Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Q0GHEdGvizZpzsl_DkHWB2D5yuc.roa
File: Q0GHEdGvizZpzsl_DkHWB2D5yuc.roa (raw, json)
Hash identifier: +BKUgR7SHxKiwYM7APGVvBEQSRPqY9zoIaYdHG5mvUg=
Subject key identifier: 43:41:87:11:D1:AF:8B:36:69:CE:C9:7F:0E:41:D6:07:60:F9:CA:E7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 11A61E30
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Q0GHEdGvizZpzsl_DkHWB2D5yuc.roa
Signing time: Sun 30 Jan 2022 19:28:51 +0000
ROA not before: Sun 30 Jan 2022 19:28:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59922
IP address blocks: 2a10:cc44:112::/48 maxlen: 48
2a10:cc44:110::/48 maxlen: 48
2a0e:b107:13de::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296099376 (0x11a61e30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 30 19:28:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43418711d1af8b3669cec97f0e41d60760f9cae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:b5:4e:b1:d5:08:92:e1:28:57:86:0f:2d:
76:98:ec:e2:94:23:24:2e:c6:01:8b:3c:06:be:59:
25:83:03:9b:06:63:4c:3b:31:dd:d6:91:2c:3b:87:
c7:2a:c2:4d:d3:44:44:7c:d7:e4:16:8e:a2:f3:cd:
91:4d:65:70:37:46:00:d1:0e:bf:1a:00:23:67:c0:
e4:2a:8e:23:b8:66:f6:ce:fe:29:93:45:81:9d:19:
1b:d2:96:51:77:c7:68:bc:2d:ad:08:ab:12:8c:86:
4f:a0:cd:42:0b:5c:76:48:6d:60:53:03:b3:3c:0b:
cf:72:b9:07:6b:6d:88:dc:d2:aa:36:4f:d5:c8:53:
0a:82:47:91:7e:ca:15:1d:5b:52:69:e6:5e:90:c0:
64:b5:90:dd:a9:e0:ea:91:c1:32:23:87:b8:38:99:
36:7e:f1:9e:b1:56:e0:97:ba:b5:b7:e1:4a:ec:4e:
37:14:35:76:58:83:af:d3:80:75:0b:77:99:ee:af:
df:8a:44:a3:f4:2e:9b:07:ac:d1:05:67:d1:dc:30:
9a:57:3f:20:c0:39:0f:cc:13:c5:a6:e2:03:e9:c4:
f5:4a:c2:35:b2:01:46:b9:78:b3:5c:51:e7:6e:89:
e0:b9:a0:ac:d5:ea:2c:9b:e7:06:e6:bb:c5:54:0c:
b5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:41:87:11:D1:AF:8B:36:69:CE:C9:7F:0E:41:D6:07:60:F9:CA:E7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Q0GHEdGvizZpzsl_DkHWB2D5yuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:13de::/48
2a10:cc44:110::/48
2a10:cc44:112::/48
Signature Algorithm: sha256WithRSAEncryption
53:5f:88:ab:9b:a4:a5:1f:12:d5:1c:1f:72:e5:b6:9a:00:02:
c2:0d:32:d1:72:e0:65:fb:03:b4:b9:29:7a:e6:44:62:1a:87:
a0:1c:53:2f:ad:cf:91:b1:bf:6d:6a:51:f0:f1:43:25:62:ec:
ae:2b:a5:76:6e:5b:99:00:d7:e3:4a:39:31:ba:6f:c7:d3:aa:
98:dd:fb:59:5a:4b:06:69:5b:6a:24:b6:22:b7:56:8f:21:c4:
4b:89:a1:88:62:14:a6:37:fb:74:b3:3e:5d:26:ff:d0:d0:59:
39:03:11:e5:2a:b4:6e:2c:7c:ed:21:de:59:36:13:58:80:1d:
23:3e:82:bd:2e:c5:0b:74:fd:72:c7:e1:fd:34:cb:f4:5c:c5:
c8:56:b0:12:6c:c4:ee:3b:d6:e3:9d:39:5e:a1:cd:25:af:17:
e7:41:10:c8:bf:9b:a7:7c:2e:a0:d0:07:a1:a2:f1:9b:6e:a2:
e1:8b:4e:cd:49:05:bf:94:6d:d0:9b:61:e5:26:16:96:82:e2:
5c:e0:43:3e:47:7a:92:ec:1d:fb:ee:12:04:62:e3:3f:76:41:
8c:75:c2:f7:04:32:2e:e5:da:4b:1f:97:00:e0:7a:96:79:ff:
29:8e:e1:7d:5c:5c:00:4c:bd:e8:72:bb:61:93:95:fd:bc:8a:
23:1d:93:a0
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEEaYeMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDEz
MDE5Mjg1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDM0MTg3MTFkMWFm
OGIzNjY5Y2VjOTdmMGU0MWQ2MDc2MGY5Y2FlNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMB/tU6x1QiS4ShXhg8tdpjs4pQjJC7GAYs8Br5ZJYMDmwZj
TDsx3daRLDuHxyrCTdNERHzX5BaOovPNkU1lcDdGANEOvxoAI2fA5CqOI7hm9s7+
KZNFgZ0ZG9KWUXfHaLwtrQirEoyGT6DNQgtcdkhtYFMDszwLz3K5B2ttiNzSqjZP
1chTCoJHkX7KFR1bUmnmXpDAZLWQ3ang6pHBMiOHuDiZNn7xnrFW4Je6tbfhSuxO
NxQ1dliDr9OAdQt3me6v34pEo/Qumwes0QVn0dwwmlc/IMA5D8wTxabiA+nE9UrC
NbIBRrl4s1xR526J4LmgrNXqLJvnBua7xVQMtb8CAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBRDQYcR0a+LNmnOyX8OQdYHYPnK5zAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
L1EwR0hFZEd2aXpacHpzbF9Ea0hXQjJENXl1Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwIQQCAAIwGwMHACoOsQcT3gMHACoQzEQBEAMHACoQ
zEQBEjANBgkqhkiG9w0BAQsFAAOCAQEAU1+Iq5ukpR8S1RwfcuW2mgACwg0y0XLg
ZfsDtLkpeuZEYhqHoBxTL63PkbG/bWpR8PFDJWLsriuldm5bmQDX40o5Mbpvx9Oq
mN37WVpLBmlbaiS2IrdWjyHES4mhiGIUpjf7dLM+XSb/0NBZOQMR5Sq0bix87SHe
WTYTWIAdIz6CvS7FC3T9csfh/TTL9FzFyFawEmzE7jvW4505XqHNJa8X50EQyL+b
p3wuoNAHoaLxm26i4YtOzUkFv5Rt0Jth5SYWloLiXOBDPkd6kuwd++4SBGLjP3ZB
jHXC9wQyLuXaSx+XAOB6lnn/KY7hfVxcAEy96HK7YZOV/byKIx2ToA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:31 2024 by rpki-client on console-fra.rpki-client.org