Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/8-nP_wVCA0XW8bFUOtMvzJ6MQRE.roa
File: 8-nP_wVCA0XW8bFUOtMvzJ6MQRE.roa (raw, json)
Hash identifier: 7xQ8I7ZpYs1iimZcsMbHwKy96XbCYr0QUQTPJ49oqVE=
Subject key identifier: F3:E9:CF:FF:05:42:03:45:D6:F1:B1:54:3A:D3:2F:CC:9E:8C:41:11
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 08C71726
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/8-nP_wVCA0XW8bFUOtMvzJ6MQRE.roa
Signing time: Sat 01 Jan 2022 14:02:00 +0000
ROA not before: Sat 01 Jan 2022 14:02:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212519
IP address blocks: 2a0e:8f02:f027::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147265318 (0x8c71726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 14:02:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3e9cfff05420345d6f1b1543ad32fcc9e8c4111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:e0:79:85:21:b6:bf:ff:c9:94:54:89:74:
73:2f:33:d8:40:99:ba:51:58:b6:80:2c:e9:2f:83:
f3:b7:43:d8:60:ab:8c:b9:91:5d:ea:9c:9f:54:93:
75:c0:0f:2a:22:3c:f9:a5:b2:2c:58:0b:90:a9:55:
66:de:0b:c3:3d:bd:55:ed:56:15:63:9a:ee:d3:94:
f7:f1:7e:b1:f4:ae:4a:56:e3:8e:7e:69:61:52:a1:
12:b3:53:d4:55:c7:73:cf:91:f9:80:7c:0c:00:d1:
d3:cf:27:d4:ce:10:8e:68:b0:b6:87:88:20:a2:42:
90:5d:1d:e7:bc:b2:a3:b7:f8:cb:83:48:e0:b8:a6:
14:26:12:3a:ba:f0:ff:35:fb:1a:34:32:99:2f:c1:
29:fd:d2:5b:b0:d3:6f:0a:14:f0:8f:7c:3c:17:b4:
42:a2:2d:bb:ba:29:ff:6c:73:dc:23:89:f2:e1:92:
4a:e1:f4:9f:3b:fd:f0:16:fd:f5:a2:69:a5:08:50:
51:7e:18:6e:ef:9a:ec:23:bc:6c:b2:9c:8b:2c:e9:
b3:d8:d2:e6:4f:90:03:1f:ce:b4:0e:96:f1:f1:05:
be:d5:48:c7:e4:3b:0f:6f:42:5d:e4:8c:60:a7:42:
02:bd:5e:08:0d:3c:37:23:6d:40:3c:4c:96:a3:1d:
6d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E9:CF:FF:05:42:03:45:D6:F1:B1:54:3A:D3:2F:CC:9E:8C:41:11
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/8-nP_wVCA0XW8bFUOtMvzJ6MQRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f027::/48
Signature Algorithm: sha256WithRSAEncryption
67:3d:ec:a4:f0:79:8d:43:7b:e6:c3:9e:3e:95:99:11:c3:8c:
9e:1f:1b:38:52:d6:43:dd:d6:67:80:63:87:1f:42:e6:ec:d9:
13:71:ea:a0:9b:f5:a6:10:d7:be:38:21:15:b8:71:51:06:d7:
78:d1:93:9d:0c:00:28:22:73:01:8c:d5:c5:f3:17:75:c2:90:
2b:42:21:45:61:1b:f9:ec:67:72:06:88:dc:06:9b:b6:e9:cc:
cc:c8:1d:46:d9:ff:4e:ee:83:86:28:b6:1f:5b:01:de:f7:2c:
be:4b:72:76:24:86:cb:a6:eb:c9:88:30:8b:96:d6:86:ea:2e:
3d:62:49:d6:c8:a2:01:90:8c:80:01:a6:56:c1:9d:42:a1:21:
bb:1c:6e:b9:8a:56:bc:10:0c:7d:98:d2:8b:d2:42:00:0b:97:
86:db:18:b2:3b:86:20:7d:ab:7c:53:18:48:4e:86:81:41:8f:
6e:71:96:55:d4:ea:14:0e:28:47:eb:88:cb:47:41:81:32:05:
c2:9b:89:1d:6c:7d:86:3b:a8:bf:8d:b1:2d:42:83:73:82:c4:
3a:84:72:4e:d3:a2:47:6e:56:0b:bf:8a:0c:29:33:e6:69:bf:
29:a5:4e:70:4f:75:18:91:3c:42:4f:c9:09:92:df:97:15:03:
22:57:00:1b
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECMcXJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NTZlZjQ4ZWQ2MTU1ZGQ3ODQzZWVkMzYzMjQ2OWFiYWEzMTAwYmYzMB4XDTIyMDEw
MTE0MDIwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjNlOWNmZmYwNTQy
MDM0NWQ2ZjFiMTU0M2FkMzJmY2M5ZThjNDExMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ//4HmFIba//8mUVIl0cy8z2ECZulFYtoAs6S+D87dD2GCr
jLmRXeqcn1STdcAPKiI8+aWyLFgLkKlVZt4Lwz29Ve1WFWOa7tOU9/F+sfSuSlbj
jn5pYVKhErNT1FXHc8+R+YB8DADR088n1M4QjmiwtoeIIKJCkF0d57yyo7f4y4NI
4LimFCYSOrrw/zX7GjQymS/BKf3SW7DTbwoU8I98PBe0QqItu7op/2xz3COJ8uGS
SuH0nzv98Bb99aJppQhQUX4Ybu+a7CO8bLKciyzps9jS5k+QAx/OtA6W8fEFvtVI
x+Q7D29CXeSMYKdCAr1eCA08NyNtQDxMlqMdbfUCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTz6c//BUIDRdbxsVQ60y/MnoxBETAfBgNVHSMEGDAWgBTVbvSO1hVd14Q+
7TYyRpq6oxAL8zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFXNzBqdFlWWGRlRVB1MDJNa2FhdXFNUUNfTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjUvNThmZjU0LTM0MTAtNGU0Mi1hYWI4LWQyZDdmMmJiNjRkZi8x
LzgtblBfd1ZDQTBYVzhiRlVPdE12eko2TVFSRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUv
NThmZjU0LTM0MTAtNGU0Mi1hYWI4LWQyZDdmMmJiNjRkZi8xLzFXNzBqdFlWWGRl
RVB1MDJNa2FhdXFNUUNfTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoOjwLwJzANBgkqhkiG9w0BAQsF
AAOCAQEAZz3spPB5jUN75sOePpWZEcOMnh8bOFLWQ93WZ4Bjhx9C5uzZE3HqoJv1
phDXvjghFbhxUQbXeNGTnQwAKCJzAYzVxfMXdcKQK0IhRWEb+exncgaI3AabtunM
zMgdRtn/Tu6Dhii2H1sB3vcsvktydiSGy6bryYgwi5bWhuouPWJJ1siiAZCMgAGm
VsGdQqEhuxxuuYpWvBAMfZjSi9JCAAuXhtsYsjuGIH2rfFMYSE6GgUGPbnGWVdTq
FA4oR+uIy0dBgTIFwpuJHWx9hjuov42xLUKDc4LEOoRyTtOiR25WC7+KDCkz5mm/
KaVOcE91GJE8Qk/JCZLflxUDIlcAGw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:35 2024 by rpki-client on console-ams.rpki-client.org