Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/wuXF9YrOMoaAMYUxvmvzRvHj2f0.roa
File: wuXF9YrOMoaAMYUxvmvzRvHj2f0.roa (raw, json)
Hash identifier: oL1m65vFSmLH3y1HW+yFtDdRXRoIXv6mk3N1BT/a720=
Subject key identifier: C2:E5:C5:F5:8A:CE:32:86:80:31:85:31:BE:6B:F3:46:F1:E3:D9:FD
Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial: 032F97F0
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/wuXF9YrOMoaAMYUxvmvzRvHj2f0.roa
Signing time: Sat 01 Jan 2022 06:58:45 +0000
ROA not before: Sat 01 Jan 2022 06:58:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35277
IP address blocks: 2a04:bc40:1dc3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53450736 (0x32f97f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Validity
Not Before: Jan 1 06:58:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2e5c5f58ace328680318531be6bf346f1e3d9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ea:35:2f:51:d0:b9:c1:aa:14:b0:82:0a:68:
ea:b0:66:cd:72:93:22:29:c7:1f:0f:5a:07:20:45:
29:dc:5a:38:71:37:52:d3:9c:d2:36:2c:71:aa:a9:
b4:e6:44:a1:60:7b:f0:c5:88:59:7f:e8:ee:d0:6f:
b8:f5:1f:2a:fc:89:07:11:4a:19:c4:d6:00:08:eb:
41:59:81:34:8a:e6:99:86:57:69:e8:01:2a:f8:15:
7d:e0:88:9a:6e:51:f6:a9:25:37:95:c5:aa:3b:98:
95:8c:da:ba:9f:39:0c:c1:30:11:9b:79:04:53:60:
c3:93:4e:71:99:80:1d:e4:ab:9a:80:3c:46:75:d9:
34:84:7c:8d:b4:09:6b:0e:2f:d1:d2:41:b3:dc:21:
91:10:10:c9:bb:d3:7a:56:aa:06:58:54:3d:de:d5:
36:bb:75:6e:78:f1:92:db:12:76:9f:75:21:4b:8e:
87:7b:af:9b:6f:d8:72:91:2f:f9:10:ec:ce:5f:38:
91:94:ba:79:d4:6c:6f:bf:2c:fc:00:80:a1:57:7f:
61:07:d7:41:a6:e1:95:9b:15:05:f2:5a:00:ce:1b:
d4:ff:0c:d7:ab:de:60:d2:4d:36:c7:32:20:d6:be:
f5:e6:96:de:7a:90:31:c6:fe:52:44:f4:9e:a2:9a:
a9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E5:C5:F5:8A:CE:32:86:80:31:85:31:BE:6B:F3:46:F1:E3:D9:FD
X509v3 Authority Key Identifier:
keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/wuXF9YrOMoaAMYUxvmvzRvHj2f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:bc40:1dc3::/48
Signature Algorithm: sha256WithRSAEncryption
5c:26:5c:1c:07:64:84:67:3d:c3:7e:c5:6d:59:98:60:07:4a:
ac:01:7f:dd:c2:76:ed:29:2b:1b:a5:af:d6:f0:3c:b4:32:ee:
02:cb:75:f7:0c:26:10:ee:d3:6f:c8:3a:b5:23:34:1e:b6:b9:
58:72:32:e1:b0:17:2a:70:08:cd:2e:36:b5:a6:02:a0:9f:11:
41:19:68:f1:8a:ff:83:06:42:c2:d8:02:94:8a:16:ca:7e:a0:
d3:e2:2a:a0:c9:43:0f:2d:39:30:2a:fd:11:70:38:d1:22:6c:
75:61:a3:54:b4:52:eb:0d:79:f0:8e:97:14:82:5a:86:75:0b:
0b:a7:6f:08:00:6c:83:2f:3b:02:54:c5:8a:9a:dd:e6:9c:5d:
eb:36:78:c9:ad:46:e6:89:4c:5f:24:cd:e7:10:38:8f:46:2a:
5c:80:54:74:56:f8:5f:3a:0c:f5:7b:36:3b:32:8d:b4:73:78:
ae:d2:2d:2c:ca:eb:98:c4:08:07:d8:fb:eb:8b:72:22:48:5d:
78:bc:7c:0b:e1:d9:21:1d:09:d2:da:e3:d8:82:e1:b6:9e:3a:
97:14:f5:a3:6a:7b:92:00:3d:e1:75:73:57:17:ab:0a:bc:98:
19:d6:ff:44:a9:21:b5:7f:41:8f:ab:92:c0:a5:21:32:12:b7:
10:ba:e5:75
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEAy+X8DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ODJlN2I4MDY4YzRhZTlhZTRjYTRjM2E2YjIwOTYxOTlhNzQxZmYyMB4XDTIyMDEw
MTA2NTg0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzJlNWM1ZjU4YWNl
MzI4NjgwMzE4NTMxYmU2YmYzNDZmMWUzZDlmZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ3qNS9R0LnBqhSwggpo6rBmzXKTIinHHw9aByBFKdxaOHE3
UtOc0jYscaqptOZEoWB78MWIWX/o7tBvuPUfKvyJBxFKGcTWAAjrQVmBNIrmmYZX
aegBKvgVfeCImm5R9qklN5XFqjuYlYzaup85DMEwEZt5BFNgw5NOcZmAHeSrmoA8
RnXZNIR8jbQJaw4v0dJBs9whkRAQybvTelaqBlhUPd7VNrt1bnjxktsSdp91IUuO
h3uvm2/YcpEv+RDszl84kZS6edRsb78s/ACAoVd/YQfXQabhlZsVBfJaAM4b1P8M
16veYNJNNscyINa+9eaW3nqQMcb+UkT0nqKaqQkCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTC5cX1is4yhoAxhTG+a/NG8ePZ/TAfBgNVHSMEGDAWgBS4LnuAaMSumuTK
TDprIJYZmnQf8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VDNTdnR2pFcnBya3lrdzZheUNXR1pwMEhfSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvMjljOTE1LTJjYmMtNDc2OC04NDBjLWFhZGZhOWMwNjc0Mi8x
L3d1WEY5WXJPTW9hQU1ZVXh2bXZ6UnZIajJmMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
MjljOTE1LTJjYmMtNDc2OC04NDBjLWFhZGZhOWMwNjc0Mi8xL3VDNTdnR2pFcnBy
a3lrdzZheUNXR1pwMEhfSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoEvEAdwzANBgkqhkiG9w0BAQsF
AAOCAQEAXCZcHAdkhGc9w37FbVmYYAdKrAF/3cJ27SkrG6Wv1vA8tDLuAst19wwm
EO7Tb8g6tSM0Hra5WHIy4bAXKnAIzS42taYCoJ8RQRlo8Yr/gwZCwtgClIoWyn6g
0+IqoMlDDy05MCr9EXA40SJsdWGjVLRS6w158I6XFIJahnULC6dvCABsgy87AlTF
iprd5pxd6zZ4ya1G5olMXyTN5xA4j0YqXIBUdFb4XzoM9Xs2OzKNtHN4rtItLMrr
mMQIB9j764tyIkhdeLx8C+HZIR0J0trj2ILhtp46lxT1o2p7kgA94XVzVxerCryY
Gdb/RKkhtX9Bj6uSwKUhMhK3ELrldQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:44 2024 by rpki-client on console-fra.rpki-client.org