4c:14:eb:47:
51:f9:a3:c0:b2:cb:5e:20:40:0b:5d:d7:8f:b1:5d:
64:ab:d3:62:44:a1:84:2c:52:33:dd:d6:6d:56:2d:
67:94:16:98:a5:c8:2e:c6:a4:55:90:02:b9:2e:1f:
fa:70:c2:10:81:38:fe:57:b7:bd:95:4b:96:72:54:
c4:49:f2:db:dd:fb:08:0b:59:26:09:30:76:c1:16:
ce:70:a2:93:a6:41:62:93:d5:87:36:92:07:76:9c:
01:69:bd:03:1b:7a:6f:bd:bf:f7:fc:0c:be:39:5d:
3b:30:f0:2f:22:7b:83:d0:57:f9:11:c4:b6:10:b8:
36:26:02:05:27:4b:97:e5:69:36:2e:df:17:54:b2:
7c:72:d5:e4:a8:fd:4d:06:07:7f:85:f9:b9:e4:92:
7d:d2:16:80:3b:47:9c:55:7b:c8:6c:08:65:88:56:
3a:b1:c2:4e:04:7e:70:e5:b1:b9:09:ec:a1:bb:6b:
16:96:36:8e:9f:86:88:88:3e:24:bd:ee:6c:be:75:
51:30:7c:73:51:22:1c:a9:ae:de:26:97:05:96:fc:
ea:f5:57:7c:16:15:36:01:4e:14:e8:8e:13:dd:63:
a4:59:e2:0f:95:bb:fd:74:fb:5b:ae:b9:6c:ae:7a:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:74:87:29:D1:40:87:C0:46:45:7F:DA:B2:1C:C5:01:A9:1B:64:20
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/4XSHKdFAh8BGRX_ashzFAakbZCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f85:2::/48
Signature Algorithm: sha256WithRSAEncryption
92:59:30:3b:70:5d:88:a6:26:29:f3:17:d9:04:9b:71:cf:b1:
cb:9d:61:44:51:53:38:f1:bc:22:cf:ae:c7:42:fd:3a:07:7d:
80:a1:a0:1e:e7:8b:7e:83:b4:53:7c:9e:57:3f:cd:8c:bd:02:
8e:3f:ea:d4:fa:a9:77:ee:47:a0:2b:04:9d:63:ad:1d:2f:92:
e3:3c:25:5c:a4:32:fb:33:25:96:50:67:ac:b2:2d:80:17:d2:
c6:8f:2d:af:32:c0:a4:06:8f:96:1f:a6:4d:57:92:f2:03:72:
e5:5e:8d:ca:65:ab:25:00:79:f0:f4:d3:24:c8:1c:65:3e:7b:
cc:28:5b:ec:a7:c0:6b:ac:04:9f:79:26:49:c3:29:31:17:c0:
fd:99:6f:27:93:42:76:f5:14:e3:83:c7:db:d5:b4:99:2a:88:
76:46:d1:29:c6:46:db:c1:48:f4:70:e8:85:6b:af:3e:db:3a:
94:0e:4a:d2:b1:ee:13:da:cf:6f:53:08:b9:74:22:7a:93:e4:
79:d2:3e:29:53:34:c3:18:0a:4a:8f:2d:20:07:57:0b:e0:ed:
53:35:f9:4e:50:fc:da:66:cd:0d:7d:ad:7a:8f:3e:a1:a1:73:
98:40:dc:6d:dd:c3:1f:6f:88:c3:e5:f1:a8:30:0f:97:85:0b:
06:41:36:d7
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEQzu+xzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MjE3YjQ3MmM4NDFjMWQ2ODU1MGEyNGYxOTM2ZDI5Y2M2YzI4ZjZhMB4XDTIyMDEw
MTA3NTk0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTE3NDg3MjlkMTQw
ODdjMDQ2NDU3ZmRhYjIxY2M1MDFhOTFiNjQyMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMfgZyidSmeEKtpMFOtHUfmjwLLLXiBAC13Xj7FdZKvTYkSh
hCxSM93WbVYtZ5QWmKXILsakVZACuS4f+nDCEIE4/le3vZVLlnJUxEny2937CAtZ
JgkwdsEWznCik6ZBYpPVhzaSB3acAWm9Axt6b72/9/wMvjldOzDwLyJ7g9BX+RHE
thC4NiYCBSdLl+VpNi7fF1SyfHLV5Kj9TQYHf4X5ueSSfdIWgDtHnFV7yGwIZYhW
OrHCTgR+cOWxuQnsobtrFpY2jp+GiIg+JL3ubL51UTB8c1EiHKmu3iaXBZb86vVX
fBYVNgFOFOiOE91jpFniD5W7/XT7W665bK56b+MCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBThdIcp0UCHwEZFf9qyHMUBqRtkIDAfBgNVHSMEGDAWgBTSF7RyyEHB1oVQ
ok8ZNtKcxsKPajAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBoZTBjc2hCd2RhRlVLSlBHVGJTbk1iQ2oyby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTAvMjkwZTQ0LWI0NzktNDZjZi1hYjRiLWIzOGUyNjc3YjNkYy8x
LzRYU0hLZEZBaDhCR1JYX2FzaHpGQWFrYlpDQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAv
MjkwZTQ0LWI0NzktNDZjZi1hYjRiLWIzOGUyNjc3YjNkYy8xLzBoZTBjc2hCd2Rh
RlVLSlBHVGJTbk1iQ2oyby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoDD4UAAjANBgkqhkiG9w0BAQsF
AAOCAQEAklkwO3BdiKYmKfMX2QSbcc+xy51hRFFTOPG8Is+ux0L9Ogd9gKGgHueL
foO0U3yeVz/NjL0Cjj/q1Pqpd+5HoCsEnWOtHS+S4zwlXKQy+zMlllBnrLItgBfS
xo8trzLApAaPlh+mTVeS8gNy5V6NymWrJQB58PTTJMgcZT57zChb7KfAa6wEn3km
ScMpMRfA/ZlvJ5NCdvUU44PH29W0mSqIdkbRKcZG28FI9HDohWuvPts6lA5K0rHu
E9rPb1MIuXQiepPkedI+KVM0wxgKSo8tIAdXC+DtUzX5TlD82mbNDX2teo8+oaFz
mEDcbd3DH2+Iw+XxqDAPl4ULBkE21w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:28 2024 by rpki-client on console-fra.rpki-client.org