Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Iz1PidvIAjQXd_ifxgtJQRpQXvA.roa
File: Iz1PidvIAjQXd_ifxgtJQRpQXvA.roa (raw, json)
Hash identifier: XEaNuj9FjB1ahejZFzu8KEujaoNobwYgxZ3K4jAXAYo=
Subject key identifier: 23:3D:4F:89:DB:C8:02:34:17:77:F8:9F:C6:0B:49:41:1A:50:5E:F0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 15158F84
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Iz1PidvIAjQXd_ifxgtJQRpQXvA.roa
Signing time: Fri 10 Jun 2022 11:13:03 +0000
ROA not before: Fri 10 Jun 2022 11:13:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204750
IP address blocks: 2a0e:97c0:3d0::/48 maxlen: 48
2a0e:97c0:3d1::/48 maxlen: 48
2a0e:97c0:3d2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353734532 (0x15158f84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 10 11:13:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=233d4f89dbc802341777f89fc60b49411a505ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:53:ef:1f:61:0f:1d:50:85:23:68:21:b7:
8a:28:c6:5e:c8:47:29:5c:d6:af:66:84:7c:76:3d:
38:41:3e:e3:29:e3:53:71:89:21:7d:d9:c0:82:42:
a7:ac:d8:1a:2e:00:de:07:34:fc:0c:45:9c:d3:25:
67:20:0c:be:e0:f9:a4:1c:8d:e7:f7:13:df:c6:46:
49:65:ef:e9:f2:17:39:a0:59:bd:fa:36:a5:b9:c9:
41:b3:ec:8b:11:44:9e:1b:81:ff:d8:22:56:aa:bd:
76:12:92:46:6f:7d:f1:35:4c:91:78:ed:a4:f9:dc:
b1:95:e6:cc:1d:27:18:d2:51:f8:e0:8d:b7:7a:1f:
49:0e:a1:e5:aa:ec:05:44:95:7d:be:40:bd:c0:b0:
07:30:b7:d7:0b:1e:32:65:a4:54:ad:f6:a4:39:79:
8d:2d:86:63:3e:21:f8:75:82:3d:ba:74:07:ac:47:
a2:42:81:32:cb:9b:b4:44:ba:ef:ba:52:5c:fb:93:
b6:b1:f4:1c:42:f1:67:d2:78:05:64:ff:84:12:25:
9f:36:06:20:b5:e2:d3:2c:e1:3e:15:ae:0f:59:7c:
45:0f:e0:a7:06:a8:00:92:e9:ec:ee:51:10:99:80:
4b:7c:95:96:e5:e9:2f:62:f8:23:a9:09:3e:bd:d6:
73:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:4F:89:DB:C8:02:34:17:77:F8:9F:C6:0B:49:41:1A:50:5E:F0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Iz1PidvIAjQXd_ifxgtJQRpQXvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3d0::-2a0e:97c0:3d2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c6:19:f6:15:d7:44:27:6a:2d:9d:f5:03:ce:fe:62:04:ca:3e:
02:a1:1b:40:5b:09:22:63:9b:88:1e:4d:d2:13:11:e8:a3:6e:
09:41:a1:d1:c1:53:86:dd:16:29:e5:09:87:54:76:7a:57:67:
86:64:8c:5b:35:c0:f6:e1:df:52:2f:0b:37:33:5e:60:d3:44:
ed:a9:0e:f5:b5:b8:d7:82:95:ad:54:1b:8d:ea:12:f1:63:10:
54:96:3c:e1:de:14:f9:da:2b:82:e7:42:84:68:fe:55:c6:dc:
51:cf:77:78:54:1a:8c:eb:7c:9d:6a:0d:50:de:c7:90:3d:5f:
57:35:fa:2f:2e:7a:0a:83:e3:9b:69:7f:2c:73:98:90:3b:c6:
b9:dd:43:32:84:e9:ef:a2:22:72:64:67:b0:7e:f6:d1:b3:8b:
38:4c:5b:93:36:2c:e2:9c:79:7b:b9:e4:99:78:d9:47:1e:15:
c3:09:f8:1c:81:bf:bb:13:81:1c:97:06:15:b8:26:6a:a2:00:
43:fd:34:19:97:9d:e9:52:25:4d:63:4b:77:ae:ce:5e:6a:9f:
53:41:61:ff:4b:dd:03:d0:a2:21:62:a1:c9:df:4e:aa:06:a6:
b5:80:5a:79:63:75:da:25:bc:d3:a2:0a:8c:d4:b9:64:73:36:
f3:ba:df:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEFRWPhDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDYx
MDExMTMwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjMzZDRmODlkYmM4
MDIzNDE3NzdmODlmYzYwYjQ5NDExYTUwNWVmMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALQOU+8fYQ8dUIUjaCG3iijGXshHKVzWr2aEfHY9OEE+4ynj
U3GJIX3ZwIJCp6zYGi4A3gc0/AxFnNMlZyAMvuD5pByN5/cT38ZGSWXv6fIXOaBZ
vfo2pbnJQbPsixFEnhuB/9giVqq9dhKSRm998TVMkXjtpPncsZXmzB0nGNJR+OCN
t3ofSQ6h5arsBUSVfb5AvcCwBzC31wseMmWkVK32pDl5jS2GYz4h+HWCPbp0B6xH
okKBMsubtES677pSXPuTtrH0HELxZ9J4BWT/hBIlnzYGILXi0yzhPhWuD1l8RQ/g
pwaoAJLp7O5REJmAS3yVluXpL2L4I6kJPr3Wc+UCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBQjPU+J28gCNBd3+J/GC0lBGlBe8DAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
L0l6MVBpZHZJQWpRWGRfaWZ4Z3RKUVJwUVh2QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAIwFDASAwcEKg6XwAPQAwcAKg6XwAPSMA0G
CSqGSIb3DQEBCwUAA4IBAQDGGfYV10Qnai2d9QPO/mIEyj4CoRtAWwkiY5uIHk3S
ExHoo24JQaHRwVOG3RYp5QmHVHZ6V2eGZIxbNcD24d9SLws3M15g00TtqQ71tbjX
gpWtVBuN6hLxYxBUljzh3hT52iuC50KEaP5VxtxRz3d4VBqM63ydag1Q3seQPV9X
NfovLnoKg+ObaX8sc5iQO8a53UMyhOnvoiJyZGewfvbRs4s4TFuTNizinHl7ueSZ
eNlHHhXDCfgcgb+7E4EclwYVuCZqogBD/TQZl53pUiVNY0t3rs5eap9TQWH/S90D
0KIhYqHJ306qBqa1gFp5Y3XaJbzTogqM1Llkczbzut+c
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:29 2024 by rpki-client on console-fra.rpki-client.org