Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/WW3q_qbRALB5lz7KkPNZKpTrXig.roa
File: WW3q_qbRALB5lz7KkPNZKpTrXig.roa (raw, json)
Hash identifier: 9XdC3RVx8fcx6VA2TZ3fjmf9aLYJV0zINiK4snwE/iY=
Subject key identifier: 59:6D:EA:FE:A6:D1:00:B0:79:97:3E:CA:90:F3:59:2A:94:EB:5E:28
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 2CA5A0BF
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/WW3q_qbRALB5lz7KkPNZKpTrXig.roa
Signing time: Sat 01 Jan 2022 04:59:36 +0000
ROA not before: Sat 01 Jan 2022 04:59:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42503
IP address blocks: 2001:1a68:7::/48 maxlen: 48
2001:1a68:b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749052095 (0x2ca5a0bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 1 04:59:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=596deafea6d100b079973eca90f3592a94eb5e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4f:b6:2a:ad:de:34:1e:d1:53:e8:19:b9:fe:
54:82:9c:25:18:83:12:c1:18:58:97:ca:ab:47:11:
07:9d:87:fa:a9:60:b0:6d:6f:37:84:45:60:d9:b3:
a0:94:b5:fa:48:da:19:b0:9c:b3:b5:7c:df:28:49:
03:ba:55:ac:e9:6b:fd:64:45:df:45:83:32:0b:4b:
b8:a3:95:d8:6b:ee:e6:98:7a:23:c1:3f:1e:a7:d6:
32:c3:05:e6:cf:1a:51:ab:62:51:2c:29:de:1f:12:
a2:0b:25:27:14:bf:cf:f7:0e:c6:ea:df:20:09:7b:
ce:de:00:19:bf:36:b1:df:3c:c8:55:61:eb:43:f3:
8f:26:64:5d:4b:6d:ac:6f:b5:5e:e0:93:f5:bd:b2:
79:cb:48:05:54:6c:7e:fb:23:30:1b:7a:24:8c:b0:
e6:89:29:8a:9d:6c:64:ba:d6:cf:78:18:16:a5:f6:
02:14:4c:be:66:76:5a:17:c9:81:26:46:14:fa:f3:
6a:58:5e:79:fd:8b:9c:ff:ec:50:5a:30:4e:d5:8a:
f3:9b:68:fe:6b:f8:b9:f2:4d:7b:4f:fd:3b:af:0e:
88:d8:46:1d:8b:50:3c:1c:6b:f5:14:2a:db:76:bb:
a2:c8:01:06:25:58:0b:1c:5b:87:cc:38:fc:67:c9:
f0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6D:EA:FE:A6:D1:00:B0:79:97:3E:CA:90:F3:59:2A:94:EB:5E:28
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/WW3q_qbRALB5lz7KkPNZKpTrXig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1a68:7::/48
2001:1a68:b::/48
Signature Algorithm: sha256WithRSAEncryption
4c:76:c1:58:69:7d:6a:f7:81:d9:29:a0:6c:34:df:28:1a:9c:
c8:8f:c5:f1:c5:1d:79:d7:f2:66:d7:30:fa:14:dd:6e:37:e3:
c1:b9:09:f8:54:22:16:06:7b:0d:d8:1c:b2:a7:1e:8f:1d:ae:
6b:ef:4a:87:02:f2:c2:8d:df:48:c4:e5:74:d0:3f:cb:94:a3:
a4:50:b8:09:1a:a7:19:f9:8e:fe:19:42:5d:e3:51:00:e0:c0:
af:27:73:6b:2a:ef:fc:5c:da:e0:c8:01:ce:e2:b1:e8:fe:d1:
f7:3a:6a:25:32:b1:d4:e6:66:22:77:9c:5a:35:83:8c:88:07:
a6:f9:00:2d:4e:fa:e5:58:a6:7c:d6:85:56:d7:d3:65:c8:5a:
28:1f:dd:5f:0a:f7:27:98:22:78:a9:17:9f:fd:0e:19:a5:0b:
b9:1b:72:e8:1b:0f:44:c5:15:4f:5f:1e:46:8b:f0:8e:4d:c3:
d4:46:1f:2f:26:6a:b0:ea:71:c0:68:ad:57:07:e8:f3:21:63:
2b:38:87:b4:5c:ff:fd:64:e8:00:2e:c8:13:a5:2f:33:d1:35:
bb:1f:34:d7:98:b9:59:c9:08:2d:da:b9:41:60:18:f6:93:d8:
10:ff:d7:d7:9e:b4:b8:f3:d2:a0:51:5e:67:34:ea:dd:da:5c:
a6:d6:90:b1
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIELKWgvzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
OGM1MTBmYzliODY1ZDk2ZTNhZmM3YzU2MDU2ZWZhZDlhMzMwYzViMB4XDTIyMDEw
MTA0NTkzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTk2ZGVhZmVhNmQx
MDBiMDc5OTczZWNhOTBmMzU5MmE5NGViNWUyODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPBPtiqt3jQe0VPoGbn+VIKcJRiDEsEYWJfKq0cRB52H+qlg
sG1vN4RFYNmzoJS1+kjaGbCcs7V83yhJA7pVrOlr/WRF30WDMgtLuKOV2Gvu5ph6
I8E/HqfWMsMF5s8aUatiUSwp3h8SogslJxS/z/cOxurfIAl7zt4AGb82sd88yFVh
60PzjyZkXUttrG+1XuCT9b2yectIBVRsfvsjMBt6JIyw5okpip1sZLrWz3gYFqX2
AhRMvmZ2WhfJgSZGFPrzalheef2LnP/sUFowTtWK85to/mv4ufJNe0/9O68OiNhG
HYtQPBxr9RQq23a7osgBBiVYCxxbh8w4/GfJ8BUCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBRZber+ptEAsHmXPsqQ81kqlOteKDAfBgNVHSMEGDAWgBRoxRD8m4ZdluOv
x8VgVu+tmjMMWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FNVVFfSnVHWFpianI4ZkZZRmJ2clpvekRGcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvZTBmMmY2LTNhOGEtNGRhYS04MjcxLTVkNjY1ZTk5OGY2YS8x
L1dXM3FfcWJSQUxCNWx6N0trUE5aS3BUclhpZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
ZTBmMmY2LTNhOGEtNGRhYS04MjcxLTVkNjY1ZTk5OGY2YS8xL2FNVVFfSnVHWFpi
anI4ZkZZRmJ2clpvekRGcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACABGmgABwMHACABGmgACzANBgkq
hkiG9w0BAQsFAAOCAQEATHbBWGl9aveB2SmgbDTfKBqcyI/F8cUdedfyZtcw+hTd
bjfjwbkJ+FQiFgZ7Ddgcsqcejx2ua+9KhwLywo3fSMTldNA/y5SjpFC4CRqnGfmO
/hlCXeNRAODArydzayrv/Fza4MgBzuKx6P7R9zpqJTKx1OZmInecWjWDjIgHpvkA
LU765VimfNaFVtfTZchaKB/dXwr3J5gieKkXn/0OGaULuRty6BsPRMUVT18eRovw
jk3D1EYfLyZqsOpxwGitVwfo8yFjKziHtFz//WToAC7IE6UvM9E1ux8015i5WckI
Ldq5QWAY9pPYEP/X1560uPPSoFFeZzTq3dpcptaQsQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:57 2024 by rpki-client on console-fra.rpki-client.org