Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Hj6JzICTAWWgv4Oiregm1ZOy874.roa
File: Hj6JzICTAWWgv4Oiregm1ZOy874.roa (raw, json)
Hash identifier: o1Wt8O/ImiuZEVO/KXWXljh9gBNSmTpSWAOSn5K2nZw=
Subject key identifier: 1E:3E:89:CC:80:93:01:65:A0:BF:83:A2:AD:E8:26:D5:93:B2:F3:BE
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0184EDAD2E6ABDE4C2D7990F5256F0F8193C
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Hj6JzICTAWWgv4Oiregm1ZOy874.roa
Signing time: Wed 07 Dec 2022 17:41:00 +0000
ROA not before: Wed 07 Dec 2022 17:41:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202197
IP address blocks: 2a0e:8f02:21f0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ed:ad:2e:6a:bd:e4:c2:d7:99:0f:52:56:f0:f8:19:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Dec 7 17:41:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e3e89cc80930165a0bf83a2ade826d593b2f3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:89:89:1b:ad:1c:bf:cc:08:21:ad:28:29:
13:52:f1:ef:3c:3e:90:f0:97:4d:d9:db:c7:21:77:
f4:18:b9:0f:5e:0c:61:4b:e3:0d:10:2b:a9:77:0e:
5f:f9:d0:dc:49:00:d0:8e:d4:68:8e:36:6e:f7:5d:
a9:85:81:e3:c9:d8:fe:8e:42:22:42:0e:84:29:fb:
a1:87:9d:c6:32:22:05:77:61:ee:26:9a:5c:ab:e0:
49:46:86:38:29:20:ef:fd:cc:fd:b9:8c:8c:59:be:
c6:fa:66:37:f6:b4:02:ef:b8:91:a9:e5:21:12:83:
04:e5:eb:45:ec:cc:28:9f:ee:00:82:42:bb:56:57:
91:57:53:33:29:31:05:4f:4e:fc:14:36:c4:62:24:
8b:24:e6:74:47:e7:be:be:71:d6:1b:fd:6e:97:58:
12:3b:f3:06:13:ee:8c:60:77:e2:2e:f3:d3:eb:3b:
a1:15:7c:b9:2d:3b:2d:51:38:df:31:5e:6c:47:6c:
ee:37:b6:81:e7:21:29:d1:49:a8:3a:3e:05:f2:14:
10:a3:48:59:61:2d:9e:2e:87:92:18:d9:fa:d2:67:
e7:77:fa:60:6a:27:e3:63:40:0c:03:3a:d7:91:89:
dd:2f:24:ab:1b:20:0f:8c:cd:2e:2a:d1:3a:be:58:
85:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3E:89:CC:80:93:01:65:A0:BF:83:A2:AD:E8:26:D5:93:B2:F3:BE
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Hj6JzICTAWWgv4Oiregm1ZOy874.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:21f0::/44
Signature Algorithm: sha256WithRSAEncryption
91:55:0a:ac:16:a0:99:bf:0a:c8:61:c6:c4:ef:19:5c:44:98:
14:6b:67:ab:0b:fe:e6:0d:a4:2f:42:7a:e7:75:52:65:dd:91:
92:e9:30:55:a3:e5:b9:44:ce:13:56:ef:9a:d9:4c:5a:0d:19:
c0:67:1d:47:4a:63:ef:b6:bc:03:9f:69:33:a3:ea:ef:da:cf:
b7:74:b3:9f:40:d1:b6:57:b0:74:bf:da:ae:46:6a:97:26:01:
35:9b:39:7d:6c:07:6b:c6:ee:95:e5:fe:49:6c:41:07:9e:61:
b8:43:e7:2a:23:60:95:8c:4b:16:a0:2b:05:ad:a3:ef:bc:ef:
95:7c:15:c0:d3:7b:d1:fb:48:46:f6:de:f8:ac:4f:9c:b1:31:
80:11:f8:8d:d6:cd:5e:02:97:fd:76:a9:bd:51:db:d5:db:2e:
33:a8:9d:c7:f2:ca:d4:86:f9:3a:26:41:a3:ef:31:83:a7:a1:
e3:33:bc:ef:36:52:d6:a3:2b:45:b7:92:af:b3:6d:89:23:2b:
f8:e8:cd:45:46:83:35:d3:2a:14:97:7a:74:1f:8d:be:b1:f9:
a3:aa:09:e6:f9:f6:cc:70:a4:72:d3:2d:16:b5:7d:22:fb:e2:
b8:ff:2f:98:3b:d4:e3:ac:78:88:65:42:28:2e:c8:16:c5:03:
37:1e:5f:41
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYTtrS5qveTC15kPUlbw+Bk8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjIxMjA3MTc0MTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTNlODljYzgwOTMwMTY1YTBiZjgzYTJhZGU4MjZkNTkzYjJmM2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFaJiRutHL/MCCGtKCkTUvHvPD6Q
8JdN2dvHIXf0GLkPXgxhS+MNECupdw5f+dDcSQDQjtRojjZu912phYHjydj+jkIi
Qg6EKfuhh53GMiIFd2HuJppcq+BJRoY4KSDv/cz9uYyMWb7G+mY39rQC77iRqeUh
EoME5etF7Mwon+4AgkK7VleRV1MzKTEFT078FDbEYiSLJOZ0R+e+vnHWG/1ul1gS
O/MGE+6MYHfiLvPT6zuhFXy5LTstUTjfMV5sR2zuN7aB5yEp0UmoOj4F8hQQo0hZ
YS2eLoeSGNn60mfnd/pgaifjY0AMAzrXkYndLySrGyAPjM0uKtE6vliFeQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFB4+icyAkwFloL+Doq3oJtWTsvO+MB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvSGo2SnpJQ1RBV1dndjRPaXJlZ20xWk95ODc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6PAiHw
MA0GCSqGSIb3DQEBCwUAA4IBAQCRVQqsFqCZvwrIYcbE7xlcRJgUa2erC/7mDaQv
QnrndVJl3ZGS6TBVo+W5RM4TVu+a2UxaDRnAZx1HSmPvtrwDn2kzo+rv2s+3dLOf
QNG2V7B0v9quRmqXJgE1mzl9bAdrxu6V5f5JbEEHnmG4Q+cqI2CVjEsWoCsFraPv
vO+VfBXA03vR+0hG9t74rE+csTGAEfiN1s1eApf9dqm9UdvV2y4zqJ3H8srUhvk6
JkGj7zGDp6HjM7zvNlLWoytFt5Kvs22JIyv46M1FRoM10yoUl3p0H42+sfmjqgnm
+fbMcKRy0y0WtX0i++K4/y+YO9TjrHiIZUIoLsgWxQM3Hl9B
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:35 2024 by rpki-client on console-ams.rpki-client.org