Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/kUKemlCtS3osONenmVo1VTRptWo.roa
File: kUKemlCtS3osONenmVo1VTRptWo.roa (raw, json)
Hash identifier: 9W4nU4kW33sJXquY5SEKWAtN71g9fpYPURDN32FwXlA=
Subject key identifier: 91:42:9E:9A:50:AD:4B:7A:2C:38:D7:A7:99:5A:35:55:34:69:B5:6A
Certificate issuer: /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial: 04D9E339
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/kUKemlCtS3osONenmVo1VTRptWo.roa
Signing time: Sat 01 Jan 2022 14:05:17 +0000
ROA not before: Sat 01 Jan 2022 14:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64484
IP address blocks: 2a0e:1e40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81388345 (0x4d9e339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Validity
Not Before: Jan 1 14:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91429e9a50ad4b7a2c38d7a7995a35553469b56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3d:63:e8:ab:d6:90:a7:73:09:73:40:5c:ce:
99:9a:94:f4:42:ac:e5:bd:10:83:76:22:ee:7e:ff:
8c:dd:71:62:84:ec:f0:6d:15:8d:24:82:69:eb:9a:
84:d2:81:36:86:84:61:77:07:5a:ff:0f:00:bc:85:
a5:67:05:ec:ae:4c:4c:e3:c8:68:b5:01:21:46:f5:
33:5e:7f:c8:c0:af:1a:42:3f:5c:e9:7e:e8:32:4b:
bb:01:28:b8:94:c6:49:a7:2e:bc:c4:5d:f6:2a:47:
58:35:e3:e5:05:46:5a:cd:37:98:a8:fa:2b:e1:65:
bd:bd:a4:a6:6b:0c:35:05:48:7e:9e:79:72:f0:96:
0c:a4:ae:18:cf:d1:4b:40:c1:88:56:5f:a1:73:dc:
34:05:b8:5d:b7:28:61:23:8a:62:a6:80:21:4b:df:
8d:37:27:bb:b2:4d:e2:12:67:15:3c:72:88:07:00:
d6:ed:b0:81:d6:08:84:cd:cd:1b:22:ad:b8:e3:71:
91:32:32:fa:55:ce:49:29:4f:a9:01:19:19:e4:43:
23:05:33:44:45:ca:1e:99:fa:a1:aa:d6:88:9e:19:
97:33:33:18:ee:4c:b1:d2:bf:37:01:b2:3d:dd:ab:
ee:20:a4:20:2c:e1:d9:de:6e:ef:ef:48:9c:8b:ee:
63:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:42:9E:9A:50:AD:4B:7A:2C:38:D7:A7:99:5A:35:55:34:69:B5:6A
X509v3 Authority Key Identifier:
keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/kUKemlCtS3osONenmVo1VTRptWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1e40::/29
Signature Algorithm: sha256WithRSAEncryption
4e:2b:5a:a2:0a:aa:fa:6e:cb:46:95:2d:66:8f:4b:89:7f:cd:
65:60:b5:93:fd:84:58:0b:86:6a:74:c4:cf:d7:2e:75:7f:7d:
5f:87:ad:21:fe:0d:02:2c:a6:0e:13:9a:17:77:ad:f1:a9:86:
dc:e7:18:b7:7e:b6:75:8f:72:43:58:56:b3:af:35:e6:83:e2:
1a:29:ba:7e:be:07:49:00:23:da:75:7d:e7:05:e2:ec:b2:56:
fb:24:25:15:7e:83:12:2c:d0:01:9e:d6:e3:1f:39:24:30:35:
e5:d4:d4:7b:45:c6:9e:c1:cf:b7:3e:0f:e6:d7:c6:d2:ac:cf:
9b:d5:3b:59:28:f4:71:fe:8e:a3:26:4b:84:e5:ed:08:ba:e0:
35:57:52:24:39:df:57:5a:ee:cc:c2:68:e3:9e:74:71:f9:31:
db:02:9a:40:a4:00:0d:df:dd:ca:df:9f:c8:98:69:01:ee:ce:
0c:99:b8:96:27:0a:0d:0d:f0:f1:89:25:86:85:f8:5d:22:ca:
f7:31:12:01:b6:05:b0:0f:40:22:5b:47:fb:f7:fa:e3:d8:d2:
b6:e6:7e:4e:9e:9f:9a:7a:a0:e5:f3:0b:c2:b6:aa:d7:48:3b:
39:8d:17:54:17:38:44:c9:63:e7:53:10:4c:94:67:9b:77:ad:
53:62:00:96
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEBNnjOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ODE3MTYyODc3ZGE5ZjQwMzBiYmNiOWZlOGFjMTQzZTZhYjI4NzFiMB4XDTIyMDEw
MTE0MDUxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTE0MjllOWE1MGFk
NGI3YTJjMzhkN2E3OTk1YTM1NTUzNDY5YjU2YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO89Y+ir1pCncwlzQFzOmZqU9EKs5b0Qg3Yi7n7/jN1xYoTs
8G0VjSSCaeuahNKBNoaEYXcHWv8PALyFpWcF7K5MTOPIaLUBIUb1M15/yMCvGkI/
XOl+6DJLuwEouJTGSacuvMRd9ipHWDXj5QVGWs03mKj6K+Flvb2kpmsMNQVIfp55
cvCWDKSuGM/RS0DBiFZfoXPcNAW4XbcoYSOKYqaAIUvfjTcnu7JN4hJnFTxyiAcA
1u2wgdYIhM3NGyKtuONxkTIy+lXOSSlPqQEZGeRDIwUzREXKHpn6oarWiJ4ZlzMz
GO5MsdK/NwGyPd2r7iCkICzh2d5u7+9InIvuY6sCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBSRQp6aUK1Leiw416eZWjVVNGm1ajAfBgNVHSMEGDAWgBS4FxYod9qfQDC7
y5/orBQ+arKHGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VCY1dLSGZhbjBBd3U4dWY2S3dVUG1xeWh4cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmUvMTZiN2I0LWJiMjEtNGIzZS1hZWI0LWIyN2NhMjkxYmQ3Ny8x
L2tVS2VtbEN0UzNvc09OZW5tVm8xVlRScHRXby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUv
MTZiN2I0LWJiMjEtNGIzZS1hZWI0LWIyN2NhMjkxYmQ3Ny8xL3VCY1dLSGZhbjBB
d3U4dWY2S3dVUG1xeWh4cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoOHkAwDQYJKoZIhvcNAQELBQAD
ggEBAE4rWqIKqvpuy0aVLWaPS4l/zWVgtZP9hFgLhmp0xM/XLnV/fV+HrSH+DQIs
pg4Tmhd3rfGphtznGLd+tnWPckNYVrOvNeaD4hopun6+B0kAI9p1fecF4uyyVvsk
JRV+gxIs0AGe1uMfOSQwNeXU1HtFxp7Bz7c+D+bXxtKsz5vVO1ko9HH+jqMmS4Tl
7Qi64DVXUiQ531da7szCaOOedHH5MdsCmkCkAA3f3crfn8iYaQHuzgyZuJYnCg0N
8PGJJYaF+F0iyvcxEgG2BbAPQCJbR/v3+uPY0rbmfk6en5p6oOXzC8K2qtdIOzmN
F1QXOETJY+dTEEyUZ5t3rVNiAJY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:10 2024 by rpki-client on console-fra.rpki-client.org