Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/hCKRzvemxnbksfL-bYvgr7dh_hs.roa
File: hCKRzvemxnbksfL-bYvgr7dh_hs.roa (raw, json)
Hash identifier: UrjrmjFX9yTmccUYDpWW7MLLcaUN0GiQT62lnCNF2qw=
Subject key identifier: 84:22:91:CE:F7:A6:C6:76:E4:B1:F2:FE:6D:8B:E0:AF:B7:61:FE:1B
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 08B74432
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/hCKRzvemxnbksfL-bYvgr7dh_hs.roa
Signing time: Sat 01 Jan 2022 14:01:50 +0000
ROA not before: Sat 01 Jan 2022 14:01:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211581
IP address blocks: 2a0e:8f02:f020::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146228274 (0x8b74432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 14:01:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=842291cef7a6c676e4b1f2fe6d8be0afb761fe1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:76:d2:41:43:79:02:c6:fd:40:23:86:90:
72:04:b4:40:8f:73:28:24:d9:a2:63:0f:f9:59:cf:
9f:04:3b:da:2e:58:c0:bc:cb:5c:49:dd:41:cc:af:
61:02:0e:c0:6e:83:83:b1:08:ea:22:a0:1e:28:58:
ab:01:40:6e:de:37:a4:53:eb:35:f2:11:7c:b7:cb:
80:54:5f:59:ad:ce:6a:bc:38:4d:ff:5c:7a:a7:28:
c1:72:23:e5:9d:63:d6:6f:7c:bf:60:1b:07:59:a3:
a0:97:8c:86:65:6c:32:ba:b4:cf:ee:6c:67:83:f3:
8f:9f:f1:af:7e:cb:52:d5:9d:e8:fc:fe:bd:f0:4c:
11:35:7c:57:97:81:17:a0:ce:56:b5:a7:6c:bc:39:
5e:19:63:9a:60:36:63:f8:cc:16:d8:e4:a2:15:bd:
83:af:78:53:10:0b:50:55:a1:2d:48:81:bf:1f:60:
ed:9c:ee:8d:c2:c6:24:fe:dc:b7:71:8b:d9:9b:a8:
bc:80:36:bf:72:cf:32:ad:c9:b9:11:0c:37:be:53:
42:b7:8f:06:c8:b9:82:fd:c1:db:a6:60:8b:d8:07:
79:31:50:56:86:89:51:ad:49:35:62:bf:04:b9:31:
68:55:3a:e5:13:cb:d4:56:92:c4:3c:9e:28:eb:c8:
a7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:22:91:CE:F7:A6:C6:76:E4:B1:F2:FE:6D:8B:E0:AF:B7:61:FE:1B
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/hCKRzvemxnbksfL-bYvgr7dh_hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f020::/48
Signature Algorithm: sha256WithRSAEncryption
02:1f:b5:08:51:c2:eb:64:ea:99:2c:bf:d4:b7:c6:5a:80:d6:
9e:7e:90:f7:b4:44:c1:aa:a6:1a:34:5a:06:99:aa:8d:8b:d6:
d6:ae:de:13:8a:6e:de:0e:8a:4f:a2:db:eb:8e:81:e2:d1:58:
8a:a7:ec:a7:21:df:fb:06:53:38:44:cc:6d:80:9b:30:42:c8:
ed:06:9c:a1:d8:8f:68:95:11:9f:ac:43:c1:d6:60:ba:b4:e9:
6c:a3:0c:ae:22:0d:18:8e:d6:5f:d3:c4:99:69:33:a5:c4:76:
94:9e:8d:a2:21:e0:1b:80:45:7a:a0:fa:a2:0f:6f:21:46:7a:
a7:0b:29:fa:73:8b:36:98:ad:68:5e:29:2a:de:1a:15:9c:79:
ef:77:de:1a:3b:d7:c3:98:cc:a3:70:b4:17:b8:37:7d:36:cb:
2c:cf:dd:57:1e:b7:e6:e1:c0:dc:0e:75:43:dc:bd:31:85:63:
ae:1b:9b:0b:ce:0f:b8:13:0e:13:4f:60:17:af:aa:b1:fc:56:
eb:2e:b4:94:b7:9c:c8:44:7f:44:e4:44:33:7f:ae:4d:53:db:
dc:eb:c7:9a:a5:18:4f:8a:6f:f1:20:87:8e:ff:2d:2f:ec:95:
6f:f7:a3:90:bd:03:aa:e4:7e:de:6d:05:2a:e4:89:45:66:42:
0c:a6:c5:2f
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECLdEMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NTZlZjQ4ZWQ2MTU1ZGQ3ODQzZWVkMzYzMjQ2OWFiYWEzMTAwYmYzMB4XDTIyMDEw
MTE0MDE1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODQyMjkxY2VmN2E2
YzY3NmU0YjFmMmZlNmQ4YmUwYWZiNzYxZmUxYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALngdtJBQ3kCxv1AI4aQcgS0QI9zKCTZomMP+VnPnwQ72i5Y
wLzLXEndQcyvYQIOwG6Dg7EI6iKgHihYqwFAbt43pFPrNfIRfLfLgFRfWa3Oarw4
Tf9ceqcowXIj5Z1j1m98v2AbB1mjoJeMhmVsMrq0z+5sZ4Pzj5/xr37LUtWd6Pz+
vfBMETV8V5eBF6DOVrWnbLw5XhljmmA2Y/jMFtjkohW9g694UxALUFWhLUiBvx9g
7ZzujcLGJP7ct3GL2ZuovIA2v3LPMq3JuREMN75TQrePBsi5gv3B26Zgi9gHeTFQ
VoaJUa1JNWK/BLkxaFU65RPL1FaSxDyeKOvIp1MCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSEIpHO96bGduSx8v5ti+Cvt2H+GzAfBgNVHSMEGDAWgBTVbvSO1hVd14Q+
7TYyRpq6oxAL8zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFXNzBqdFlWWGRlRVB1MDJNa2FhdXFNUUNfTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjUvNThmZjU0LTM0MTAtNGU0Mi1hYWI4LWQyZDdmMmJiNjRkZi8x
L2hDS1J6dmVteG5ia3NmTC1iWXZncjdkaF9ocy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUv
NThmZjU0LTM0MTAtNGU0Mi1hYWI4LWQyZDdmMmJiNjRkZi8xLzFXNzBqdFlWWGRl
RVB1MDJNa2FhdXFNUUNfTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoOjwLwIDANBgkqhkiG9w0BAQsF
AAOCAQEAAh+1CFHC62TqmSy/1LfGWoDWnn6Q97REwaqmGjRaBpmqjYvW1q7eE4pu
3g6KT6Lb646B4tFYiqfspyHf+wZTOETMbYCbMELI7QacodiPaJURn6xDwdZgurTp
bKMMriINGI7WX9PEmWkzpcR2lJ6NoiHgG4BFeqD6og9vIUZ6pwsp+nOLNpitaF4p
Kt4aFZx573feGjvXw5jMo3C0F7g3fTbLLM/dVx635uHA3A51Q9y9MYVjrhubC84P
uBMOE09gF6+qsfxW6y60lLecyER/ROREM3+uTVPb3OvHmqUYT4pv8SCHjv8tL+yV
b/ejkL0DquR+3m0FKuSJRWZCDKbFLw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:36 2024 by rpki-client on console-ams.rpki-client.org