Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/SyV0zrpFe9SCJkGzKBW3ed567gw.roa
File: SyV0zrpFe9SCJkGzKBW3ed567gw.roa (raw, json)
Hash identifier: 7jvrE8pdbUNgBWWb23XpBOzEiuPauCyUAA/DmU4Nmfw=
Subject key identifier: 4B:25:74:CE:BA:45:7B:D4:82:26:41:B3:28:15:B7:79:DE:7A:EE:0C
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0184763AA18D54AC0591A756EBAFA263EA0C
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/SyV0zrpFe9SCJkGzKBW3ed567gw.roa
Signing time: Mon 14 Nov 2022 13:01:04 +0000
ROA not before: Mon 14 Nov 2022 13:01:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211772
IP address blocks: 2a0b:b81::/46 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:3a:a1:8d:54:ac:05:91:a7:56:eb:af:a2:63:ea:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Nov 14 13:01:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b2574ceba457bd4822641b32815b779de7aee0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:18:4e:22:c4:c9:52:f9:5b:cd:75:59:e3:
ed:79:5e:8d:b9:b7:06:03:fd:4b:0c:42:c2:8f:f6:
b8:90:26:67:c8:d2:1b:38:6c:62:e5:c1:0d:ef:56:
99:f7:6e:ef:f7:59:8c:e9:07:fc:ca:20:da:0d:b0:
fe:68:0c:0a:2e:4b:51:72:61:26:a7:b0:2b:2d:7c:
91:c8:42:fe:78:4e:17:9b:c5:16:63:1a:c7:fb:d8:
0c:ce:64:d5:fa:df:5f:ba:bc:56:5e:e3:0d:a8:17:
d0:b5:ff:c7:22:7c:4f:e0:17:68:85:61:32:d3:14:
62:77:35:72:04:88:d9:ed:89:56:26:b1:2e:a3:13:
4f:cf:02:0f:5f:fb:d0:f1:d7:25:a0:8f:d6:e8:16:
c4:ce:4f:e8:33:c1:32:7c:d5:dd:22:73:dd:78:01:
1a:bf:f0:0d:9e:0f:ef:ec:53:e6:f0:4c:47:8a:63:
ef:f1:67:b2:29:2a:16:8b:39:9b:dc:8a:fd:32:0b:
2b:b3:c8:3d:f6:00:ff:19:28:12:78:15:28:a3:9e:
4d:11:e0:a4:c0:7d:95:3f:95:cc:8a:32:fc:2b:70:
d1:b7:f6:0d:f7:21:df:1b:48:5b:f3:ea:67:79:4a:
cf:06:3b:9b:5a:29:cc:e5:47:cb:80:f7:48:7b:d3:
5f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:25:74:CE:BA:45:7B:D4:82:26:41:B3:28:15:B7:79:DE:7A:EE:0C
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/SyV0zrpFe9SCJkGzKBW3ed567gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b81::/46
Signature Algorithm: sha256WithRSAEncryption
36:fb:8a:1c:c8:db:2f:15:af:c0:e1:00:33:af:66:1e:1e:7e:
2c:56:b7:cd:2c:ed:ef:ca:72:2d:f7:51:6b:57:c9:15:0b:3a:
83:fa:a8:de:df:7f:b1:d7:90:ff:60:ea:6f:7d:03:8f:e6:b8:
df:54:5c:4d:b3:f3:f4:b4:ba:ea:5d:48:33:80:68:b0:36:81:
ed:12:54:21:26:e8:4d:1a:37:95:55:57:57:b9:49:c7:3c:7a:
fb:32:01:87:8f:aa:33:e0:1b:3a:14:10:d6:8e:b4:74:da:0c:
12:65:4d:16:ee:52:7a:a2:a3:18:ba:47:fd:ca:96:c1:e8:b4:
a5:42:2d:6c:f7:d3:d0:25:4a:64:e9:ed:83:c7:05:b1:b3:a8:
5d:83:d8:ab:5a:54:36:bd:bb:ec:59:08:da:8d:ea:6a:73:99:
be:c4:46:80:8c:4f:bf:00:79:b5:2a:22:26:d2:19:b4:11:f0:
4e:20:1b:3f:51:56:de:a5:55:c4:9b:c5:94:ba:95:bd:f4:19:
e6:2b:5d:53:e4:b4:1e:90:da:2c:61:a4:06:34:be:c0:7a:7b:
c3:59:77:87:fe:b4:97:e0:b1:a9:ee:22:9c:07:f2:9a:a3:01:
86:6a:44:0b:e0:b0:31:94:77:4d:69:06:db:03:e9:0d:13:b9:
91:90:e1:b9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYR2OqGNVKwFkadW66+iY+oMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjIxMTE0MTMwMTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjI1NzRjZWJhNDU3YmQ0ODIyNjQxYjMyODE1Yjc3OWRlN2FlZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp8YTiLEyVL5W811WePteV6NubcG
A/1LDELCj/a4kCZnyNIbOGxi5cEN71aZ927v91mM6Qf8yiDaDbD+aAwKLktRcmEm
p7ArLXyRyEL+eE4Xm8UWYxrH+9gMzmTV+t9furxWXuMNqBfQtf/HInxP4BdohWEy
0xRidzVyBIjZ7YlWJrEuoxNPzwIPX/vQ8dcloI/W6BbEzk/oM8EyfNXdInPdeAEa
v/ANng/v7FPm8ExHimPv8WeyKSoWizmb3Ir9Mgsrs8g99gD/GSgSeBUoo55NEeCk
wH2VP5XMijL8K3DRt/YN9yHfG0hb8+pneUrPBjubWinM5UfLgPdIe9NfxQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEsldM66RXvUgiZBsygVt3neeu4MMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvU3lWMHpycEZlOVNDSmtHektCVzNlZDU2N2d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgsLgQAA
MA0GCSqGSIb3DQEBCwUAA4IBAQA2+4ocyNsvFa/A4QAzr2YeHn4sVrfNLO3vynIt
91FrV8kVCzqD+qje33+x15D/YOpvfQOP5rjfVFxNs/P0tLrqXUgzgGiwNoHtElQh
JuhNGjeVVVdXuUnHPHr7MgGHj6oz4Bs6FBDWjrR02gwSZU0W7lJ6oqMYukf9ypbB
6LSlQi1s99PQJUpk6e2DxwWxs6hdg9irWlQ2vbvsWQjajepqc5m+xEaAjE+/AHm1
KiIm0hm0EfBOIBs/UVbepVXEm8WUupW99BnmK11T5LQekNosYaQGNL7AenvDWXeH
/rSX4LGp7iKcB/KaowGGakQL4LAxlHdNaQbbA+kNE7mRkOG5
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:39 2024 by rpki-client on console-ams.rpki-client.org