Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/2Pt_o6sLNiH88iJ6v7SFWIxllkU.roa
File: 2Pt_o6sLNiH88iJ6v7SFWIxllkU.roa (raw, json)
Hash identifier: K5qF+v1Q3iGML21eWVrPnCr4LSrsmq1IhVP7Wg0YjeU=
Subject key identifier: D8:FB:7F:A3:AB:0B:36:21:FC:F2:22:7A:BF:B4:85:58:8C:65:96:45
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 014305CD
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/2Pt_o6sLNiH88iJ6v7SFWIxllkU.roa
Signing time: Sat 01 Jan 2022 01:00:14 +0000
ROA not before: Sat 01 Jan 2022 01:00:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211086
IP address blocks: 2a0c:b641:50::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21169613 (0x14305cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 01:00:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8fb7fa3ab0b3621fcf2227abfb485588c659645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:4f:ad:48:14:ea:38:a0:4f:8d:74:11:18:
18:22:69:8c:eb:7d:d2:e0:73:e8:95:a0:44:f6:cc:
8e:73:29:69:45:06:43:83:d2:7b:df:17:cf:eb:57:
51:56:43:59:6e:d1:42:26:51:7e:44:cc:02:ba:e8:
a8:69:44:b9:f9:d1:d9:dd:0d:63:4e:e1:54:a2:3e:
f0:a2:e9:28:a8:1e:a4:66:ad:b3:d3:36:75:f5:8b:
33:94:4a:59:d5:58:bf:0a:a7:c9:39:69:15:00:32:
37:92:8a:06:9d:06:de:c5:14:0e:5f:d5:96:d5:ab:
4e:be:05:d4:e8:2f:c4:1b:f4:69:92:0d:c8:e3:1e:
88:ac:b3:6a:17:e8:ba:a8:27:b7:c1:48:02:cc:35:
f4:68:6d:4c:26:f4:5a:ee:45:78:9a:dd:a7:52:19:
da:31:0a:64:de:9f:1f:d7:02:cb:a3:12:46:aa:99:
99:f1:28:64:a1:0a:d7:8f:2a:38:66:3c:ee:69:e2:
db:e9:e4:f3:cd:f7:c3:8e:68:42:8f:76:79:00:11:
d3:56:49:f5:73:20:6a:00:99:4a:17:73:c2:01:e4:
72:55:4c:d1:87:52:bc:c6:5e:e9:c4:76:a5:17:4c:
f6:f0:a8:bc:17:66:1f:2b:46:7a:93:45:2c:e3:37:
15:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FB:7F:A3:AB:0B:36:21:FC:F2:22:7A:BF:B4:85:58:8C:65:96:45
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/2Pt_o6sLNiH88iJ6v7SFWIxllkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:50::/44
Signature Algorithm: sha256WithRSAEncryption
4b:02:ac:04:1c:dd:3f:35:2e:ea:c0:d0:e0:84:86:3d:98:f7:
6e:08:cb:71:c3:fe:af:77:f6:30:0d:1c:de:82:11:ae:f8:76:
98:27:f2:c6:ea:d4:3d:5c:ca:a6:ec:0b:21:9c:d2:ed:57:e1:
66:cc:5a:1c:86:62:44:b6:e8:97:66:b1:93:27:16:43:43:89:
7b:16:92:99:65:0d:a6:04:b0:ec:f6:2f:e1:e4:de:d6:f7:37:
e0:97:c1:e8:b2:8f:53:90:dc:19:d2:4e:13:43:8d:81:37:68:
c7:bd:b0:54:e7:15:b5:aa:22:f2:45:93:dc:67:3a:e7:a9:ee:
dc:4b:e1:ac:ed:75:57:26:9d:7f:a6:b3:05:08:a9:98:da:81:
ec:61:73:d8:87:7d:c1:67:a4:ab:4f:41:43:58:07:f3:dd:9f:
95:0c:23:b7:f8:fb:f2:3c:f1:c2:e2:97:27:a4:ee:ef:3c:88:
64:ce:66:e9:27:83:e8:34:ca:1b:20:c1:9b:2d:d7:fe:6f:76:
2a:a7:8e:91:cc:50:85:fd:b9:fd:73:4a:22:57:8e:31:96:10:
01:40:9f:75:b4:a5:61:49:0f:3a:a7:04:be:40:87:ef:91:c2:
c0:f1:71:1d:95:ba:f0:11:bd:95:c5:b0:51:05:26:7b:24:16:
04:cb:ca:b9
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEAUMFzTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTk3NjgwMTM2M2QzNzU3ODYxNTJlNGQwNjFlNzVjOGJlYjM1MDU4MB4XDTIyMDEw
MTAxMDAxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDhmYjdmYTNhYjBi
MzYyMWZjZjIyMjdhYmZiNDg1NTg4YzY1OTY0NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKpPT61IFOo4oE+NdBEYGCJpjOt90uBz6JWgRPbMjnMpaUUG
Q4PSe98Xz+tXUVZDWW7RQiZRfkTMArroqGlEufnR2d0NY07hVKI+8KLpKKgepGat
s9M2dfWLM5RKWdVYvwqnyTlpFQAyN5KKBp0G3sUUDl/VltWrTr4F1OgvxBv0aZIN
yOMeiKyzahfouqgnt8FIAsw19GhtTCb0Wu5FeJrdp1IZ2jEKZN6fH9cCy6MSRqqZ
mfEoZKEK148qOGY87mni2+nk8833w45oQo92eQAR01ZJ9XMgagCZShdzwgHkclVM
0YdSvMZe6cR2pRdM9vCovBdmHytGepNFLOM3FY0CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTY+3+jqws2IfzyInq/tIVYjGWWRTAfBgNVHSMEGDAWgBQFl2gBNj03V4YV
Lk0GHnXIvrNQWDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JaZG9BVFk5TjFlR0ZTNU5CaDUxeUw2elVGZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvMmJhYWRjLTJiN2EtNGVjMC05NWNhLTVlYzhjOGVkNjBmZC8x
LzJQdF9vNnNMTmlIODhpSjZ2N1NGV0l4bGxrVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
MmJhYWRjLTJiN2EtNGVjMC05NWNhLTVlYzhjOGVkNjBmZC8xL0JaZG9BVFk5TjFl
R0ZTNU5CaDUxeUw2elVGZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoMtkEAUDANBgkqhkiG9w0BAQsF
AAOCAQEASwKsBBzdPzUu6sDQ4ISGPZj3bgjLccP+r3f2MA0c3oIRrvh2mCfyxurU
PVzKpuwLIZzS7VfhZsxaHIZiRLbol2axkycWQ0OJexaSmWUNpgSw7PYv4eTe1vc3
4JfB6LKPU5DcGdJOE0ONgTdox72wVOcVtaoi8kWT3Gc656nu3EvhrO11Vyadf6az
BQipmNqB7GFz2Id9wWekq09BQ1gH892flQwjt/j78jzxwuKXJ6Tu7zyIZM5m6SeD
6DTKGyDBmy3X/m92KqeOkcxQhf25/XNKIleOMZYQAUCfdbSlYUkPOqcEvkCH75HC
wPFxHZW68BG9lcWwUQUmeyQWBMvKuQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:15 2024 by rpki-client on console-fra.rpki-client.org