Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/GU89lunIc4qUbkwnEeDFSum9bmE.roa
File: GU89lunIc4qUbkwnEeDFSum9bmE.roa (raw, json)
Hash identifier: +HQtab1lHSYi1zjA7HXYlB3pMrCtO4Klg0Ya0zSt7Jk=
Subject key identifier: 19:4F:3D:96:E9:C8:73:8A:94:6E:4C:27:11:E0:C5:4A:E9:BD:6E:61
Certificate issuer: /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial: 0F2576F4
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/GU89lunIc4qUbkwnEeDFSum9bmE.roa
Signing time: Sat 01 Jan 2022 04:52:26 +0000
ROA not before: Sat 01 Jan 2022 04:52:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3549
IP address blocks: 2a06:6540:3101::/48 maxlen: 48
2a06:6540:3081::/48 maxlen: 48
2a06:6540:2041::/48 maxlen: 48
2a06:6540:3041::/48 maxlen: 48
2a06:6540:30c1::/48 maxlen: 48
2a06:6541:3002::/48 maxlen: 48
2a06:6540:3002::/48 maxlen: 48
2a06:6541:3081::/48 maxlen: 48
2a06:6541:2041::/48 maxlen: 48
2a06:6541:3101::/48 maxlen: 48
2a06:6541:30c1::/48 maxlen: 48
2a06:6541:3041::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254113524 (0xf2576f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Validity
Not Before: Jan 1 04:52:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=194f3d96e9c8738a946e4c2711e0c54ae9bd6e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8b:df:67:dc:1c:1d:bc:e7:c4:f8:2a:e4:10:
5a:81:5b:22:3e:53:97:f2:9e:0b:5f:31:37:2e:81:
2d:9e:90:10:72:7b:92:f6:d8:45:c3:ba:9c:68:63:
0d:9e:03:c6:ea:48:8c:30:13:c9:10:f7:6f:c7:34:
81:dd:93:fb:2c:be:fe:09:8f:3a:b1:61:40:a4:ae:
04:a7:d2:41:62:89:3a:e9:4a:e8:24:ea:a6:c8:1e:
ad:b9:75:0a:03:2b:e4:64:db:d5:ec:19:34:21:09:
81:6d:9b:5c:b5:77:64:8c:60:4b:89:82:d2:be:90:
cb:71:70:b1:92:b4:aa:1c:62:eb:34:16:d0:96:f1:
81:bc:25:28:0d:b9:11:1d:6e:60:c4:e2:e6:c4:21:
5e:c9:cd:ca:48:65:de:47:c5:50:5c:9b:56:df:b4:
b8:45:30:fa:05:46:39:db:c3:37:12:14:df:a6:33:
53:18:86:20:02:71:59:38:6c:6a:0d:5b:a6:9a:70:
ad:71:e2:a9:6a:0b:32:3f:f7:f9:ed:79:6a:db:0d:
ed:63:50:13:a4:3b:f1:61:58:14:72:b7:d6:62:43:
c5:e1:33:19:6f:75:b5:b1:aa:c2:6d:b6:a4:f0:c2:
56:69:60:4d:e4:2c:ae:d2:f3:19:c4:1d:ba:2c:52:
17:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4F:3D:96:E9:C8:73:8A:94:6E:4C:27:11:E0:C5:4A:E9:BD:6E:61
X509v3 Authority Key Identifier:
keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/GU89lunIc4qUbkwnEeDFSum9bmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:6540:2041::/48
2a06:6540:3002::/48
2a06:6540:3041::/48
2a06:6540:3081::/48
2a06:6540:30c1::/48
2a06:6540:3101::/48
2a06:6541:2041::/48
2a06:6541:3002::/48
2a06:6541:3041::/48
2a06:6541:3081::/48
2a06:6541:30c1::/48
2a06:6541:3101::/48
Signature Algorithm: sha256WithRSAEncryption
