Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hllnpIHDs9LTAlc0bNrZrun3Vjk.roa
File: hllnpIHDs9LTAlc0bNrZrun3Vjk.roa (raw, json)
Hash identifier: HlwqqtH6eNMiWJCyY8U0X+p9hVxfYcTb/yZB0MzfciA=
Subject key identifier: 86:59:67:A4:81:C3:B3:D2:D3:02:57:34:6C:DA:D9:AE:E9:F7:56:39
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0184207297A8D9F6BBA22771FBE0D2AC0B08
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hllnpIHDs9LTAlc0bNrZrun3Vjk.roa
Signing time: Fri 28 Oct 2022 21:14:51 +0000
ROA not before: Fri 28 Oct 2022 21:14:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202340
IP address blocks: 2a10:cc40:212::/48 maxlen: 48
2a10:cc40:215::/48 maxlen: 48
2a10:cc40:213::/48 maxlen: 48
2a10:cc40:211::/48 maxlen: 48
2a10:cc40:214::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:20:72:97:a8:d9:f6:bb:a2:27:71:fb:e0:d2:ac:0b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 28 21:14:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=865967a481c3b3d2d30257346cdad9aee9f75639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:62:c6:d2:b8:19:af:75:bc:74:aa:74:5f:b1:
e9:f8:d4:77:f0:46:e0:e3:39:e6:67:a6:b2:d6:96:
16:50:f3:23:30:b4:54:d9:15:18:b5:bb:f9:69:38:
ca:86:33:86:b0:be:5a:35:d6:c9:d7:dd:0d:9e:43:
16:b2:26:c7:0e:a2:bd:3e:eb:59:45:e6:1a:6e:ac:
1a:5c:0d:2c:59:7b:33:19:04:bb:8c:dc:23:4a:2d:
10:4f:6b:35:35:81:60:55:6b:b2:2e:71:8b:3a:dd:
90:96:0a:84:6f:ea:99:f6:6e:a7:71:48:22:3b:55:
d4:8f:8b:1b:a9:94:46:44:7e:53:5f:e2:6b:d7:77:
ed:9d:bc:75:fb:37:ff:cb:34:46:c5:bc:c2:c9:21:
11:70:92:a7:59:5a:91:75:b6:a5:89:96:cf:bf:91:
b2:e6:a0:91:b8:8d:49:a1:4e:91:2b:05:5e:b3:74:
d1:42:5d:e4:ef:c3:20:34:b0:ed:82:53:b3:58:79:
08:19:26:0c:48:9c:41:20:18:76:42:47:e6:a9:1d:
56:78:48:73:33:f0:e1:fb:c0:86:f0:93:77:fb:a8:
6b:c4:35:5b:6e:c3:ab:b3:9d:0e:d9:3f:81:95:0b:
22:0a:18:ca:65:c9:2b:0c:7d:73:44:bd:4d:9d:b0:
67:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:59:67:A4:81:C3:B3:D2:D3:02:57:34:6C:DA:D9:AE:E9:F7:56:39
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hllnpIHDs9LTAlc0bNrZrun3Vjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:211::-2a10:cc40:215:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
87:cc:1e:4f:4a:43:61:0b:c6:17:bb:34:c9:2d:75:ff:33:83:
dd:aa:94:07:88:0e:c5:f4:95:77:da:d2:5e:48:9d:da:a1:d2:
ca:af:ad:08:9c:1e:0a:71:a7:8b:5b:07:5b:91:12:30:a7:e0:
e5:b6:6b:75:72:7f:32:76:e8:c2:f4:50:87:3b:cd:16:45:b7:
32:36:4f:63:c9:b3:94:70:34:cc:56:1a:07:30:c5:a4:05:4f:
c9:27:54:32:cf:cb:bb:ec:6e:51:13:68:1b:82:3e:1e:5f:ca:
f2:47:21:80:43:db:5e:32:8e:a2:3c:44:2d:aa:c3:19:19:a9:
66:a3:b9:b6:7d:fb:50:93:f3:cc:31:8c:5f:e8:bd:3b:96:83:
d0:0d:99:0f:a1:1c:5c:d5:d8:5e:0e:d2:b9:10:5c:34:6a:ab:
78:51:a5:33:13:e7:7e:d5:ff:dd:f8:70:a2:54:3d:c5:28:80:
96:96:52:26:e5:a8:cc:34:41:cf:f2:5f:73:fe:fa:79:15:35:
04:91:ed:cb:79:71:53:2e:04:9b:cb:f1:1b:1b:33:86:22:85:
21:33:39:af:76:20:44:84:a2:14:81:f0:f6:5b:c2:b8:ba:14:
fc:bc:57:55:2f:21:e0:d1:ec:5b:45:7e:0b:2a:9d:69:d7:d7:
7e:09:7f:8b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYQgcpeo2fa7oidx++DSrAsIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjIxMDI4MjExNDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjU5NjdhNDgxYzNiM2QyZDMwMjU3MzQ2Y2RhZDlhZWU5Zjc1NjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmLG0rgZr3W8dKp0X7Hp+NR38Ebg
4znmZ6ay1pYWUPMjMLRU2RUYtbv5aTjKhjOGsL5aNdbJ190NnkMWsibHDqK9PutZ
ReYabqwaXA0sWXszGQS7jNwjSi0QT2s1NYFgVWuyLnGLOt2QlgqEb+qZ9m6ncUgi
O1XUj4sbqZRGRH5TX+Jr13ftnbx1+zf/yzRGxbzCySERcJKnWVqRdbaliZbPv5Gy
5qCRuI1JoU6RKwVes3TRQl3k78MgNLDtglOzWHkIGSYMSJxBIBh2QkfmqR1WeEhz
M/Dh+8CG8JN3+6hrxDVbbsOrs50O2T+BlQsiChjKZckrDH1zRL1NnbBnjQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFIZZZ6SBw7PS0wJXNGza2a7p91Y5MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvaGxsbnBJSERzOUxUQWxjMGJOclpydW4zVmprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqEMxA
AhEDBwEqEMxAAhQwDQYJKoZIhvcNAQELBQADggEBAIfMHk9KQ2ELxhe7NMktdf8z
g92qlAeIDsX0lXfa0l5Indqh0sqvrQicHgpxp4tbB1uREjCn4OW2a3VyfzJ26ML0
UIc7zRZFtzI2T2PJs5RwNMxWGgcwxaQFT8knVDLPy7vsblETaBuCPh5fyvJHIYBD
214yjqI8RC2qwxkZqWajubZ9+1CT88wxjF/ovTuWg9ANmQ+hHFzV2F4O0rkQXDRq
q3hRpTMT537V/934cKJUPcUogJaWUiblqMw0Qc/yX3P++nkVNQSR7ct5cVMuBJvL
8RsbM4YihSEzOa92IESEohSB8PZbwri6FPy8V1UvIeDR7FtFfgsqnWnX134Jf4s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:36 2024 by rpki-client on console-fra.rpki-client.org