Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/b_BvqultZNbdtH_W9Yd73muQJes.roa
File: b_BvqultZNbdtH_W9Yd73muQJes.roa (raw, json)
Hash identifier: 8yOkYI7T5pjhVm38vY8QCl6kQHriioWMvSlZHEba5To=
Subject key identifier: 6F:F0:6F:AA:E9:6D:64:D6:DD:B4:7F:D6:F5:87:7B:DE:6B:90:25:EB
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 090FD541
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/b_BvqultZNbdtH_W9Yd73muQJes.roa
Signing time: Sat 01 Jan 2022 16:00:33 +0000
ROA not before: Sat 01 Jan 2022 16:00:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59417
IP address blocks: 2a0b:b87:ffb7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152032577 (0x90fd541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ff06faae96d64d6ddb47fd6f5877bde6b9025eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:5b:51:12:d9:c5:c8:18:6f:8d:9c:97:d6:
39:a8:19:68:e9:58:ec:ea:b6:96:8b:fd:92:b0:50:
db:16:56:f6:07:30:6e:0f:8f:ff:b4:79:1e:81:61:
3e:94:ba:5a:49:ea:30:e6:6f:94:8d:57:73:b2:cd:
63:20:a1:53:84:7d:98:6a:46:d4:6b:d4:25:6c:87:
1a:79:15:ba:10:35:45:35:02:59:04:f6:0e:14:05:
0f:41:07:1a:c4:03:a9:ac:31:ed:35:d4:85:fd:6f:
9b:a6:0c:11:63:40:c0:84:c5:18:37:5f:5a:ad:2d:
de:3d:28:86:5d:4f:4d:ce:7a:a0:35:d5:d1:72:f3:
33:31:95:46:a5:ce:ba:51:c0:b7:5b:bb:4e:ac:6d:
3c:63:8e:9b:29:7e:60:3d:ac:9c:49:75:d8:57:68:
60:d9:8a:a0:78:a6:a9:36:6c:82:f1:0c:9e:1e:31:
88:a6:94:ce:e5:78:95:35:12:7f:bc:02:66:ee:df:
96:ab:7a:8f:5e:4e:0d:b9:c6:33:af:0b:e3:b3:fc:
8b:82:8f:11:a5:29:fa:2e:99:39:01:e9:50:3a:9a:
65:4a:80:00:33:d0:35:6b:b1:3b:d3:7a:c5:a8:94:
b2:4e:8a:f3:8c:c6:bd:4d:c6:e8:d1:85:65:93:da:
20:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F0:6F:AA:E9:6D:64:D6:DD:B4:7F:D6:F5:87:7B:DE:6B:90:25:EB
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/b_BvqultZNbdtH_W9Yd73muQJes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffb7::/48
Signature Algorithm: sha256WithRSAEncryption
b2:cc:5c:c6:85:9a:d1:cd:ce:b8:4f:23:e9:ef:12:2a:15:89:
a1:18:d1:fe:39:a2:d2:24:6b:24:03:e3:84:03:79:13:af:3a:
13:b3:5b:bf:03:59:f2:26:7d:c8:dd:59:ab:6f:d6:d3:1b:7c:
23:c6:06:7d:05:d5:35:ca:11:1e:c5:c6:97:24:e9:7a:82:64:
6b:f8:c8:98:a0:26:50:50:a6:44:9a:2c:7a:bc:30:f8:19:95:
11:08:a0:0c:d0:60:8f:51:0e:3e:da:fe:1b:cd:35:fe:5f:54:
07:28:e8:1d:46:2b:36:62:b2:99:6d:c3:e1:d0:67:14:86:84:
57:24:08:ad:87:5d:30:d0:47:a9:b3:65:cc:da:35:0c:c8:c0:
fc:35:0f:7a:c8:c2:a8:1d:fd:2c:7b:4a:da:fd:65:7c:28:3b:
9c:06:24:1d:44:89:2b:fe:85:67:59:5b:47:2c:54:16:2b:e3:
30:f2:29:67:20:99:3c:9b:b9:9e:16:3c:ef:0a:3a:9c:6a:7f:
80:e1:03:ce:1e:6d:25:21:78:c8:d2:46:1e:ec:4b:ff:cb:77:
20:c1:d2:ad:f7:99:4f:c1:a8:da:89:08:d1:d3:99:32:28:c7:
42:48:08:40:66:4f:4a:42:ba:7d:68:0d:77:8e:aa:50:db:73:
c9:14:51:b0
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECQ/VQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MWE3YjBkOGRlODI1MWQzNmQ3YzgzZmFmNmJjN2VmZWM3M2I1MDM0MB4XDTIyMDEw
MTE2MDAzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmZmMDZmYWFlOTZk
NjRkNmRkYjQ3ZmQ2ZjU4NzdiZGU2YjkwMjVlYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMjYW1ES2cXIGG+NnJfWOagZaOlY7Oq2lov9krBQ2xZW9gcw
bg+P/7R5HoFhPpS6WknqMOZvlI1Xc7LNYyChU4R9mGpG1GvUJWyHGnkVuhA1RTUC
WQT2DhQFD0EHGsQDqawx7TXUhf1vm6YMEWNAwITFGDdfWq0t3j0ohl1PTc56oDXV
0XLzMzGVRqXOulHAt1u7TqxtPGOOmyl+YD2snEl12FdoYNmKoHimqTZsgvEMnh4x
iKaUzuV4lTUSf7wCZu7flqt6j15ODbnGM68L47P8i4KPEaUp+i6ZOQHpUDqaZUqA
ADPQNWuxO9N6xaiUsk6K84zGvU3G6NGFZZPaIOMCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRv8G+q6W1k1t20f9b1h3vea5Al6zAfBgNVHSMEGDAWgBSxp7DY3oJR0218
g/r2vH7+xztQNDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NhZXcyTjZDVWROdGZJUDY5cngtX3NjN1VEUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8x
L2JfQnZxdWx0Wk5iZHRIX1c5WWQ3M211UUplcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
ZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8xL3NhZXcyTjZDVWRO
dGZJUDY5cngtX3NjN1VEUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoLC4f/tzANBgkqhkiG9w0BAQsF
AAOCAQEAssxcxoWa0c3OuE8j6e8SKhWJoRjR/jmi0iRrJAPjhAN5E686E7NbvwNZ
8iZ9yN1Zq2/W0xt8I8YGfQXVNcoRHsXGlyTpeoJka/jImKAmUFCmRJoserww+BmV
EQigDNBgj1EOPtr+G801/l9UByjoHUYrNmKymW3D4dBnFIaEVyQIrYddMNBHqbNl
zNo1DMjA/DUPesjCqB39LHtK2v1lfCg7nAYkHUSJK/6FZ1lbRyxUFivjMPIpZyCZ
PJu5nhY87wo6nGp/gOEDzh5tJSF4yNJGHuxL/8t3IMHSrfeZT8Go2okI0dOZMijH
QkgIQGZPSkK6fWgNd46qUNtzyRRRsA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:39 2024 by rpki-client on console-ams.rpki-client.org