Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/lEdw3901-SABnVgy0EBlIvCDDWo.roa
File: lEdw3901-SABnVgy0EBlIvCDDWo.roa (raw, json)
Hash identifier: sije6QgPvZnPFLU22DBXSpYKbMi3IrHZqKRCi7LexOo=
Subject key identifier: 94:47:70:DF:DD:35:F9:20:01:9D:58:32:D0:40:65:22:F0:83:0D:6A
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 011ECB06
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/lEdw3901-SABnVgy0EBlIvCDDWo.roa
Signing time: Sat 01 Jan 2022 01:59:42 +0000
ROA not before: Sat 01 Jan 2022 01:59:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210887
IP address blocks: 2001:67c:864::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18795270 (0x11ecb06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Jan 1 01:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=944770dfdd35f920019d5832d0406522f0830d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:43:9e:66:1a:6a:82:ec:8e:c9:93:22:88:0c:
4a:9e:1a:98:41:f2:d0:b3:e2:e2:a1:4f:27:04:2a:
60:49:47:69:8a:24:8d:13:75:ce:c4:c8:5e:e2:0b:
89:77:8c:20:8d:32:3d:7c:4b:92:46:53:87:d8:1b:
0c:5b:27:52:f9:84:64:9e:ff:79:3f:b3:b4:10:32:
07:44:55:20:f9:a2:3a:88:d1:7d:33:d3:cf:c5:89:
d1:ff:e5:e4:fd:dc:01:82:b0:f3:42:e1:75:dc:00:
cb:db:3c:10:0f:d5:63:ec:9a:23:86:4f:62:fb:36:
8f:d9:79:a3:e4:53:93:0b:17:93:59:27:1f:b8:43:
cd:51:f1:8a:fc:93:83:fb:30:f3:20:a2:58:f2:74:
31:56:95:58:33:87:26:de:1d:ac:8c:be:67:5b:3c:
49:2f:92:1e:49:cb:2a:2d:19:bb:d5:7d:c5:28:87:
e3:45:e0:26:33:8d:59:c5:08:1c:7e:e2:8a:7f:fd:
23:2b:b7:13:59:a1:a6:99:c1:04:1c:e4:30:e2:d6:
09:0b:77:7a:ed:c0:a2:9f:cb:3f:9f:6f:67:9b:96:
62:f9:a0:f6:61:f1:a0:79:99:3e:24:96:16:03:3c:
5e:7c:5c:d7:d9:68:00:19:78:d7:81:7d:17:01:9c:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:47:70:DF:DD:35:F9:20:01:9D:58:32:D0:40:65:22:F0:83:0D:6A
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/lEdw3901-SABnVgy0EBlIvCDDWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:864::/48
Signature Algorithm: sha256WithRSAEncryption
7e:23:88:c8:37:65:f7:d4:84:7a:61:36:1f:af:be:cc:86:1b:
f7:65:c6:f4:91:c8:0a:93:80:43:98:0e:ed:86:dd:c2:53:70:
8f:f1:09:ad:3e:d6:ec:61:ad:57:e4:10:ec:0e:ef:aa:85:48:
4f:c0:ca:31:8e:60:f8:4e:0c:05:5f:ba:f4:eb:90:e7:3b:0a:
1a:22:16:70:27:51:52:e7:d0:15:74:1c:8b:82:c2:69:82:a5:
d5:90:2b:fc:be:15:15:f8:b9:38:44:5b:d7:9f:2f:1f:de:70:
50:f8:34:37:f3:ff:fd:c5:fa:33:d9:cc:4c:8c:8c:44:d6:40:
09:d1:26:12:d7:fe:ef:72:a9:0a:00:51:4d:f1:f5:e3:04:86:
f7:85:a9:3c:dc:32:d3:d8:ee:7a:fa:05:12:f4:da:9b:18:c7:
24:e0:b7:29:96:06:5a:dc:d0:19:56:cf:18:68:e9:40:84:3d:
e1:dd:a1:34:1a:77:e3:30:32:d5:c0:3b:07:1c:88:25:fa:84:
50:d1:07:96:73:25:9b:75:f9:bf:58:28:06:ed:7a:3a:42:63:
be:15:5b:ed:cb:4e:d3:90:d1:c6:ce:5d:20:df:59:81:17:a3:
58:1e:c5:ae:6c:05:e8:05:df:4c:ae:dd:7c:7a:d9:0c:72:79:
48:0c:65:8f
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEAR7LBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MWZmNjI1ZjRhMThkMDRkNTkwYTViOWQ3M2IyNTUxYTQzNWI3MTcyMB4XDTIyMDEw
MTAxNTk0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTQ0NzcwZGZkZDM1
ZjkyMDAxOWQ1ODMyZDA0MDY1MjJmMDgzMGQ2YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOdDnmYaaoLsjsmTIogMSp4amEHy0LPi4qFPJwQqYElHaYok
jRN1zsTIXuILiXeMII0yPXxLkkZTh9gbDFsnUvmEZJ7/eT+ztBAyB0RVIPmiOojR
fTPTz8WJ0f/l5P3cAYKw80LhddwAy9s8EA/VY+yaI4ZPYvs2j9l5o+RTkwsXk1kn
H7hDzVHxivyTg/sw8yCiWPJ0MVaVWDOHJt4drIy+Z1s8SS+SHknLKi0Zu9V9xSiH
40XgJjONWcUIHH7iin/9Iyu3E1mhppnBBBzkMOLWCQt3eu3Aop/LP59vZ5uWYvmg
9mHxoHmZPiSWFgM8Xnxc19loABl414F9FwGcNzMCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSUR3Df3TX5IAGdWDLQQGUi8IMNajAfBgNVHSMEGDAWgBTh/2JfShjQTVkK
W51zslUaQ1txcjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRmOWlYMG9ZMEUxWkNsdWRjN0pWR2tOYmNYSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvOGY5MGE1LWM4NzgtNGRkNC1iMmRiLTRlNTg2MTE4N2M0Zi8x
L2xFZHczOTAxLVNBQm5WZ3kwRUJsSXZDRERXby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
OGY5MGE1LWM4NzgtNGRkNC1iMmRiLTRlNTg2MTE4N2M0Zi8xLzRmOWlYMG9ZMEUx
WkNsdWRjN0pWR2tOYmNYSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwIZDANBgkqhkiG9w0BAQsF
AAOCAQEAfiOIyDdl99SEemE2H6++zIYb92XG9JHICpOAQ5gO7YbdwlNwj/EJrT7W
7GGtV+QQ7A7vqoVIT8DKMY5g+E4MBV+69OuQ5zsKGiIWcCdRUufQFXQci4LCaYKl
1ZAr/L4VFfi5OERb158vH95wUPg0N/P//cX6M9nMTIyMRNZACdEmEtf+73KpCgBR
TfH14wSG94WpPNwy09juevoFEvTamxjHJOC3KZYGWtzQGVbPGGjpQIQ94d2hNBp3
4zAy1cA7BxyIJfqEUNEHlnMlm3X5v1goBu16OkJjvhVb7ctO05DRxs5dIN9ZgRej
WB7FrmwF6AXfTK7dfHrZDHJ5SAxljw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:43 2025 by rpki-client