Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/mhtah512CYs2Hr2eHdluq3gIIKc.roa
File: mhtah512CYs2Hr2eHdluq3gIIKc.roa (raw, json)
Hash identifier: INAXneyqQMOivBhGljr/Duu3DB0L/QegkcU+hDxurN8=
Subject key identifier: 9A:1B:5A:87:9D:76:09:8B:36:1E:BD:9E:1D:D9:6E:AB:78:08:20:A7
Certificate issuer: /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Certificate serial: 018258F88B46A0BB2EF468E1DB80BE074F38
Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/mhtah512CYs2Hr2eHdluq3gIIKc.roa
Signing time: Mon 01 Aug 2022 10:34:19 +0000
ROA not before: Mon 01 Aug 2022 10:34:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64404
IP address blocks: 2001:678:814::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:f8:8b:46:a0:bb:2e:f4:68:e1:db:80:be:07:4f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Validity
Not Before: Aug 1 10:34:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a1b5a879d76098b361ebd9e1dd96eab780820a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:79:a0:bb:06:1f:09:bd:0a:ce:8e:08:c1:
8f:ff:70:e5:45:2e:e6:f3:ec:01:62:db:57:ca:a3:
aa:c4:ec:5b:11:5a:87:5a:a6:3a:b2:c3:c2:75:3d:
a9:03:b3:22:4b:b1:d1:3a:13:05:e6:b1:17:ca:b7:
8b:c4:0f:01:fa:35:62:21:0e:fa:a1:b6:65:0c:ee:
0e:42:cd:8f:bd:eb:8f:5c:d5:77:5a:d2:d9:fe:bf:
a5:eb:b1:75:2f:6c:d3:d6:70:44:33:90:aa:d9:7e:
30:9f:cb:0f:97:9b:a3:c0:6e:b3:ee:b1:ec:35:3f:
43:1e:47:bd:ac:3b:98:8e:19:d9:83:91:51:2a:c1:
c3:dd:1d:64:6b:e9:b3:21:2b:be:83:63:ab:06:83:
9b:7a:56:88:6d:f4:a5:10:f8:7e:15:cb:d6:1c:5e:
b4:e9:91:9c:6d:0a:87:47:7f:08:8d:e6:6b:b5:c5:
22:6d:50:72:23:94:59:7c:fe:01:00:e3:01:ce:37:
5a:2b:ca:94:70:aa:38:79:d5:96:85:ce:89:e4:8a:
c7:a1:75:88:08:f8:fd:ce:77:56:63:16:e9:4f:ee:
43:0d:b4:ea:25:87:d8:e7:d7:db:78:ee:1e:da:89:
a3:0d:b6:b4:82:a6:80:70:03:07:1d:f1:c1:8a:76:
70:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1B:5A:87:9D:76:09:8B:36:1E:BD:9E:1D:D9:6E:AB:78:08:20:A7
X509v3 Authority Key Identifier:
keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/mhtah512CYs2Hr2eHdluq3gIIKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:814::/48
Signature Algorithm: sha256WithRSAEncryption
27:6a:38:37:47:63:d8:fd:3b:e3:2b:34:c8:77:c8:d7:94:02:
ae:5f:11:93:52:a0:4b:e8:6b:62:a4:70:e0:76:b7:2d:5b:b2:
49:74:54:e7:75:18:0d:9a:a3:82:f6:1a:05:eb:c5:87:a2:f6:
e4:52:71:3b:15:df:59:2b:ca:f9:77:53:1f:e2:6a:66:c2:fe:
54:4d:d7:26:e4:f9:ff:a1:20:54:cd:67:27:de:42:60:b4:41:
bb:5f:e8:e9:08:25:06:d7:d9:a2:89:61:6a:4d:39:c7:a2:f6:
e8:c7:93:4d:9f:40:6e:2b:60:cc:d2:0c:8c:0c:ef:2f:6c:69:
9a:cf:46:7f:5a:e8:7b:ea:f8:30:20:69:54:59:ca:92:48:fa:
c1:d3:f9:62:ef:1f:cf:ba:0b:19:ef:a5:ef:72:d7:77:a0:51:
92:92:be:15:2c:1e:5d:e5:88:77:57:a0:f3:37:77:00:c0:b7:
c3:3b:f9:59:1d:3a:25:4b:10:85:8a:77:1f:dc:1a:03:04:a5:
66:cc:b8:23:6c:54:87:75:c9:98:b3:47:69:65:cb:b6:b2:bb:
30:0c:fa:d9:d4:f6:d7:8a:5a:e5:73:d5:e9:b3:c2:f5:1a:b4:
83:84:85:20:65:d0:5a:7d:e8:86:97:06:6a:f9:2c:93:9e:4e:
67:ef:33:3e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYJY+ItGoLsu9Gjh24C+B084MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDk0MmQ5NmVlOTRhN2E1YTY1MmVmN2FjODU1ZGM5NDAx
NDE1ZGYwHhcNMjIwODAxMTAzNDE5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTFiNWE4NzlkNzYwOThiMzYxZWJkOWUxZGQ5NmVhYjc4MDgyMGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIt5oLsGHwm9Cs6OCMGP/3DlRS7m
8+wBYttXyqOqxOxbEVqHWqY6ssPCdT2pA7MiS7HROhMF5rEXyreLxA8B+jViIQ76
obZlDO4OQs2PveuPXNV3WtLZ/r+l67F1L2zT1nBEM5Cq2X4wn8sPl5ujwG6z7rHs
NT9DHke9rDuYjhnZg5FRKsHD3R1ka+mzISu+g2OrBoObelaIbfSlEPh+FcvWHF60
6ZGcbQqHR38IjeZrtcUibVByI5RZfP4BAOMBzjdaK8qUcKo4edWWhc6J5IrHoXWI
CPj9zndWYxbpT+5DDbTqJYfY59fbeO4e2omjDba0gqaAcAMHHfHBinZwSwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJobWoeddgmLNh69nh3Zbqt4CCCnMB8GA1UdIwQY
MBaAFMvZQtlu6Up6WmUu96yFXclAFBXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wODJmMTItNTEzYi00ZWI5LWExNzEt
YzZmNmQ0NDQ5MTVmLzEvbWh0YWg1MTJDWXMySHIyZUhkbHVxM2dJSUtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8wODJmMTItNTEzYi00ZWI5LWExNzEtYzZmNmQ0NDQ5MTVm
LzEveTlsQzJXN3BTbnBhWlM3M3JJVmR5VUFVRmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAgU
MA0GCSqGSIb3DQEBCwUAA4IBAQAnajg3R2PY/TvjKzTId8jXlAKuXxGTUqBL6Gti
pHDgdrctW7JJdFTndRgNmqOC9hoF68WHovbkUnE7Fd9ZK8r5d1Mf4mpmwv5UTdcm
5Pn/oSBUzWcn3kJgtEG7X+jpCCUG19miiWFqTTnHovbox5NNn0BuK2DM0gyMDO8v
bGmaz0Z/Wuh76vgwIGlUWcqSSPrB0/li7x/PugsZ76Xvctd3oFGSkr4VLB5d5Yh3
V6DzN3cAwLfDO/lZHTolSxCFincf3BoDBKVmzLgjbFSHdcmYs0dpZcu2srswDPrZ
1PbXilrlc9Xps8L1GrSDhIUgZdBafeiGlwZq+SyTnk5n7zM+
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:06 2023 by rpki-client on console-fra.rpki-client.org