Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/yhClU3RdUYMPKGOJwJ6AEIizGoQ.roa
File: yhClU3RdUYMPKGOJwJ6AEIizGoQ.roa (raw, json)
Hash identifier: fFhTXLIfa2yQQ/s57Z+2szlnivz2Jwl/XIlcW6oNJGQ=
Subject key identifier: CA:10:A5:53:74:5D:51:83:0F:28:63:89:C0:9E:80:10:88:B3:1A:84
Certificate issuer: /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial: 07268345
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/yhClU3RdUYMPKGOJwJ6AEIizGoQ.roa
Signing time: Wed 19 Jan 2022 20:53:24 +0000
ROA not before: Wed 19 Jan 2022 20:53:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209718
IP address blocks: 2001:67c:2ea8::/48 maxlen: 48
2001:67c:2908::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119964485 (0x7268345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Validity
Not Before: Jan 19 20:53:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca10a553745d51830f286389c09e801088b31a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:e2:9f:e0:1a:7e:37:55:21:10:65:05:12:
bb:71:06:1f:f6:8c:01:86:8f:68:28:f8:d9:a5:bb:
ae:cb:52:28:d1:3f:71:4f:43:78:61:60:5d:6d:49:
62:c2:af:8f:0a:c2:80:03:6c:cb:ef:55:16:76:ed:
82:c7:d1:62:07:21:bb:89:ab:1d:4f:e0:5e:f6:aa:
4c:2c:12:f9:35:17:15:46:6a:a8:e2:46:59:12:f0:
da:6d:97:05:c0:3d:d1:db:31:d3:67:5a:c6:92:7b:
b0:80:90:ce:9e:c3:4b:31:75:11:a3:c6:7e:70:87:
89:d7:8f:35:b1:a4:d3:94:1b:5f:91:b7:a6:82:af:
d9:d3:9a:95:58:03:dc:08:bf:40:04:73:56:e5:70:
c7:11:2f:9e:00:7d:e2:7b:88:c3:5f:62:d7:53:df:
c1:77:33:84:0b:42:9d:27:31:d0:ff:ad:e6:f1:95:
f0:6d:bb:8a:82:3f:f9:87:12:89:69:71:f2:b0:dd:
51:3a:0e:2c:51:72:ef:c0:fa:87:ca:69:ff:cd:e0:
9f:bf:9b:85:e3:2f:f3:ab:a6:55:0e:fb:86:f5:3c:
54:b6:62:50:ca:31:8f:7e:17:4f:9f:f9:58:b1:c5:
95:ff:b2:2e:c3:62:7c:b0:3c:f9:42:69:76:e8:e5:
96:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:10:A5:53:74:5D:51:83:0F:28:63:89:C0:9E:80:10:88:B3:1A:84
X509v3 Authority Key Identifier:
keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/yhClU3RdUYMPKGOJwJ6AEIizGoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2908::/48
2001:67c:2ea8::/48
Signature Algorithm: sha256WithRSAEncryption
8b:91:26:51:99:07:4b:3b:5b:37:2c:23:da:4e:d0:c4:3d:7f:
cd:7c:2f:79:05:d7:74:42:5f:34:86:57:13:d5:8b:3b:a6:11:
37:19:4b:42:b5:2f:72:20:21:72:ce:12:d7:d5:1a:49:61:47:
c3:3c:d5:b8:e7:74:f9:ce:fd:62:3d:d7:ca:a3:fc:6e:29:eb:
b5:88:4f:6d:25:5e:e2:c3:43:b8:04:2a:47:03:98:33:c0:48:
71:c5:9b:a2:e3:f4:f9:a4:ea:15:b0:6c:9b:5a:01:2b:c2:31:
72:1f:59:4d:2b:78:fd:f5:25:3e:35:3a:5b:7f:0e:02:23:71:
00:b3:a6:da:bb:fa:b1:9e:72:50:ad:cf:78:12:63:b3:b2:6f:
58:24:15:36:5e:0e:d1:50:fc:31:03:c0:9a:06:01:c3:e5:d6:
c1:82:11:2a:a4:9f:02:54:53:9a:ad:9d:fe:53:1d:20:2f:f2:
9f:24:0c:b7:00:f9:ce:c3:7b:07:c9:2c:0a:04:6b:57:b6:00:
1d:20:d5:6d:8f:5d:71:a9:6b:46:41:eb:60:06:ab:96:6b:c0:
ea:22:2d:bd:f1:bb:3b:8d:fc:dd:c1:96:38:ef:8d:ff:d0:97:
eb:5e:32:48:48:ce:5d:8e:87:77:f4:60:07:bb:01:8c:b7:43:
05:dc:bf:4a
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEByaDRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZWFmMTRiNjdlMDUxY2ZiZDVlMWIxZDUxNjkzZDQ0NjgyMzkyNzkyMB4XDTIyMDEx
OTIwNTMyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2ExMGE1NTM3NDVk
NTE4MzBmMjg2Mzg5YzA5ZTgwMTA4OGIzMWE4NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALvv4p/gGn43VSEQZQUSu3EGH/aMAYaPaCj42aW7rstSKNE/
cU9DeGFgXW1JYsKvjwrCgANsy+9VFnbtgsfRYgchu4mrHU/gXvaqTCwS+TUXFUZq
qOJGWRLw2m2XBcA90dsx02daxpJ7sICQzp7DSzF1EaPGfnCHidePNbGk05QbX5G3
poKv2dOalVgD3Ai/QARzVuVwxxEvngB94nuIw19i11PfwXczhAtCnScx0P+t5vGV
8G27ioI/+YcSiWlx8rDdUToOLFFy78D6h8pp/83gn7+bheMv86umVQ77hvU8VLZi
UMoxj34XT5/5WLHFlf+yLsNifLA8+UJpdujllt0CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTKEKVTdF1Rgw8oY4nAnoAQiLMahDAfBgNVHSMEGDAWgBROrxS2fgUc+9Xh
sdUWk9RGgjknkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RxOFV0bjRGSFB2VjRiSFZGcFBVUm9JNUo1SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvOGNmNTFjLTU0ZDctNGMzYS05MGM0LWJkNTEyZWQ1OGY3OC8x
L3loQ2xVM1JkVVlNUEtHT0p3SjZBRUlpekdvUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
OGNmNTFjLTU0ZDctNGMzYS05MGM0LWJkNTEyZWQ1OGY3OC8xL1RxOFV0bjRGSFB2
VjRiSFZGcFBVUm9JNUo1SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACABBnwpCAMHACABBnwuqDANBgkq
hkiG9w0BAQsFAAOCAQEAi5EmUZkHSztbNywj2k7QxD1/zXwveQXXdEJfNIZXE9WL
O6YRNxlLQrUvciAhcs4S19UaSWFHwzzVuOd0+c79Yj3XyqP8binrtYhPbSVe4sND
uAQqRwOYM8BIccWbouP0+aTqFbBsm1oBK8Ixch9ZTSt4/fUlPjU6W38OAiNxALOm
2rv6sZ5yUK3PeBJjs7JvWCQVNl4O0VD8MQPAmgYBw+XWwYIRKqSfAlRTmq2d/lMd
IC/ynyQMtwD5zsN7B8ksCgRrV7YAHSDVbY9dcalrRkHrYAarlmvA6iItvfG7O438
3cGWOO+N/9CX614ySEjOXY6Hd/RgB7sBjLdDBdy/Sg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:18 2024 by rpki-client on console-fra.rpki-client.org