9f:f5:d0:e7:7b:2e:57:46:28:49:0b:a3:32:ef:94:ef:6a:8f:
33:b2:9a:17:24:d9:b9:49:b8:ed:8f:30:69:1c:2d:20:86:0b:
c2:89:e6:66:be:ba:2d:2b:6e:b3:dc:5a:c7:ce:ba:17:83:c1:
9d:bf:2c:bf:83:69:59:38:ee:9a:6f:32:b6:86:ed:b0:b2:82:
e7:f1:a3:e1:d3:0a:01:df:31:d4:d6:35:d5:9c:e1:f1:e6:2b:
e4:3d:cc:6e:da:88:35:f2:2f:03:60:69:c4:ae:8e:22:f3:37:
af:92:3d:80:3c:c7:5d:b9:ce:49:f3:9c:2e:93:1d:af:7c:2f:
ed:b8:0a:5d:5a:07:50:1d:71:be:62:9a:9c:2b:5f:c3:d3:6c:
33:cf:ec:42:c6:6f:85:e5:00:f0:f5:9c:e7:d1:28:a2:86:b9:
62:10:65:28:b3:0b:c9:22:e3:98:d0:36:79:76:f4:c4:4f:7c:
73:5b:46:41:5d:d3:21:4e:6f:71:56:d4:0c:df:b0:7d:fe:18:
16:34:b1:d3:42:be:61:f5:cd:ab:af:37:46:f6:be:93:34:69:
a4:1b:09:f8:d6:79:5a:10:8c:f3:88:53:7b:a6:15:7c:23:f3:
e9:03:30:4e:eb:f1:1a:d2:14:67:a3:6a:0f:34:cc:cb:c8:8c:
06:79:cf:69
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIEDyV29DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YWM0NjZjYzg5ZjlkYjRlMzFjNTQwMGQyYWU3YTJiZmZkYjIyNTQ3MB4XDTIyMDEw
MTA0NTIyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTk0ZjNkOTZlOWM4
NzM4YTk0NmU0YzI3MTFlMGM1NGFlOWJkNmU2MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMSL32fcHB2858T4KuQQWoFbIj5Tl/KeC18xNy6BLZ6QEHJ7
kvbYRcO6nGhjDZ4DxupIjDATyRD3b8c0gd2T+yy+/gmPOrFhQKSuBKfSQWKJOulK
6CTqpsgerbl1CgMr5GTb1ewZNCEJgW2bXLV3ZIxgS4mC0r6Qy3FwsZK0qhxi6zQW
0JbxgbwlKA25ER1uYMTi5sQhXsnNykhl3kfFUFybVt+0uEUw+gVGOdvDNxIU36Yz
UxiGIAJxWThsag1bpppwrXHiqWoLMj/3+e15atsN7WNQE6Q78WFYFHK31mJDxeEz
GW91tbGqwm22pPDCVmlgTeQsrtLzGcQduixSF2ECAwEAAaOCAnAwggJsMB0GA1Ud
DgQWBBQZTz2W6chzipRuTCcR4MVK6b1uYTAfBgNVHSMEGDAWgBRaxGbMifnbTjHF
QA0q56K//bIlRzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dzUm16SW41MjA0eHhVQU5LdWVpdl8yeUpVYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmQvZTI5Yzg3LTQ2ODMtNDQzZS04ODNmLTlhYmQxYWE2NGJlMS8x
L0dVODlsdW5JYzRxVWJrd25FZURGU3VtOWJtRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQv
ZTI5Yzg3LTQ2ODMtNDQzZS04ODNmLTlhYmQxYWE2NGJlMS8xL1dzUm16SW41MjA0
eHhVQU5LdWVpdl8yeUpVYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
hQYIKwYBBQUHAQcBAf8EdjB0MHIEAgACMGwDBwAqBmVAIEEDBwAqBmVAMAIDBwAq
BmVAMEEDBwAqBmVAMIEDBwAqBmVAMMEDBwAqBmVAMQEDBwAqBmVBIEEDBwAqBmVB
MAIDBwAqBmVBMEEDBwAqBmVBMIEDBwAqBmVBMMEDBwAqBmVBMQEwDQYJKoZIhvcN
AQELBQADggEBAJ/10Od7LldGKEkLozLvlO9qjzOymhck2blJuO2PMGkcLSCGC8KJ
5ma+ui0rbrPcWsfOuheDwZ2/LL+DaVk47ppvMraG7bCygufxo+HTCgHfMdTWNdWc
4fHmK+Q9zG7aiDXyLwNgacSujiLzN6+SPYA8x125zknznC6THa98L+24Cl1aB1Ad
cb5impwrX8PTbDPP7ELGb4XlAPD1nOfRKKKGuWIQZSizC8ki45jQNnl29MRPfHNb
RkFd0yFOb3FW1AzfsH3+GBY0sdNCvmH1zauvN0b2vpM0aaQbCfjWeVoQjPOIU3um
FXwj8+kDME7r8RrSFGejag80zMvIjAZ5z2k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:08 2024 by rpki-client on console-fra.rpki-client.org