Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/98t7-elKGlRKEtqjG0GmVCQUkno.roa
File: 98t7-elKGlRKEtqjG0GmVCQUkno.roa (raw, json)
Hash identifier: VsTJUrBP5IoE2/JCG4JZBZ0HvktWoD5o+XYmKczUC/Q=
Subject key identifier: F7:CB:7B:F9:E9:4A:1A:54:4A:12:DA:A3:1B:41:A6:54:24:14:92:7A
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 0B8EDD
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/98t7-elKGlRKEtqjG0GmVCQUkno.roa
Signing time: Sat 02 Apr 2022 20:53:59 +0000
ROA not before: Sat 02 Apr 2022 20:53:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62177
IP address blocks: 2a0c:9480::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 757469 (0xb8edd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Apr 2 20:53:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7cb7bf9e94a1a544a12daa31b41a6542414927a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:55:ca:30:3d:db:9e:15:bd:db:9b:d8:77:40:
e4:44:ae:7b:68:b9:7b:fc:6e:8b:b7:cc:6e:e5:69:
24:ae:e0:cc:d2:c6:e3:9f:ba:b1:b9:a5:4b:15:54:
cd:13:e7:0b:3e:11:ef:0a:6c:76:47:e0:f1:c9:7d:
50:b7:6a:c9:10:a4:6f:b0:de:94:03:66:6d:17:7c:
60:ae:69:e6:b6:1c:65:f4:aa:07:be:51:5d:9d:e8:
38:bc:21:74:78:14:a0:e0:62:e3:3d:45:d9:2c:1d:
b6:f1:7a:87:b7:5d:81:87:23:fd:bd:a6:31:26:d7:
75:68:2d:92:82:38:4f:c3:f5:88:63:c6:b6:d8:33:
55:7e:8d:87:f8:61:fe:08:28:e1:30:50:b0:1b:5f:
68:fa:c5:01:08:64:bd:8c:85:41:e2:3f:08:50:94:
0e:50:13:04:cc:62:33:11:90:80:61:72:18:f1:21:
c8:3a:83:fc:41:f8:30:cd:89:2f:a7:96:8e:9c:b2:
8f:9b:0b:b1:db:a5:2c:56:bd:40:6a:02:62:78:a4:
c0:ff:5c:37:ef:9d:1b:5f:0f:02:e9:a2:6e:ee:fc:
15:67:fb:2d:19:de:39:05:8d:58:e3:a3:ce:e7:74:
4c:91:0e:51:8b:09:b6:d4:01:9b:8c:de:70:de:f0:
1c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CB:7B:F9:E9:4A:1A:54:4A:12:DA:A3:1B:41:A6:54:24:14:92:7A
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/98t7-elKGlRKEtqjG0GmVCQUkno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9480::/29
Signature Algorithm: sha256WithRSAEncryption
6a:32:aa:51:b6:0f:fc:56:2c:aa:f5:1a:38:7b:26:5a:bc:67:
28:cc:3e:ae:58:39:06:33:37:f0:1d:35:bf:27:0f:6e:bf:c5:
9b:6a:ba:d8:af:cd:39:61:c9:16:c9:86:65:45:15:36:3e:33:
ab:8b:2a:80:51:39:92:2d:0e:ac:9d:3d:5a:4e:60:5d:e4:1e:
ba:64:38:be:78:8d:9e:a6:0f:82:08:a8:6f:0f:77:ab:a6:8c:
34:80:84:63:35:12:6b:7f:3f:78:5c:34:8b:87:ed:ac:f6:14:
2b:56:f4:50:26:47:c6:4a:1a:88:05:aa:5b:76:bd:f7:af:90:
d4:a2:fd:96:05:9c:ce:87:24:2c:a9:89:64:65:1e:08:55:b3:
15:96:da:d2:92:27:6c:6a:01:ad:9b:a5:3f:23:7a:5d:c1:7a:
69:27:30:43:b6:5f:b4:54:48:a6:56:3a:18:6e:f2:7a:30:42:
b5:ec:31:2b:3e:28:4c:3e:e6:13:60:b4:cb:95:b8:ab:e9:02:
44:c9:87:b2:2e:bb:82:5e:e8:c2:34:b3:c1:83:82:13:30:7b:
1e:0f:69:a5:c7:c3:0d:51:ba:c7:82:a1:d7:6f:34:55:11:1a:
e9:95:23:03:ea:f0:91:c9:8e:56:8c:e8:45:46:2a:34:24:be:
e8:8c:af:fc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIDC47dMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI2
MGIyYmM0NTQ3N2M4MWQ3NzRkYWEwYzI4YWI0NGI3NzRiYTA5MjAwHhcNMjIwNDAy
MjA1MzU5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmN2NiN2JmOWU5NGEx
YTU0NGExMmRhYTMxYjQxYTY1NDI0MTQ5MjdhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4FXKMD3bnhW925vYd0DkRK57aLl7/G6Lt8xu5WkkruDM0sbj
n7qxuaVLFVTNE+cLPhHvCmx2R+DxyX1Qt2rJEKRvsN6UA2ZtF3xgrmnmthxl9KoH
vlFdneg4vCF0eBSg4GLjPUXZLB228XqHt12BhyP9vaYxJtd1aC2SgjhPw/WIY8a2
2DNVfo2H+GH+CCjhMFCwG19o+sUBCGS9jIVB4j8IUJQOUBMEzGIzEZCAYXIY8SHI
OoP8QfgwzYkvp5aOnLKPmwux26UsVr1AagJieKTA/1w3750bXw8C6aJu7vwVZ/st
Gd45BY1Y46PO53RMkQ5Riwm21AGbjN5w3vAcKQIDAQABo4ICCjCCAgYwHQYDVR0O
BBYEFPfLe/npShpUShLaoxtBplQkFJJ6MB8GA1UdIwQYMBaAFCYLK8RUd8gdd02q
DCirRLd0ugkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
SmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQtMTdlNjZjMWZkM2QxLzEv
OTh0Ny1lbEtHbFJLRXRxakcwR21WQ1FVa25vLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83
YjEyMDUtMzQ1MC00ZTkwLThiMTQtMTdlNjZjMWZkM2QxLzEvSmdzcnhGUjN5QjEz
VGFvTUtLdEV0M1M2Q1NBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAG
CCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgyUgDANBgkqhkiG9w0BAQsFAAOC
AQEAajKqUbYP/FYsqvUaOHsmWrxnKMw+rlg5BjM38B01vycPbr/Fm2q62K/NOWHJ
FsmGZUUVNj4zq4sqgFE5ki0OrJ09Wk5gXeQeumQ4vniNnqYPggiobw93q6aMNICE
YzUSa38/eFw0i4ftrPYUK1b0UCZHxkoaiAWqW3a996+Q1KL9lgWczockLKmJZGUe
CFWzFZba0pInbGoBrZulPyN6XcF6aScwQ7ZftFRIplY6GG7yejBCtewxKz4oTD7m
E2C0y5W4q+kCRMmHsi67gl7owjSzwYOCEzB7Hg9ppcfDDVG6x4Kh1280VREa6ZUj
A+rwkcmOVozoRUYqNCS+6Iyv/A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:55 2024 by rpki-client on console-ams.rpki-client.org