Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/m1P9RXNAKJHs40NT5qEd5pYQWLM.roa
File: m1P9RXNAKJHs40NT5qEd5pYQWLM.roa (raw, json)
Hash identifier: 9mWsRyftrjjCrKYEuEFnaW21sruXd5IxDDGAJ7ZVN5k=
Subject key identifier: 9B:53:FD:45:73:40:28:91:EC:E3:43:53:E6:A1:1D:E6:96:10:58:B3
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 093C3D9E
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/m1P9RXNAKJHs40NT5qEd5pYQWLM.roa
Signing time: Sat 01 Jan 2022 16:01:05 +0000
ROA not before: Sat 01 Jan 2022 16:01:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213115
IP address blocks: 2a0b:b87:ffb0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154942878 (0x93c3d9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:01:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b53fd4573402891ece34353e6a11de6961058b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2e:af:74:4e:61:fb:6e:72:ff:f1:ba:b1:b9:
fd:03:c6:10:34:0f:d0:13:da:40:08:c9:ea:ba:5b:
73:3d:3c:6c:71:de:42:fe:55:b0:b9:f1:23:f0:6d:
d9:03:ea:81:fa:c1:cc:8e:9e:ef:fc:78:0a:24:2e:
13:f1:f1:ba:da:83:7b:86:10:6f:85:10:20:83:84:
6a:26:7d:d6:8a:2c:a0:ce:71:dc:4b:5a:c0:41:9c:
c9:9c:7a:19:41:8a:af:9e:73:24:c0:47:d2:88:d0:
41:13:4c:f4:2c:9a:16:ad:4d:b5:f6:7d:f4:56:18:
82:fc:5b:71:19:4a:ef:65:0f:99:a7:e5:7b:f9:5b:
38:26:a4:20:34:cb:f2:5a:52:ad:99:9e:58:f5:81:
25:c1:28:a5:29:7d:d7:01:ed:47:f8:37:d0:06:52:
90:24:09:06:f5:aa:43:16:a5:e5:32:6a:31:b7:34:
6c:76:29:34:ac:20:d9:fb:22:6f:0b:85:ad:b7:d0:
ef:e2:b5:3b:92:75:56:73:41:57:1a:74:94:38:e9:
3f:7b:29:a7:9f:dc:f2:4f:32:62:33:90:02:e1:8e:
1d:ef:7e:92:26:11:61:75:27:78:b6:ca:10:18:85:
0d:b4:06:a7:98:70:ec:c2:f9:53:d7:91:c1:43:eb:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:53:FD:45:73:40:28:91:EC:E3:43:53:E6:A1:1D:E6:96:10:58:B3
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/m1P9RXNAKJHs40NT5qEd5pYQWLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffb0::/48
Signature Algorithm: sha256WithRSAEncryption
a6:ba:68:e7:9d:8a:fb:7e:8f:27:93:28:1c:64:9e:5c:ca:ad:
14:33:f6:34:13:ac:a6:94:e4:fc:05:8d:b0:11:78:32:72:8e:
c3:4b:d6:04:64:bd:41:59:28:38:77:f0:40:79:89:82:61:2c:
1c:f6:d7:a5:73:2c:96:22:9a:2e:c9:c7:88:02:35:a4:68:f6:
bb:41:2e:1f:8c:59:2c:27:41:4a:72:7f:96:9f:29:02:ac:3d:
fa:f2:a0:34:25:08:4f:5a:9c:54:ea:f9:1c:7a:31:77:13:bd:
8d:9f:c1:5d:0f:a9:ed:9b:3d:74:a6:18:1f:89:e8:76:ba:cb:
83:b9:7b:d3:be:97:fc:17:d7:e0:a7:17:bc:20:47:0b:04:da:
17:1d:0a:14:cc:ee:d9:56:80:7f:2b:cb:7a:88:ea:eb:28:c5:
4f:11:3d:06:a3:9a:cd:1e:e3:65:6e:93:38:04:4b:86:3d:c6:
94:70:35:ea:c7:fa:59:95:ca:8b:81:25:b9:a5:df:fe:8e:30:
1a:3e:f9:19:55:38:48:99:63:2c:15:01:de:57:0b:1a:b9:82:
63:19:a6:f9:c2:0a:99:45:34:fb:67:10:87:d3:99:44:c7:30:
fc:16:8e:fd:7a:63:fb:ea:3b:67:f7:9a:24:de:1d:23:bc:b3:
cf:a3:31:91
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECTw9njANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MWE3YjBkOGRlODI1MWQzNmQ3YzgzZmFmNmJjN2VmZWM3M2I1MDM0MB4XDTIyMDEw
MTE2MDEwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWI1M2ZkNDU3MzQw
Mjg5MWVjZTM0MzUzZTZhMTFkZTY5NjEwNThiMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJsur3ROYftucv/xurG5/QPGEDQP0BPaQAjJ6rpbcz08bHHe
Qv5VsLnxI/Bt2QPqgfrBzI6e7/x4CiQuE/HxutqDe4YQb4UQIIOEaiZ91oosoM5x
3EtawEGcyZx6GUGKr55zJMBH0ojQQRNM9CyaFq1NtfZ99FYYgvxbcRlK72UPmafl
e/lbOCakIDTL8lpSrZmeWPWBJcEopSl91wHtR/g30AZSkCQJBvWqQxal5TJqMbc0
bHYpNKwg2fsibwuFrbfQ7+K1O5J1VnNBVxp0lDjpP3spp5/c8k8yYjOQAuGOHe9+
kiYRYXUneLbKEBiFDbQGp5hw7ML5U9eRwUPrPu8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSbU/1Fc0AokezjQ1PmoR3mlhBYszAfBgNVHSMEGDAWgBSxp7DY3oJR0218
g/r2vH7+xztQNDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NhZXcyTjZDVWROdGZJUDY5cngtX3NjN1VEUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8x
L20xUDlSWE5BS0pIczQwTlQ1cUVkNXBZUVdMTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
ZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8xL3NhZXcyTjZDVWRO
dGZJUDY5cngtX3NjN1VEUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoLC4f/sDANBgkqhkiG9w0BAQsF
AAOCAQEAprpo552K+36PJ5MoHGSeXMqtFDP2NBOsppTk/AWNsBF4MnKOw0vWBGS9
QVkoOHfwQHmJgmEsHPbXpXMsliKaLsnHiAI1pGj2u0EuH4xZLCdBSnJ/lp8pAqw9
+vKgNCUIT1qcVOr5HHoxdxO9jZ/BXQ+p7Zs9dKYYH4nodrrLg7l7076X/BfX4KcX
vCBHCwTaFx0KFMzu2VaAfyvLeojq6yjFTxE9BqOazR7jZW6TOARLhj3GlHA16sf6
WZXKi4EluaXf/o4wGj75GVU4SJljLBUB3lcLGrmCYxmm+cIKmUU0+2cQh9OZRMcw
/BaO/Xpj++o7Z/eaJN4dI7yzz6MxkQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:40 2024 by rpki-client on console-ams.rpki-client.org