Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6oUl1zoFo8NF_vteVPVJ3q7FthA.roa
File: 6oUl1zoFo8NF_vteVPVJ3q7FthA.roa (raw, json)
Hash identifier: CW4oYwc5vLHB4vUa3L7f3Rks5OBN6hNdkQMlb8rolFc=
Subject key identifier: EA:85:25:D7:3A:05:A3:C3:45:FE:FB:5E:54:F5:49:DE:AE:C5:B6:10
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0182C603DD8F5C2FAAFFFA999E981E531604
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6oUl1zoFo8NF_vteVPVJ3q7FthA.roa
Signing time: Mon 22 Aug 2022 14:45:18 +0000
ROA not before: Mon 22 Aug 2022 14:45:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211659
IP address blocks: 2a10:cc40:100::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c6:03:dd:8f:5c:2f:aa:ff:fa:99:9e:98:1e:53:16:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 22 14:45:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea8525d73a05a3c345fefb5e54f549deaec5b610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:aa:a5:d0:04:1e:96:35:67:00:2f:df:f6:
3e:2e:d3:06:e5:76:33:d6:5f:98:29:00:0b:4f:80:
f9:0a:1e:3c:c1:d1:6e:a5:28:aa:24:b9:03:98:7d:
06:d1:92:67:a7:54:9f:cf:32:5f:3f:44:49:f3:d4:
4b:91:75:a3:0e:2e:7c:99:db:f3:25:e4:81:3e:8b:
67:d5:12:50:3a:e9:75:ce:cc:9e:f4:94:9e:ee:70:
ba:31:9c:e0:05:bc:f8:ab:58:27:e5:fc:c6:03:fb:
ac:eb:02:8f:bb:d4:9e:d7:be:21:98:23:c5:79:51:
25:11:2a:f7:d5:f9:6f:6f:b4:5d:39:e9:2c:6f:19:
c9:22:7a:7c:ad:e2:85:dd:07:b4:f1:36:70:2c:a7:
c5:b3:92:a3:2f:f7:1b:17:16:45:fa:01:ce:f3:c3:
3e:c1:de:61:12:d9:cc:e7:dc:7e:2a:30:07:f3:40:
a7:ea:27:ac:d0:cb:bb:51:7a:d7:62:3b:12:53:b8:
84:3f:f2:9c:f5:1c:e7:e6:6c:00:31:13:c4:86:4a:
3a:1d:c5:4a:4b:f4:b6:af:5b:36:af:89:ba:f8:c6:
8c:d1:87:df:2b:90:8f:f2:c6:a0:ed:50:9a:e1:ec:
42:ae:af:96:06:7c:58:f0:03:24:91:d6:c4:1d:0b:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:85:25:D7:3A:05:A3:C3:45:FE:FB:5E:54:F5:49:DE:AE:C5:B6:10
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6oUl1zoFo8NF_vteVPVJ3q7FthA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:100::/44
Signature Algorithm: sha256WithRSAEncryption
c6:64:ef:6b:e7:79:2c:10:37:fb:e3:00:20:7e:a1:93:c0:64:
9e:7f:f1:91:8e:4c:4b:e4:da:43:75:ab:6a:03:a0:5e:0c:d8:
a2:a9:5f:b1:e0:b7:c1:09:7b:18:e5:c9:e2:88:72:f4:6b:06:
2c:41:cb:ac:dd:81:34:b4:2f:71:7f:f4:48:d0:ea:95:6d:fa:
c9:42:ef:3b:99:f6:9f:d2:bd:b0:54:6a:6f:ce:de:05:f5:d8:
b4:08:64:cc:c6:c3:8f:e1:00:8f:90:eb:7b:16:24:bc:4d:69:
ba:bb:58:02:cb:cb:74:f6:83:71:a6:b6:70:86:aa:7a:25:49:
4c:ab:e6:cc:f1:55:86:be:0e:ac:5e:c7:a4:a9:92:73:91:4f:
74:77:da:06:2b:70:45:44:56:78:c1:2b:b9:d0:78:54:af:8d:
48:34:bb:53:f5:9a:da:db:be:48:b4:03:e5:3c:7e:94:47:d3:
c2:09:bc:6e:d6:cc:09:e2:57:20:6d:59:c4:20:4a:42:2b:ba:
91:34:7d:00:6a:1c:95:9a:5e:89:7b:ee:50:70:96:24:1f:a0:
2b:1c:17:96:bf:58:73:a5:67:98:63:15:6f:c7:c7:99:a0:d1:
55:39:6e:cc:fc:e8:d8:d9:c5:5d:e6:e0:9c:59:40:99:6b:75:
e0:7d:d2:39
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYLGA92PXC+q//qZnpgeUxYEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjIwODIyMTQ0NTE4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTg1MjVkNzNhMDVhM2MzNDVmZWZiNWU1NGY1NDlkZWFlYzViNjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw6qpdAEHpY1ZwAv3/Y+LtMG5XYz
1l+YKQALT4D5Ch48wdFupSiqJLkDmH0G0ZJnp1SfzzJfP0RJ89RLkXWjDi58mdvz
JeSBPotn1RJQOul1zsye9JSe7nC6MZzgBbz4q1gn5fzGA/us6wKPu9Se174hmCPF
eVElESr31flvb7RdOeksbxnJInp8reKF3Qe08TZwLKfFs5KjL/cbFxZF+gHO88M+
wd5hEtnM59x+KjAH80Cn6ies0Mu7UXrXYjsSU7iEP/Kc9Rzn5mwAMRPEhko6HcVK
S/S2r1s2r4m6+MaM0YffK5CP8sag7VCa4exCrq+WBnxY8AMkkdbEHQs14QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOqFJdc6BaPDRf77XlT1Sd6uxbYQMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNm9VbDF6b0ZvOE5GX3Z0ZVZQVkozcTdGdGhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMQAEA
MA0GCSqGSIb3DQEBCwUAA4IBAQDGZO9r53ksEDf74wAgfqGTwGSef/GRjkxL5NpD
datqA6BeDNiiqV+x4LfBCXsY5cniiHL0awYsQcus3YE0tC9xf/RI0OqVbfrJQu87
mfaf0r2wVGpvzt4F9di0CGTMxsOP4QCPkOt7FiS8TWm6u1gCy8t09oNxprZwhqp6
JUlMq+bM8VWGvg6sXsekqZJzkU90d9oGK3BFRFZ4wSu50HhUr41INLtT9Zra275I
tAPlPH6UR9PCCbxu1swJ4lcgbVnEIEpCK7qRNH0AahyVml6Je+5QcJYkH6ArHBeW
v1hzpWeYYxVvx8eZoNFVOW7M/OjY2cVd5uCcWUCZa3XgfdI5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:23 2024 by rpki-client on console-fra.rpki-client.org