Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/dSxPCNJEKxifFq1B7BX6AxmBLxo.roa
File: dSxPCNJEKxifFq1B7BX6AxmBLxo.roa (raw, json)
Hash identifier: wtBol56EYlt/TbDXrQxQXndoL2bjlirlnWKrRdct6Qs=
Subject key identifier: 75:2C:4F:08:D2:44:2B:18:9F:16:AD:41:EC:15:FA:03:19:81:2F:1A
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0927DCA0
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/dSxPCNJEKxifFq1B7BX6AxmBLxo.roa
Signing time: Sat 01 Jan 2022 16:00:50 +0000
ROA not before: Sat 01 Jan 2022 16:00:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210323
IP address blocks: 2a0b:b87:ffee::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153607328 (0x927dca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=752c4f08d2442b189f16ad41ec15fa0319812f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6f:f3:56:af:ff:2f:a3:77:0d:0d:fb:ab:f6:
1a:1c:64:7d:45:d8:bf:49:fa:f5:4a:e9:02:a5:c5:
fc:7e:78:d0:c8:6e:28:14:9a:af:f2:b7:85:4a:07:
24:73:de:bb:25:54:26:e0:6c:9d:ab:5d:a4:07:06:
3e:ea:c8:1d:b7:fa:6d:cf:88:b2:60:fe:00:cb:e9:
51:fa:a8:0f:31:71:6f:f4:9b:64:a6:c0:54:bd:d1:
0d:f0:68:3f:62:9f:c6:4a:10:97:66:da:39:fe:d2:
d0:21:a8:f7:da:b5:e7:37:ae:99:94:c8:b5:63:78:
53:60:a7:17:2c:f0:9d:65:2a:4f:fc:6e:c7:66:ef:
14:90:d0:8c:82:96:22:14:ef:c5:ce:bb:91:96:d4:
b7:39:37:2c:13:fa:e4:bc:2b:41:f3:a5:7c:58:1a:
d9:97:19:22:9e:af:c3:4a:37:d7:76:c8:19:fe:19:
3c:8d:d2:60:81:98:ee:42:53:e9:b7:68:5e:90:43:
87:62:45:4b:a8:62:42:95:8f:3e:a5:70:82:24:4c:
0f:f8:ff:3f:e5:c7:17:fc:62:98:be:90:ce:e4:df:
c6:fc:a0:90:b9:38:ed:7e:ac:e6:fb:3f:7c:ab:44:
6d:7d:e7:bb:13:f5:0c:ea:b3:30:40:ff:e5:70:c6:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2C:4F:08:D2:44:2B:18:9F:16:AD:41:EC:15:FA:03:19:81:2F:1A
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/dSxPCNJEKxifFq1B7BX6AxmBLxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffee::/48
Signature Algorithm: sha256WithRSAEncryption
9a:a1:ab:88:f7:f8:c2:ad:d4:85:48:07:cb:18:ad:65:c2:71:
67:ee:7b:e8:21:0d:63:72:7f:ab:42:26:c2:36:eb:64:a5:4c:
1e:b5:42:e2:4b:91:c7:a1:ad:fd:db:3e:86:22:9c:a4:38:1c:
1b:45:b7:40:af:65:cd:2f:10:59:98:f3:e8:8b:07:d1:34:95:
80:20:6f:c8:6a:1b:94:62:40:7c:9d:14:63:43:0e:de:e5:f7:
d3:26:e5:aa:ce:41:a3:07:a4:21:86:2a:13:8e:e0:bd:99:42:
a9:73:88:77:c2:bb:f0:75:61:ab:b9:89:01:22:55:2c:b4:a4:
9f:c1:55:a9:fc:e4:6c:ad:94:ad:9f:0d:43:cc:92:08:11:3c:
7a:e1:22:ec:33:e1:61:e5:dc:2d:0c:8b:73:7b:de:a8:b7:f5:
3c:96:ac:a2:f6:ab:a1:be:85:32:06:92:82:37:2c:07:10:ff:
6f:d1:7b:81:7b:cd:fd:bd:1d:78:c2:2f:98:86:bb:88:13:e1:
17:1d:48:c7:a0:16:65:93:84:64:e1:b9:70:29:d9:ad:c0:d5:
db:cb:88:97:19:b3:40:76:85:7a:6e:29:0f:56:b9:f9:08:22:
10:57:94:d9:2e:c7:e8:f2:57:ef:67:02:3c:f0:92:7b:13:f0:
dd:22:3d:63
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECSfcoDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MWE3YjBkOGRlODI1MWQzNmQ3YzgzZmFmNmJjN2VmZWM3M2I1MDM0MB4XDTIyMDEw
MTE2MDA1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzUyYzRmMDhkMjQ0
MmIxODlmMTZhZDQxZWMxNWZhMDMxOTgxMmYxYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALVv81av/y+jdw0N+6v2GhxkfUXYv0n69UrpAqXF/H540Mhu
KBSar/K3hUoHJHPeuyVUJuBsnatdpAcGPurIHbf6bc+IsmD+AMvpUfqoDzFxb/Sb
ZKbAVL3RDfBoP2KfxkoQl2baOf7S0CGo99q15zeumZTItWN4U2CnFyzwnWUqT/xu
x2bvFJDQjIKWIhTvxc67kZbUtzk3LBP65LwrQfOlfFga2ZcZIp6vw0o313bIGf4Z
PI3SYIGY7kJT6bdoXpBDh2JFS6hiQpWPPqVwgiRMD/j/P+XHF/ximL6QzuTfxvyg
kLk47X6s5vs/fKtEbX3nuxP1DOqzMED/5XDGAhMCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBR1LE8I0kQrGJ8WrUHsFfoDGYEvGjAfBgNVHSMEGDAWgBSxp7DY3oJR0218
g/r2vH7+xztQNDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NhZXcyTjZDVWROdGZJUDY5cngtX3NjN1VEUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8x
L2RTeFBDTkpFS3hpZkZxMUI3Qlg2QXhtQkx4by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
ZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8xL3NhZXcyTjZDVWRO
dGZJUDY5cngtX3NjN1VEUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoLC4f/7jANBgkqhkiG9w0BAQsF
AAOCAQEAmqGriPf4wq3UhUgHyxitZcJxZ+576CENY3J/q0ImwjbrZKVMHrVC4kuR
x6Gt/ds+hiKcpDgcG0W3QK9lzS8QWZjz6IsH0TSVgCBvyGoblGJAfJ0UY0MO3uX3
0yblqs5BowekIYYqE47gvZlCqXOId8K78HVhq7mJASJVLLSkn8FVqfzkbK2UrZ8N
Q8ySCBE8euEi7DPhYeXcLQyLc3veqLf1PJasovarob6FMgaSgjcsBxD/b9F7gXvN
/b0deMIvmIa7iBPhFx1Ix6AWZZOEZOG5cCnZrcDV28uIlxmzQHaFem4pD1a5+Qgi
EFeU2S7H6PJX72cCPPCSexPw3SI9Yw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org