Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/pwfEkl3ceWFc5A0M1bKay5kH0Fw.roa
File: pwfEkl3ceWFc5A0M1bKay5kH0Fw.roa (raw, json)
Hash identifier: ayULX6UuZRa4iktA6+w4HbG8C4c5+a79gBtvHlg3fYA=
Subject key identifier: A7:07:C4:92:5D:DC:79:61:5C:E4:0D:0C:D5:B2:9A:CB:99:07:D0:5C
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 01853FDD8A8AFC6F42DE6ED4ED8042D8911C
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/pwfEkl3ceWFc5A0M1bKay5kH0Fw.roa
Signing time: Fri 23 Dec 2022 16:42:41 +0000
ROA not before: Fri 23 Dec 2022 16:42:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 2a0a:f585::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3f:dd:8a:8a:fc:6f:42:de:6e:d4:ed:80:42:d8:91:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Dec 23 16:42:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a707c4925ddc79615ce40d0cd5b29acb9907d05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:e6:07:c7:61:b2:98:65:2c:19:0e:e4:4a:
e9:ba:a0:d3:bb:4a:97:08:43:87:69:b8:82:67:86:
4e:b5:35:ee:93:05:22:fb:dc:2a:fd:b9:2c:65:cf:
70:57:35:c8:cb:1a:e1:f9:f2:05:7b:87:80:46:9b:
26:25:68:12:e3:5b:52:b3:61:81:32:72:c7:4c:73:
7d:d5:94:35:27:c6:d6:7b:17:5e:16:7d:41:83:74:
a2:ed:cb:ce:e6:f4:88:94:2d:2b:c9:10:91:95:b4:
f7:11:9d:0d:98:00:09:24:af:4b:08:50:82:c6:fd:
23:d6:ad:10:14:2a:b3:fa:3e:e0:fe:e9:45:fc:5d:
85:e6:47:6e:41:70:f3:eb:65:90:75:12:40:0d:9e:
c8:97:10:7f:52:05:1f:f5:b6:88:70:15:50:52:e7:
0f:7b:46:b8:b0:fa:1d:e1:6e:bc:f6:a5:78:76:e4:
47:41:2e:a7:c1:39:f4:c7:70:24:67:0c:cd:c3:fd:
78:3c:a5:96:13:4b:d4:b9:08:95:6a:ee:8b:13:c9:
89:57:fa:d7:c4:35:8c:fa:0e:2b:5d:f1:97:d7:5a:
02:65:8d:71:86:67:40:00:24:72:af:65:71:99:6a:
8d:f8:d2:b1:74:95:c8:58:2c:96:c3:34:fa:42:71:
a1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:07:C4:92:5D:DC:79:61:5C:E4:0D:0C:D5:B2:9A:CB:99:07:D0:5C
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/pwfEkl3ceWFc5A0M1bKay5kH0Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:f585::/32
Signature Algorithm: sha256WithRSAEncryption
9f:65:bf:3f:ef:29:18:c7:bd:cf:c9:54:54:9a:7f:d9:6d:c2:
35:32:51:b6:42:11:ae:bf:59:0b:0a:5e:7f:cf:27:69:02:33:
8b:b6:1e:fa:0a:22:13:0c:b4:90:d1:1b:95:c1:06:95:71:6b:
a5:c8:97:a2:11:d9:83:f0:b4:6f:bb:c8:84:73:cd:63:3c:b0:
1a:e9:d1:42:18:ba:65:35:a0:b6:19:f0:1a:06:de:4e:2c:e8:
fb:af:0b:7b:d0:be:fb:2e:6b:c8:da:f0:90:9a:a3:06:0b:93:
05:4e:70:f7:f4:91:0e:3b:5d:61:0c:98:54:ee:3e:80:ca:e9:
c9:ed:ab:8c:1f:05:c9:83:87:6f:1a:5c:0e:13:ea:5d:f9:55:
0f:7e:c6:94:07:57:a6:b3:bc:d8:bf:06:a5:04:37:30:87:71:
83:d4:55:f5:38:49:0d:a4:8c:af:89:0d:5e:57:40:24:34:51:
6f:df:ea:df:56:29:56:24:bb:e2:c6:af:c6:80:31:8b:72:1c:
a6:36:c0:4f:2c:7e:af:72:d3:54:4a:b7:70:50:b5:f3:9f:8a:
54:aa:d8:f5:5f:84:66:e7:40:d9:64:ff:70:9c:e9:d6:4d:55:
9b:17:54:17:13:84:10:9c:8a:f5:19:55:22:2a:15:c5:54:2c:
a9:2e:e9:1a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYU/3YqK/G9C3m7U7YBC2JEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZjYxOWVmMjAwODQwZGZhOGZkNDM1NjdjN2E5NzhjMTUz
MTJkN2YwHhcNMjIxMjIzMTY0MjQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzA3YzQ5MjVkZGM3OTYxNWNlNDBkMGNkNWIyOWFjYjk5MDdkMDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobbmB8dhsphlLBkO5ErpuqDTu0qX
CEOHabiCZ4ZOtTXukwUi+9wq/bksZc9wVzXIyxrh+fIFe4eARpsmJWgS41tSs2GB
MnLHTHN91ZQ1J8bWexdeFn1Bg3Si7cvO5vSIlC0ryRCRlbT3EZ0NmAAJJK9LCFCC
xv0j1q0QFCqz+j7g/ulF/F2F5kduQXDz62WQdRJADZ7IlxB/UgUf9baIcBVQUucP
e0a4sPod4W689qV4duRHQS6nwTn0x3AkZwzNw/14PKWWE0vUuQiVau6LE8mJV/rX
xDWM+g4rXfGX11oCZY1xhmdAACRyr2VxmWqN+NKxdJXIWCyWwzT6QnGhOwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKcHxJJd3HlhXOQNDNWymsuZB9BcMB8GA1UdIwQY
MBaAFLD2Ge8gCEDfqP1DVnx6l4wVMS1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1BZWjd5QUlRTi1vX1VOV2ZIcVhqQlV4TFg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wZTE4ZDItZDgwYi00YWEwLWFhZWYt
MDY5NjYxNjc1MTA2LzEvcHdmRWtsM2NlV0ZjNUEwTTFiS2F5NWtIMEZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wZTE4ZDItZDgwYi00YWEwLWFhZWYtMDY5NjYxNjc1MTA2
LzEvc1BZWjd5QUlRTi1vX1VOV2ZIcVhqQlV4TFg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgr1hTAN
BgkqhkiG9w0BAQsFAAOCAQEAn2W/P+8pGMe9z8lUVJp/2W3CNTJRtkIRrr9ZCwpe
f88naQIzi7Ye+goiEwy0kNEblcEGlXFrpciXohHZg/C0b7vIhHPNYzywGunRQhi6
ZTWgthnwGgbeTizo+68Le9C++y5ryNrwkJqjBguTBU5w9/SRDjtdYQyYVO4+gMrp
ye2rjB8FyYOHbxpcDhPqXflVD37GlAdXprO82L8GpQQ3MIdxg9RV9ThJDaSMr4kN
XldAJDRRb9/q31YpViS74savxoAxi3IcpjbATyx+r3LTVEq3cFC185+KVKrY9V+E
ZudA2WT/cJzp1k1VmxdUFxOEEJyK9RlVIioVxVQsqS7pGg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:18 2024 by rpki-client on console-ams.rpki-client.org