Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/nU2_fTQvii7V-Z6-uoi0iGxwAmA.roa
File: nU2_fTQvii7V-Z6-uoi0iGxwAmA.roa (raw, json)
Hash identifier: cCc9E2PTZ/Ce6UFHh7rDAdIW6M/hM8naBvR4tU3lgj8=
Subject key identifier: 9D:4D:BF:7D:34:2F:8A:2E:D5:F9:9E:BE:BA:88:B4:88:6C:70:02:60
Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial: 0F244FD7
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/nU2_fTQvii7V-Z6-uoi0iGxwAmA.roa
Signing time: Sat 01 Jan 2022 12:57:32 +0000
ROA not before: Sat 01 Jan 2022 12:57:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21449
IP address blocks: 2a07:2911::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254037975 (0xf244fd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Validity
Not Before: Jan 1 12:57:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d4dbf7d342f8a2ed5f99ebeba88b4886c700260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bb:fd:0d:48:4c:f1:4f:db:77:2b:6d:23:f5:
36:5e:ff:66:d7:10:23:d9:77:fc:cf:8e:ba:d1:71:
4b:44:3f:59:0e:02:4b:2a:38:93:58:6c:cc:14:bf:
3f:91:19:97:54:f4:79:06:6c:d3:d7:50:d9:38:fa:
40:f7:ea:a6:a2:d4:52:0c:63:ac:29:71:a8:bb:6b:
ff:5e:04:02:37:72:55:fc:a1:98:31:f1:15:a3:f9:
9d:63:c9:b9:ba:91:5a:a2:b4:e7:7e:29:22:d2:a6:
33:66:31:c2:25:6a:6a:b9:5f:6e:a5:a4:d6:40:64:
03:d6:00:28:d5:46:18:8b:e1:95:28:45:94:92:71:
bc:c0:d4:2a:88:17:e1:bc:5c:31:32:28:cd:e6:11:
73:43:77:1a:30:2d:ad:f0:06:7b:6e:65:6d:cb:ab:
c0:5b:53:7a:dc:9a:96:35:49:b9:53:ac:3c:7e:5b:
0d:0c:5b:52:30:a6:b9:d7:16:75:cd:f3:12:18:09:
02:84:1f:ac:bc:32:a7:1e:83:81:ef:37:14:20:38:
e7:5f:25:f8:aa:94:fb:62:07:94:c5:71:b1:44:c2:
d3:a6:4b:be:10:5e:47:dc:cf:1d:6c:23:3a:f1:56:
9e:6f:ca:fa:4e:91:ac:83:35:75:8c:7b:a9:73:a6:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4D:BF:7D:34:2F:8A:2E:D5:F9:9E:BE:BA:88:B4:88:6C:70:02:60
X509v3 Authority Key Identifier:
keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/nU2_fTQvii7V-Z6-uoi0iGxwAmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2911::/32
Signature Algorithm: sha256WithRSAEncryption
40:83:28:4f:0c:48:f6:39:3e:4c:d5:f2:48:87:0b:30:47:87:
56:05:57:9e:fa:6c:40:34:ac:c6:ab:78:33:72:7d:09:b8:49:
72:9c:dd:41:6e:f2:25:2c:72:46:29:9a:de:9e:3c:ae:79:a4:
19:a1:29:04:d9:ff:1a:48:8a:d7:9b:60:e0:d0:44:1a:39:c6:
e5:cf:57:1b:76:dc:9e:ae:ca:fd:db:d0:5a:e4:c7:54:0b:61:
a6:fa:a8:17:93:b3:50:45:c1:78:33:7f:e5:b0:e5:66:b4:01:
7b:dc:c8:71:69:49:fe:7a:ee:3c:92:1f:a0:76:24:6c:1b:a9:
8b:c0:bc:32:d9:ac:c5:96:07:6b:80:ac:a4:da:39:48:9d:32:
ee:ff:f2:9a:96:f7:ac:29:b2:9a:78:69:17:4a:61:c1:44:ca:
30:6c:88:cf:43:21:54:19:f1:55:41:67:19:9e:50:7e:e7:9e:
f1:9e:0d:5e:9e:2d:64:b0:42:f7:68:4b:89:d0:2c:34:60:60:
c8:58:49:95:b6:44:ef:4a:a1:94:93:24:f7:d9:a8:49:85:ce:
e3:ab:d1:51:16:54:13:3f:8a:3b:b5:16:26:31:44:ae:43:94:
df:29:b0:e7:42:3d:16:64:6f:39:76:d5:75:8e:94:e5:bd:97:
40:00:4b:75
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEDyRP1zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDVjNjgzY2IxZWI5YzBmNDliOTY3ZTNiZDliOGI4NGNmMDk5YmI4MB4XDTIyMDEw
MTEyNTczMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWQ0ZGJmN2QzNDJm
OGEyZWQ1Zjk5ZWJlYmE4OGI0ODg2YzcwMDI2MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIa7/Q1ITPFP23crbSP1Nl7/ZtcQI9l3/M+OutFxS0Q/WQ4C
Syo4k1hszBS/P5EZl1T0eQZs09dQ2Tj6QPfqpqLUUgxjrClxqLtr/14EAjdyVfyh
mDHxFaP5nWPJubqRWqK0534pItKmM2YxwiVqarlfbqWk1kBkA9YAKNVGGIvhlShF
lJJxvMDUKogX4bxcMTIozeYRc0N3GjAtrfAGe25lbcurwFtTetyaljVJuVOsPH5b
DQxbUjCmudcWdc3zEhgJAoQfrLwypx6Dge83FCA4518l+KqU+2IHlMVxsUTC06ZL
vhBeR9zPHWwjOvFWnm/K+k6RrIM1dYx7qXOmyF8CAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBSdTb99NC+KLtX5nr66iLSIbHACYDAfBgNVHSMEGDAWgBTEXGg8seucD0m5
Z+O9m4uEzwmbuDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hGeG9QTEhybkE5SnVXZmp2WnVMaE04Sm03Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjAvNDM5YTEwLTYwYzQtNGMyOC05MWJmLTg4ZDJkZjEwZDE1Yi8x
L25VMl9mVFF2aWk3Vi1aNi11b2kwaUd4d0FtQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAv
NDM5YTEwLTYwYzQtNGMyOC05MWJmLTg4ZDJkZjEwZDE1Yi8xL3hGeG9QTEhybkE5
SnVXZmp2WnVMaE04Sm03Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoHKREwDQYJKoZIhvcNAQELBQAD
ggEBAECDKE8MSPY5PkzV8kiHCzBHh1YFV576bEA0rMareDNyfQm4SXKc3UFu8iUs
ckYpmt6ePK55pBmhKQTZ/xpIitebYODQRBo5xuXPVxt23J6uyv3b0Frkx1QLYab6
qBeTs1BFwXgzf+Ww5Wa0AXvcyHFpSf567jySH6B2JGwbqYvAvDLZrMWWB2uArKTa
OUidMu7/8pqW96wpspp4aRdKYcFEyjBsiM9DIVQZ8VVBZxmeUH7nnvGeDV6eLWSw
QvdoS4nQLDRgYMhYSZW2RO9KoZSTJPfZqEmFzuOr0VEWVBM/iju1FiYxRK5DlN8p
sOdCPRZkbzl21XWOlOW9l0AAS3U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:16 2024 by rpki-client on console-fra.rpki-client.org