Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/Tr_bTEyTjBGeWNG1vw3UT_Wh7-M.roa
File: Tr_bTEyTjBGeWNG1vw3UT_Wh7-M.roa (raw, json)
Hash identifier: VwIFRFw5/rSSbdpyJjm9ADLYeM/sxSf2ZbrMk8n0gG0=
Subject key identifier: 4E:BF:DB:4C:4C:93:8C:11:9E:58:D1:B5:BF:0D:D4:4F:F5:A1:EF:E3
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 0404C858
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/Tr_bTEyTjBGeWNG1vw3UT_Wh7-M.roa
Signing time: Thu 03 Feb 2022 23:23:38 +0000
ROA not before: Thu 03 Feb 2022 23:23:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12732
IP address blocks: 2a06:9380::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67422296 (0x404c858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Feb 3 23:23:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ebfdb4c4c938c119e58d1b5bf0dd44ff5a1efe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:58:29:87:99:ad:45:a0:89:ca:66:ec:ef:f0:
82:05:72:8d:86:e6:b4:d4:97:eb:a0:80:89:bf:51:
b5:41:07:b2:e6:e5:5a:e0:2c:2e:4b:ad:ce:89:fa:
89:ce:db:12:c0:2d:af:90:72:93:13:88:c5:5f:15:
f2:af:fc:bc:ae:0b:5e:0b:fd:64:fd:31:4c:4b:45:
5f:94:c1:ad:48:a7:3a:5c:e9:af:86:1e:45:c9:71:
0d:c2:c2:97:ad:f3:c7:6c:c2:4a:d0:c7:47:ea:d3:
a3:b0:eb:5f:f3:b0:25:b2:65:53:da:b7:a0:7b:d9:
af:1d:40:8a:8a:c4:40:36:35:65:78:a0:20:3c:d9:
78:e6:7e:bf:33:47:23:1f:62:9c:41:75:b1:34:a8:
9a:de:27:9d:89:82:d5:ce:fc:9e:ec:47:84:95:f5:
49:db:18:72:9c:35:57:0b:9a:c5:67:28:b8:11:2d:
14:45:e9:0f:17:8f:ef:42:23:bd:40:b9:7e:d2:da:
39:40:57:29:95:4d:26:69:9d:15:1a:46:df:80:1c:
a6:e2:7a:5d:4f:58:7e:ac:8b:a1:76:e2:36:62:1a:
bb:68:28:92:b2:bb:b6:24:80:b5:d1:fd:7f:f9:da:
d3:d7:6f:78:76:fb:20:34:78:03:e1:db:b7:2f:b9:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BF:DB:4C:4C:93:8C:11:9E:58:D1:B5:BF:0D:D4:4F:F5:A1:EF:E3
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/Tr_bTEyTjBGeWNG1vw3UT_Wh7-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9380::/29
Signature Algorithm: sha256WithRSAEncryption
9f:60:c7:9c:21:c8:f4:7f:3d:e6:67:d5:3f:21:94:44:d9:34:
14:ee:3b:d8:2a:c7:93:c7:96:75:09:34:49:2f:88:a9:61:b2:
69:bd:0b:fe:9c:27:8e:20:92:87:83:34:72:ed:07:38:cc:54:
02:7a:0c:37:9e:c3:3c:49:e3:2c:99:66:b1:60:d1:15:b8:fb:
d2:bb:a6:30:7f:a3:0c:4b:7c:7e:15:09:df:59:9a:a5:c2:1e:
25:59:35:b7:83:d8:2f:81:a7:8c:f9:e2:d1:ae:b2:71:30:e6:
74:16:8b:f1:e0:32:e5:82:7e:97:d2:77:77:fb:1c:75:16:1f:
57:f9:d3:09:99:bf:06:02:f3:4e:36:a4:d7:48:52:3f:2a:ea:
74:99:81:cb:74:4e:c1:ee:a0:bd:5f:ee:71:b4:fd:a4:f4:9b:
b9:0f:b9:7d:f5:84:d3:ad:bf:a9:c6:7b:d3:c6:14:6f:2a:b9:
12:73:47:51:71:f0:a0:27:fc:26:5a:04:32:f7:77:ec:44:f6:
79:a3:71:30:15:7c:02:e9:5e:29:0f:a8:0d:9b:97:8a:d6:03:
c0:66:6d:94:da:de:5c:7a:d6:cd:2a:ca:c4:4d:c9:b8:51:06:
d8:10:98:bf:3f:f2:72:b5:ea:69:16:91:e6:b5:af:d1:f1:a6:
14:b8:f4:8d
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEBATIWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NzJkMTc4YzhlNTNmNTIxMzFjMWZiNjQ3NDNjOTYwY2Y4OTdmZDBjMB4XDTIyMDIw
MzIzMjMzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGViZmRiNGM0Yzkz
OGMxMTllNThkMWI1YmYwZGQ0NGZmNWExZWZlMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPlYKYeZrUWgicpm7O/wggVyjYbmtNSX66CAib9RtUEHsubl
WuAsLkutzon6ic7bEsAtr5BykxOIxV8V8q/8vK4LXgv9ZP0xTEtFX5TBrUinOlzp
r4YeRclxDcLCl63zx2zCStDHR+rTo7DrX/OwJbJlU9q3oHvZrx1AiorEQDY1ZXig
IDzZeOZ+vzNHIx9inEF1sTSomt4nnYmC1c78nuxHhJX1SdsYcpw1VwuaxWcouBEt
FEXpDxeP70IjvUC5ftLaOUBXKZVNJmmdFRpG34AcpuJ6XU9YfqyLoXbiNmIau2go
krK7tiSAtdH9f/na09dveHb7IDR4A+Hbty+59mMCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBROv9tMTJOMEZ5Y0bW/DdRP9aHv4zAfBgNVHSMEGDAWgBSnLReMjlP1ITHB
+2R0PJYM+Jf9DDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3B5MFhqSTVUOVNFeHdmdGtkRHlXRFBpWF9Rdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDQvMWI4MTNhLTVlODYtNDViMC05OWNkLTI4YjlkMjYxZWNiMS8x
L1RyX2JURXlUakJHZVdORzF2dzNVVF9XaDctTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQv
MWI4MTNhLTVlODYtNDViMC05OWNkLTI4YjlkMjYxZWNiMS8xL3B5MFhqSTVUOVNF
eHdmdGtkRHlXRFBpWF9Rdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoGk4AwDQYJKoZIhvcNAQELBQAD
ggEBAJ9gx5whyPR/PeZn1T8hlETZNBTuO9gqx5PHlnUJNEkviKlhsmm9C/6cJ44g
koeDNHLtBzjMVAJ6DDeewzxJ4yyZZrFg0RW4+9K7pjB/owxLfH4VCd9ZmqXCHiVZ
NbeD2C+Bp4z54tGusnEw5nQWi/HgMuWCfpfSd3f7HHUWH1f50wmZvwYC8042pNdI
Uj8q6nSZgct0TsHuoL1f7nG0/aT0m7kPuX31hNOtv6nGe9PGFG8quRJzR1Fx8KAn
/CZaBDL3d+xE9nmjcTAVfALpXikPqA2bl4rWA8BmbZTa3lx61s0qysRNybhRBtgQ
mL8/8nK16mkWkea1r9HxphS49I0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:17 2024 by rpki-client on console-fra.rpki-client.org