Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/QRrBtFeAqvGGy0o6mEWdoXt5Ay0.roa
File: QRrBtFeAqvGGy0o6mEWdoXt5Ay0.roa (raw, json)
Hash identifier: TCH5r/TJyCEKl7EC34YitUOdfuf+g/AaaG4b75C/MEg=
Subject key identifier: 41:1A:C1:B4:57:80:AA:F1:86:CB:4A:3A:98:45:9D:A1:7B:79:03:2D
Certificate issuer: /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial: 018200F45A7A8F5E0C64D5ACD76384BE473E
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/QRrBtFeAqvGGy0o6mEWdoXt5Ay0.roa
Signing time: Fri 15 Jul 2022 08:23:10 +0000
ROA not before: Fri 15 Jul 2022 08:23:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210805
IP address blocks: 2a0a:2786::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:f4:5a:7a:8f:5e:0c:64:d5:ac:d7:63:84:be:47:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Validity
Not Before: Jul 15 08:23:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=411ac1b45780aaf186cb4a3a98459da17b79032d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c2:97:91:f1:e2:c8:e0:27:59:96:78:fd:71:
8e:bb:3f:8f:9d:86:40:dd:eb:c8:ef:0c:83:e9:15:
02:bc:88:6c:f3:93:ed:3f:5b:f9:e1:60:9f:40:89:
7c:10:28:d7:05:21:bf:25:8f:cb:73:a6:2b:7b:07:
de:b4:45:39:9c:28:67:f2:3d:9c:1a:d2:5e:cb:9c:
dd:ff:db:f9:56:92:1f:08:89:72:0b:dc:b6:85:94:
0f:99:0f:48:81:d7:66:f8:0d:bf:c1:6b:40:d4:bc:
77:4a:f3:61:46:3d:88:71:16:bc:2b:21:64:d5:64:
43:0c:da:21:58:4b:23:b2:d5:f2:4b:f1:b6:b2:ac:
8b:9a:05:69:d5:92:22:b4:2b:73:d9:b7:6a:ae:08:
28:aa:e9:3b:c7:1b:b7:eb:63:b4:f9:41:97:a8:3a:
cf:7e:49:45:42:7b:09:1c:fb:e9:3d:1e:7c:d8:30:
f6:31:b4:19:21:16:94:5e:45:ce:9a:a3:bf:2b:a8:
73:9b:8e:59:48:78:d0:a7:68:2f:ce:35:9d:1b:3b:
91:81:4c:2c:45:cb:56:8c:38:52:c7:ab:a3:78:54:
0d:f3:34:16:d8:45:e4:60:a4:60:78:6b:52:e4:f8:
fa:a8:35:3b:77:bb:1d:21:90:c2:c5:0f:d3:84:e3:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1A:C1:B4:57:80:AA:F1:86:CB:4A:3A:98:45:9D:A1:7B:79:03:2D
X509v3 Authority Key Identifier:
keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/QRrBtFeAqvGGy0o6mEWdoXt5Ay0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2786::/32
Signature Algorithm: sha256WithRSAEncryption
64:64:3f:60:95:b5:25:bb:fa:93:bf:6b:87:9c:05:94:80:8e:
65:47:b3:be:f1:52:72:3d:e7:db:b1:8f:2c:9c:71:e8:bd:ba:
e6:60:e4:fc:d1:35:61:67:ab:fe:5b:c7:8c:f1:7d:6e:60:0b:
d7:03:fe:7c:71:7e:64:72:63:cb:fe:8e:67:bb:59:6d:05:5d:
8a:8d:b2:c2:70:98:43:74:17:2f:f2:d5:ca:c4:e1:af:8e:7e:
d1:5d:db:62:bf:f7:69:5d:2a:77:45:d0:ea:d5:a3:8e:79:38:
1f:17:e8:48:67:66:27:68:7e:d0:22:18:d2:3f:3b:db:8f:cf:
12:1e:18:f8:3a:9c:68:6a:00:02:bc:be:b5:31:ea:82:84:7d:
76:55:64:0f:fb:d3:42:6b:29:ed:54:2a:d7:ab:6d:d7:a0:fd:
78:e5:08:be:83:61:27:9c:91:a9:dc:39:f9:53:08:88:7a:e1:
3f:b0:05:85:89:59:9b:8e:f2:21:c4:85:db:ba:3e:2f:be:05:
c7:0e:ca:83:07:b8:e8:31:b4:f2:14:5b:0b:b0:0a:37:24:90:
63:1e:35:1a:99:53:05:95:bc:4e:dc:e9:0a:fa:33:78:f6:9e:
75:86:1d:3a:4b:d8:8b:eb:cd:af:67:8a:cf:2c:a0:e0:fb:41:
6b:51:0b:62
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYIA9Fp6j14MZNWs12OEvkc+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MGJhZTYwOTcwYTJkZmM4NmRkNjA3YzViOTE1YWQ1YzUz
NGI0MTMwHhcNMjIwNzE1MDgyMzEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTFhYzFiNDU3ODBhYWYxODZjYjRhM2E5ODQ1OWRhMTdiNzkwMzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcKXkfHiyOAnWZZ4/XGOuz+PnYZA
3evI7wyD6RUCvIhs85PtP1v54WCfQIl8ECjXBSG/JY/Lc6YrewfetEU5nChn8j2c
GtJey5zd/9v5VpIfCIlyC9y2hZQPmQ9Igddm+A2/wWtA1Lx3SvNhRj2IcRa8KyFk
1WRDDNohWEsjstXyS/G2sqyLmgVp1ZIitCtz2bdqrggoquk7xxu362O0+UGXqDrP
fklFQnsJHPvpPR582DD2MbQZIRaUXkXOmqO/K6hzm45ZSHjQp2gvzjWdGzuRgUws
RctWjDhSx6ujeFQN8zQW2EXkYKRgeGtS5Pj6qDU7d7sdIZDCxQ/ThONTRwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEEawbRXgKrxhstKOphFnaF7eQMtMB8GA1UdIwQY
MBaAFPULrmCXCi38ht1gfFuRWtXFNLQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mNzFkY2ItOWU5Mi00NGU3LWIwNDIt
MzY2NTA2N2RiMjU2LzEvUVJyQnRGZUFxdkdHeTBvNm1FV2RvWHQ1QXkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9mNzFkY2ItOWU5Mi00NGU3LWIwNDItMzY2NTA2N2RiMjU2
LzEvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgonhjAN
BgkqhkiG9w0BAQsFAAOCAQEAZGQ/YJW1Jbv6k79rh5wFlICOZUezvvFScj3n27GP
LJxx6L265mDk/NE1YWer/lvHjPF9bmAL1wP+fHF+ZHJjy/6OZ7tZbQVdio2ywnCY
Q3QXL/LVysThr45+0V3bYr/3aV0qd0XQ6tWjjnk4HxfoSGdmJ2h+0CIY0j8724/P
Eh4Y+DqcaGoAAry+tTHqgoR9dlVkD/vTQmsp7VQq16tt16D9eOUIvoNhJ5yRqdw5
+VMIiHrhP7AFhYlZm47yIcSF27o+L74Fxw7Kgwe46DG08hRbC7AKNySQYx41GplT
BZW8TtzpCvozePaedYYdOkvYi+vNr2eKzyyg4PtBa1ELYg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:03 2024 by rpki-client on console-fra.rpki-client.org