Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/So7SNUZNOS-glKH3x-w1TtJFIAM.roa
File: So7SNUZNOS-glKH3x-w1TtJFIAM.roa (raw, json)
Hash identifier: YGq2TtKpE9/6IqKZ28jUK3umvgYX5K4f69Q+aKIVAUA=
Subject key identifier: 4A:8E:D2:35:46:4D:39:2F:A0:94:A1:F7:C7:EC:35:4E:D2:45:20:03
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 40CBCE41
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/So7SNUZNOS-glKH3x-w1TtJFIAM.roa
Signing time: Sat 01 Jan 2022 08:00:30 +0000
ROA not before: Sat 01 Jan 2022 08:00:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49762
IP address blocks: 2001:998:82::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1087098433 (0x40cbce41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Jan 1 08:00:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a8ed235464d392fa094a1f7c7ec354ed2452003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cb:ea:74:51:15:38:ce:5a:1a:4b:a5:93:5f:
ed:d0:b8:47:fa:e7:e7:e6:0a:43:d8:24:8c:ae:cb:
94:85:21:79:83:d3:d8:2a:73:a7:09:f4:6f:ec:c8:
9f:29:b8:57:4d:0c:85:cc:6f:a9:45:2f:9b:09:de:
5d:9b:c5:cd:8b:7b:16:b5:d3:42:3e:d0:c2:18:83:
aa:d5:25:c8:bd:40:18:8e:b4:11:7a:43:ba:dd:bd:
8c:52:31:6e:d8:4e:fe:9e:f6:55:f3:b1:21:8c:4f:
bd:f7:0f:17:b8:17:40:57:ba:4d:5c:2f:3f:b8:6a:
f4:e0:bc:37:ca:fb:5e:24:d3:8b:1d:d4:e5:cc:e3:
36:2d:a0:cc:35:dd:dc:2d:99:39:af:96:1f:8e:2b:
59:b5:c0:61:13:e4:91:0a:a4:c1:e7:88:bf:1c:91:
f4:06:95:25:d1:a8:c7:13:ad:8c:52:02:31:fd:2a:
37:ef:65:52:dd:25:d2:b7:eb:9e:4f:96:6c:e2:13:
38:e6:ca:4a:1f:75:45:20:6b:15:48:68:05:8b:69:
b6:1c:dc:95:74:18:65:b9:9a:2d:5f:b6:f6:7a:57:
9d:65:4e:09:66:1a:d5:5d:7f:91:f5:12:fb:ca:48:
7d:68:fa:2c:d2:4d:66:e0:2e:92:29:29:f1:3b:ac:
29:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8E:D2:35:46:4D:39:2F:A0:94:A1:F7:C7:EC:35:4E:D2:45:20:03
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/So7SNUZNOS-glKH3x-w1TtJFIAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:998:82::/48
Signature Algorithm: sha256WithRSAEncryption
7f:f1:d4:18:8d:9f:46:1d:aa:52:21:c9:a3:92:18:83:74:c3:
c1:18:22:1a:12:51:c8:3a:88:2d:ed:35:b2:d7:38:39:4f:d0:
94:e7:4c:54:6d:a2:f4:08:b8:47:a9:e4:98:26:27:96:b4:b0:
84:aa:97:79:15:44:6c:27:55:e7:5b:b3:d8:50:f4:10:1d:bc:
ea:39:58:9b:e8:1b:2e:ac:c2:85:dc:9c:a2:5f:5e:ce:1c:87:
3d:7e:71:1f:b0:77:52:54:21:3e:c8:a3:e4:ad:91:4b:fd:7d:
f9:65:45:d7:79:b8:23:47:38:cf:bd:92:fa:29:48:46:4e:cd:
af:55:70:0a:c7:5a:22:f3:eb:02:f2:b5:6c:7c:a0:04:2a:82:
d2:1a:41:5c:35:89:fa:12:94:71:09:19:68:c3:64:41:5d:76:
f5:72:b0:d6:05:e8:b4:f9:4f:13:de:89:9b:aa:1c:d2:31:24:
7a:e9:3b:2a:70:a2:c8:03:7b:50:8a:a1:76:f7:34:1e:d9:6b:
1c:94:82:2a:e8:f8:b4:20:6e:48:52:0c:aa:b0:75:0a:ed:1d:
d5:19:88:3f:c4:1d:61:b5:81:29:ad:72:7c:50:64:f1:49:4a:
27:4b:5f:b0:65:1a:0a:1f:30:b8:92:a6:ae:5e:61:15:c3:51:
aa:81:e4:55
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEQMvOQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MGRlZTFiMDZiYTI0YTY3NjIxM2Y5NzZhNGI1MGMxMjlkY2IyYjczMB4XDTIyMDEw
MTA4MDAzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGE4ZWQyMzU0NjRk
MzkyZmEwOTRhMWY3YzdlYzM1NGVkMjQ1MjAwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI/L6nRRFTjOWhpLpZNf7dC4R/rn5+YKQ9gkjK7LlIUheYPT
2Cpzpwn0b+zInym4V00MhcxvqUUvmwneXZvFzYt7FrXTQj7QwhiDqtUlyL1AGI60
EXpDut29jFIxbthO/p72VfOxIYxPvfcPF7gXQFe6TVwvP7hq9OC8N8r7XiTTix3U
5czjNi2gzDXd3C2ZOa+WH44rWbXAYRPkkQqkweeIvxyR9AaVJdGoxxOtjFICMf0q
N+9lUt0l0rfrnk+WbOITOObKSh91RSBrFUhoBYtpthzclXQYZbmaLV+29npXnWVO
CWYa1V1/kfUS+8pIfWj6LNJNZuAukikp8TusKbcCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRKjtI1Rk05L6CUoffH7DVO0kUgAzAfBgNVHSMEGDAWgBTg3uGwa6JKZ2IT
+XaktQwSncsrczAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRON2hzR3VpU21kaUVfbDJwTFVNRXAzTEszTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvYzIyZGM5LWM3YmEtNDE1Ni1hNzljLTE1ZTkwYmY4N2ZhYi8x
L1NvN1NOVVpOT1MtZ2xLSDN4LXcxVHRKRklBTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
YzIyZGM5LWM3YmEtNDE1Ni1hNzljLTE1ZTkwYmY4N2ZhYi8xLzRON2hzR3VpU21k
aUVfbDJwTFVNRXAzTEszTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABCZgAgjANBgkqhkiG9w0BAQsF
AAOCAQEAf/HUGI2fRh2qUiHJo5IYg3TDwRgiGhJRyDqILe01stc4OU/QlOdMVG2i
9Ai4R6nkmCYnlrSwhKqXeRVEbCdV51uz2FD0EB286jlYm+gbLqzChdycol9ezhyH
PX5xH7B3UlQhPsij5K2RS/19+WVF13m4I0c4z72S+ilIRk7Nr1VwCsdaIvPrAvK1
bHygBCqC0hpBXDWJ+hKUcQkZaMNkQV129XKw1gXotPlPE96Jm6oc0jEkeuk7KnCi
yAN7UIqhdvc0HtlrHJSCKuj4tCBuSFIMqrB1Cu0d1RmIP8QdYbWBKa1yfFBk8UlK
J0tfsGUaCh8wuJKmrl5hFcNRqoHkVQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:39 2024 by rpki-client on console-ams.rpki-client.org