Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rd_dnRupgbaOngC2VBNCrzh9b2c.roa
File: rd_dnRupgbaOngC2VBNCrzh9b2c.roa (raw, json)
Hash identifier: vincGoLikbq9IkF/Zqo+0RS10HNRrQIQ4NyLyyVYXZQ=
Subject key identifier: AD:DF:DD:9D:1B:A9:81:B6:8E:9E:00:B6:54:13:42:AF:38:7D:6F:67
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 1098A16B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rd_dnRupgbaOngC2VBNCrzh9b2c.roa
Signing time: Sat 01 Jan 2022 09:05:05 +0000
ROA not before: Sat 01 Jan 2022 09:05:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207466
IP address blocks: 2a0e:b107:f60::/48 maxlen: 48
2a0e:b107:f68::/48 maxlen: 48
2a0e:b107:f60::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278438251 (0x1098a16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 1 09:05:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=addfdd9d1ba981b68e9e00b6541342af387d6f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5e:c9:e1:a0:44:7b:1b:69:ce:b0:0b:fd:b0:
90:32:50:47:bc:b1:f3:c5:b8:ed:f1:fd:44:61:58:
ac:5c:8a:cb:32:a2:80:2c:40:76:7e:b2:80:09:6a:
4f:51:d3:86:87:29:fd:a9:72:7b:07:2b:39:ad:9d:
8d:fb:06:20:e7:c1:91:68:ae:47:37:cd:2e:c7:d6:
79:5e:a3:c3:5b:e1:dc:73:fc:0c:3e:ff:d7:9b:83:
ad:26:7f:6c:69:44:31:2d:ed:01:84:5c:4e:4b:27:
74:bf:42:ac:ff:05:63:79:49:af:b9:fb:72:3e:bd:
71:08:10:2a:55:d7:ad:02:89:44:f9:5d:09:4f:54:
2d:f1:bf:5e:2f:7c:f9:c6:63:f4:44:28:38:39:d6:
d6:b3:ad:4d:95:d8:33:6d:8a:d6:49:37:2f:8b:96:
1a:47:6d:58:f7:f4:a4:4e:03:1d:ae:84:69:2d:c4:
31:c4:ac:24:95:67:72:3f:58:f1:20:3a:7e:1d:64:
1b:f1:39:16:98:66:1c:d9:c5:44:24:30:ad:a2:37:
e9:97:7b:d6:48:9f:41:a0:80:d9:79:44:4b:6e:e1:
f0:b0:f2:11:bd:80:02:b2:d8:01:bd:92:cf:06:28:
1e:0a:99:d2:3f:58:31:18:17:58:65:da:8f:e8:c3:
32:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DF:DD:9D:1B:A9:81:B6:8E:9E:00:B6:54:13:42:AF:38:7D:6F:67
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rd_dnRupgbaOngC2VBNCrzh9b2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:f60::/44
Signature Algorithm: sha256WithRSAEncryption
90:8b:55:58:46:ce:69:38:8d:13:cb:73:9b:a9:29:ec:dc:fd:
44:f7:fe:c4:7c:26:c2:bb:1d:8d:84:02:b5:f6:25:ba:1f:6b:
c8:79:16:ca:17:04:ea:96:b7:e9:33:31:d8:2d:6e:fd:f8:b0:
53:bf:43:5a:65:43:5a:79:e6:2a:6e:1d:65:23:b3:1c:61:48:
c9:33:41:11:ef:e0:6d:d8:ab:b9:cb:82:99:74:10:8d:2b:4a:
97:7f:fb:3d:18:8e:4a:ff:c8:7a:89:9e:a8:84:11:eb:59:ba:
6c:38:bb:9b:af:2d:e6:6e:1c:ab:54:88:3f:d4:76:31:dd:fb:
15:5d:f7:17:56:97:5a:0c:68:63:03:3f:4d:9a:c6:4d:f3:75:
45:01:3a:29:d7:48:11:d3:ad:cc:df:4c:0a:c9:5f:c1:6b:df:
90:d1:ab:9f:a8:f2:c6:39:a9:c4:43:3b:ed:56:bb:ad:b9:8d:
33:6b:e3:93:bc:0a:60:90:17:ed:88:a6:7b:39:19:c2:d0:db:
e0:4a:a8:de:5b:5a:48:86:6c:f3:55:49:5f:0e:61:44:4e:18:
24:c0:81:3e:4f:55:f9:f5:4a:86:63:61:51:7c:77:b4:c0:63:
b3:09:bf:a1:e6:9a:37:e9:03:3f:e8:21:5e:3e:94:7a:e3:4b:
4b:a6:1f:e3
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEEJihazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDEw
MTA5MDUwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWRkZmRkOWQxYmE5
ODFiNjhlOWUwMGI2NTQxMzQyYWYzODdkNmY2NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANpeyeGgRHsbac6wC/2wkDJQR7yx88W47fH9RGFYrFyKyzKi
gCxAdn6ygAlqT1HThocp/alyewcrOa2djfsGIOfBkWiuRzfNLsfWeV6jw1vh3HP8
DD7/15uDrSZ/bGlEMS3tAYRcTksndL9CrP8FY3lJr7n7cj69cQgQKlXXrQKJRPld
CU9ULfG/Xi98+cZj9EQoODnW1rOtTZXYM22K1kk3L4uWGkdtWPf0pE4DHa6EaS3E
McSsJJVncj9Y8SA6fh1kG/E5FphmHNnFRCQwraI36Zd71kifQaCA2XlES27h8LDy
Eb2AArLYAb2SzwYoHgqZ0j9YMRgXWGXaj+jDMjcCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSt392dG6mBto6eALZUE0KvOH1vZzAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
L3JkX2RuUnVwZ2JhT25nQzJWQk5DcnpoOWIyYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoOsQcPYDANBgkqhkiG9w0BAQsF
AAOCAQEAkItVWEbOaTiNE8tzm6kp7Nz9RPf+xHwmwrsdjYQCtfYluh9ryHkWyhcE
6pa36TMx2C1u/fiwU79DWmVDWnnmKm4dZSOzHGFIyTNBEe/gbdirucuCmXQQjStK
l3/7PRiOSv/IeomeqIQR61m6bDi7m68t5m4cq1SIP9R2Md37FV33F1aXWgxoYwM/
TZrGTfN1RQE6KddIEdOtzN9MCslfwWvfkNGrn6jyxjmpxEM77Va7rbmNM2vjk7wK
YJAX7YimezkZwtDb4Eqo3ltaSIZs81VJXw5hRE4YJMCBPk9V+fVKhmNhUXx3tMBj
swm/oeaaN+kDP+ghXj6UeuNLS6Yf4w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:38 2024 by rpki-client on console-fra.rpki-client.org