Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/cgTiNPTKmXSr_NcGwPJ-meoDwuw.roa
File: cgTiNPTKmXSr_NcGwPJ-meoDwuw.roa (raw, json)
Hash identifier: gyI9ZdNG6PidKKI8Fi8NbLIrEz/cmxywINVYCbpT6Sw=
Subject key identifier: 72:04:E2:34:F4:CA:99:74:AB:FC:D7:06:C0:F2:7E:99:EA:03:C2:EC
Certificate issuer: /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial: 0184661240761027AB4B1D08982B3671425C
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/cgTiNPTKmXSr_NcGwPJ-meoDwuw.roa
Signing time: Fri 11 Nov 2022 09:43:02 +0000
ROA not before: Fri 11 Nov 2022 09:43:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 2a0e:48c4::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:12:40:76:10:27:ab:4b:1d:08:98:2b:36:71:42:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Validity
Not Before: Nov 11 09:43:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7204e234f4ca9974abfcd706c0f27e99ea03c2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:5b:da:b2:09:e6:54:a4:ea:af:86:d3:78:
da:25:fb:03:44:31:26:cc:fa:09:b1:54:28:ee:c7:
68:52:d8:37:a0:16:53:25:39:f2:b5:e3:9f:40:e8:
a0:dc:81:d3:38:84:3a:86:c9:eb:2e:67:04:d8:41:
75:fe:80:d0:e3:b6:d1:75:44:f3:6d:38:45:9a:3d:
9b:2c:fa:0e:c3:14:a1:b6:a9:95:1e:3a:e5:ac:12:
80:2f:da:74:a0:51:3c:bb:4a:73:eb:03:95:71:8a:
7b:06:7f:51:b2:94:7b:dc:70:45:1c:87:4c:06:75:
75:47:6e:bd:e1:f6:30:e5:c4:e3:ba:88:2f:dc:be:
1b:c5:85:98:06:5f:6e:41:98:d2:88:05:2a:da:55:
bf:47:b1:4c:ef:d5:b8:af:5b:52:bc:ca:e2:19:60:
c2:b2:22:2a:2c:c7:5c:68:9a:b8:d8:43:2d:1f:27:
4b:d9:c6:29:78:31:8b:17:ed:da:36:c2:8d:58:bf:
4c:39:df:3b:82:4e:48:17:6b:0e:33:07:b9:66:e0:
3a:b2:0a:92:33:9a:fc:ff:49:0d:38:80:d2:bc:7d:
56:7b:4a:68:30:b5:dc:22:19:cc:3f:6a:25:3e:01:
60:2f:b6:6d:6c:42:a2:d8:16:7a:98:e4:13:d2:bf:
27:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:04:E2:34:F4:CA:99:74:AB:FC:D7:06:C0:F2:7E:99:EA:03:C2:EC
X509v3 Authority Key Identifier:
keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/cgTiNPTKmXSr_NcGwPJ-meoDwuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:48c4::/32
Signature Algorithm: sha256WithRSAEncryption
47:d2:75:4e:aa:02:6e:12:04:55:16:96:13:8f:92:cf:27:38:
2e:54:57:6c:97:63:ee:95:bf:cb:80:15:0c:60:4f:b7:ed:97:
64:2c:e4:ea:af:49:ee:70:b9:39:05:0c:8d:4d:67:1d:64:cb:
0d:80:35:2a:58:ce:99:05:4b:06:16:84:50:28:c8:65:b6:b7:
47:da:9c:a7:c9:ed:4d:ff:bb:93:f6:20:18:ca:98:72:f6:9f:
71:57:b4:d9:d5:c7:a1:cc:31:eb:69:36:e9:27:4b:59:7a:47:
b6:5b:59:db:24:1e:10:0a:f3:fc:77:f8:f2:60:ed:ff:39:0b:
38:9c:41:b1:26:c9:dc:50:e9:18:aa:5b:c0:3f:cf:88:1d:39:
03:06:f3:4b:ed:9d:fa:1c:af:d8:dc:97:81:a0:8b:3c:85:b6:
aa:58:5d:09:7c:a2:12:12:82:56:6e:e2:c3:84:ae:5d:5b:4e:
6f:69:9b:d1:47:85:3d:b5:ad:17:db:74:4e:29:82:0a:d6:85:
a9:44:09:7d:42:1c:29:d4:e2:58:cc:2c:0f:fb:c4:f1:23:11:
7a:e6:cf:41:77:c3:7d:48:c7:b4:32:8a:d8:e6:78:02:0c:aa:
6a:83:18:c9:d5:a2:cd:2c:b8:4b:3e:5f:2e:8f:b2:6e:64:95:
b9:db:95:9d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYRmEkB2ECerSx0ImCs2cUJcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjNlNzNhYThiN2YwYWYzYmQ4NDAwNTcyZGFlNzJiMGQ0
NmY1NWMwHhcNMjIxMTExMDk0MzAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjA0ZTIzNGY0Y2E5OTc0YWJmY2Q3MDZjMGYyN2U5OWVhMDNjMmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKlb2rIJ5lSk6q+G03jaJfsDRDEm
zPoJsVQo7sdoUtg3oBZTJTnyteOfQOig3IHTOIQ6hsnrLmcE2EF1/oDQ47bRdUTz
bThFmj2bLPoOwxShtqmVHjrlrBKAL9p0oFE8u0pz6wOVcYp7Bn9RspR73HBFHIdM
BnV1R2694fYw5cTjuogv3L4bxYWYBl9uQZjSiAUq2lW/R7FM79W4r1tSvMriGWDC
siIqLMdcaJq42EMtHydL2cYpeDGLF+3aNsKNWL9MOd87gk5IF2sOMwe5ZuA6sgqS
M5r8/0kNOIDSvH1We0poMLXcIhnMP2olPgFgL7ZtbEKi2BZ6mOQT0r8neQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHIE4jT0ypl0q/zXBsDyfpnqA8LsMB8GA1UdIwQY
MBaAFAuz5zqot/CvO9hABXLa5ysNRvVcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzIt
YWQyOGZhOTY2YjUxLzEvY2dUaU5QVEttWFNyX05jR3dQSi1tZW9Ed3V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzItYWQyOGZhOTY2YjUx
LzEvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg5IxDAN
BgkqhkiG9w0BAQsFAAOCAQEAR9J1TqoCbhIEVRaWE4+Szyc4LlRXbJdj7pW/y4AV
DGBPt+2XZCzk6q9J7nC5OQUMjU1nHWTLDYA1KljOmQVLBhaEUCjIZba3R9qcp8nt
Tf+7k/YgGMqYcvafcVe02dXHocwx62k26SdLWXpHtltZ2yQeEArz/Hf48mDt/zkL
OJxBsSbJ3FDpGKpbwD/PiB05AwbzS+2d+hyv2NyXgaCLPIW2qlhdCXyiEhKCVm7i
w4SuXVtOb2mb0UeFPbWtF9t0TimCCtaFqUQJfUIcKdTiWMwsD/vE8SMReubPQXfD
fUjHtDKK2OZ4AgyqaoMYydWizSy4Sz5fLo+ybmSVuduVnQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:43 2024 by rpki-client on console-fra.rpki-client.org