Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vOewT4eYeQxmxY5p85LAn5u-ElE.roa
File: vOewT4eYeQxmxY5p85LAn5u-ElE.roa (raw, json)
Hash identifier: lOW9AWxFuj9TFeCFi0nCFUmHkHHmLPiKMQgdcQ3C5Bc=
Subject key identifier: BC:E7:B0:4F:87:98:79:0C:66:C5:8E:69:F3:92:C0:9F:9B:BE:12:51
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 10DDE680
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vOewT4eYeQxmxY5p85LAn5u-ElE.roa
Signing time: Sat 01 Jan 2022 09:05:44 +0000
ROA not before: Sat 01 Jan 2022 09:05:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212270
IP address blocks: 2a0e:b107:f50::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282977920 (0x10dde680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 1 09:05:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bce7b04f8798790c66c58e69f392c09f9bbe1251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:d2:c1:6d:3d:06:dd:d5:e9:93:66:3e:cc:
9e:c3:6d:07:47:85:11:1f:e3:33:11:5b:34:9f:c8:
58:32:e6:69:9c:5a:a6:a6:a6:14:34:e2:55:73:f1:
19:f2:4f:cd:63:72:4a:0a:3b:d0:f0:4e:83:7e:d3:
d4:bf:99:0b:04:1b:8b:ca:24:67:44:da:d0:bd:e3:
27:c6:33:fa:97:3d:79:ae:1e:1a:8f:5f:bb:f8:e7:
0c:79:44:63:36:9a:dc:19:66:66:ec:af:e9:01:67:
99:3f:a4:67:76:5c:df:67:21:92:75:d3:a2:a6:7b:
f8:9b:e6:9a:16:b3:4f:98:c1:e2:f9:09:c0:c7:45:
ac:b2:b4:fa:33:31:ca:73:e5:18:08:7f:6c:c6:46:
40:43:c6:71:94:09:40:8c:f4:41:b6:93:42:10:fb:
ac:2f:e4:84:b8:8d:b6:82:9c:dc:50:07:90:76:23:
25:52:c8:a0:3a:e8:cf:69:57:71:ef:c7:29:85:00:
d5:fd:2c:59:e1:4b:09:de:31:9b:38:d7:02:d2:e6:
d1:db:cd:de:eb:34:a2:42:ee:85:56:a6:73:23:fe:
23:16:9f:b2:90:0b:43:e9:b3:ef:94:99:f6:c2:18:
71:01:a8:d1:2a:68:e7:47:7a:40:71:80:a6:6d:31:
94:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E7:B0:4F:87:98:79:0C:66:C5:8E:69:F3:92:C0:9F:9B:BE:12:51
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vOewT4eYeQxmxY5p85LAn5u-ElE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:f50::/44
Signature Algorithm: sha256WithRSAEncryption
cc:7e:d8:2a:cb:ba:c6:9a:5f:71:55:02:e4:31:73:20:c2:a2:
ea:36:be:6d:d5:d7:5f:50:3c:28:76:d8:d6:b7:2c:52:7e:83:
34:2c:d4:13:aa:17:24:c2:43:53:a1:59:78:1d:15:ba:92:db:
c8:4b:68:96:11:c2:ce:8c:7b:fc:f7:9a:3e:1a:81:0e:8a:ec:
86:89:31:a1:f7:22:30:74:88:43:2b:be:ae:95:f8:aa:14:97:
ba:d7:a3:e7:21:7e:3d:ac:84:39:e1:cb:f5:d6:f0:88:07:be:
58:4a:a3:7b:dd:f7:c6:56:62:ac:39:ed:f5:36:ec:0e:6f:3b:
c5:f0:f4:d6:4c:ef:4e:cc:1c:c6:21:50:b0:8e:2b:89:d9:ca:
ea:89:67:43:e7:45:c9:1b:b4:be:4b:c9:44:65:ca:6c:a7:8d:
3b:3c:a6:28:42:6c:11:12:b8:db:53:21:4c:4f:37:44:e4:d7:
ae:03:dd:d5:03:09:65:02:d5:f8:cf:02:48:73:90:bb:25:d6:
74:6b:58:5f:5a:11:ec:ef:c8:ab:80:e4:4c:f1:20:c6:a9:47:
1d:d5:62:bb:4e:5b:fc:27:24:ff:ce:9d:96:5f:26:5e:85:bf:
eb:8f:76:d5:c2:21:52:ce:24:d2:b0:ac:1b:e1:53:56:f7:54:
f6:ec:c7:62
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEEN3mgDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDEw
MTA5MDU0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmNlN2IwNGY4Nzk4
NzkwYzY2YzU4ZTY5ZjM5MmMwOWY5YmJlMTI1MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKmw0sFtPQbd1emTZj7MnsNtB0eFER/jMxFbNJ/IWDLmaZxa
pqamFDTiVXPxGfJPzWNySgo70PBOg37T1L+ZCwQbi8okZ0Ta0L3jJ8Yz+pc9ea4e
Go9fu/jnDHlEYzaa3BlmZuyv6QFnmT+kZ3Zc32chknXToqZ7+JvmmhazT5jB4vkJ
wMdFrLK0+jMxynPlGAh/bMZGQEPGcZQJQIz0QbaTQhD7rC/khLiNtoKc3FAHkHYj
JVLIoDroz2lXce/HKYUA1f0sWeFLCd4xmzjXAtLm0dvN3us0okLuhVamcyP+Ixaf
spALQ+mz75SZ9sIYcQGo0Spo50d6QHGApm0xlNsCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBS857BPh5h5DGbFjmnzksCfm74SUTAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
L3ZPZXdUNGVZZVF4bXhZNXA4NUxBbjV1LUVsRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoOsQcPUDANBgkqhkiG9w0BAQsF
AAOCAQEAzH7YKsu6xppfcVUC5DFzIMKi6ja+bdXXX1A8KHbY1rcsUn6DNCzUE6oX
JMJDU6FZeB0VupLbyEtolhHCzox7/PeaPhqBDorshokxofciMHSIQyu+rpX4qhSX
utej5yF+PayEOeHL9dbwiAe+WEqje933xlZirDnt9TbsDm87xfD01kzvTswcxiFQ
sI4ridnK6olnQ+dFyRu0vkvJRGXKbKeNOzymKEJsERK421MhTE83ROTXrgPd1QMJ
ZQLV+M8CSHOQuyXWdGtYX1oR7O/Iq4DkTPEgxqlHHdViu05b/Cck/86dll8mXoW/
64921cIhUs4k0rCsG+FTVvdU9uzHYg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:39 2024 by rpki-client on console-fra.rpki-client.org