Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/2jGC_isaiEl4pYt2ATqJ_CcwF1c.roa
File: 2jGC_isaiEl4pYt2ATqJ_CcwF1c.roa (raw, json)
Hash identifier: 3nS/QIspph30Giz4kq7q4jFIPtgCJCCLPggaFt4E7bs=
Subject key identifier: DA:31:82:FE:2B:1A:88:49:78:A5:8B:76:01:3A:89:FC:27:30:17:57
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 0594A357
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/2jGC_isaiEl4pYt2ATqJ_CcwF1c.roa
Signing time: Sat 01 Jan 2022 05:01:30 +0000
ROA not before: Sat 01 Jan 2022 05:01:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210951
IP address blocks: 2a0c:e640:1020::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93627223 (0x594a357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 05:01:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da3182fe2b1a884978a58b76013a89fc27301757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:95:11:06:1c:ad:ca:f4:85:77:9d:ef:6f:24:
f2:1d:78:ab:93:1a:dc:38:b2:70:94:4e:9f:a3:3e:
cd:35:1b:a2:ed:d8:d1:40:40:86:f1:db:c5:67:45:
9d:22:41:2f:b2:b2:cb:1f:e9:69:3b:09:2d:e6:54:
41:48:5a:50:3a:84:80:13:b7:86:6b:26:45:bc:d4:
b0:45:a2:65:d7:c5:65:2b:cc:fe:45:5e:95:e8:ba:
3c:7a:bc:da:91:b6:fc:bb:02:86:34:8c:55:b4:1b:
a8:93:90:c5:a5:13:ec:48:4e:5d:30:29:1b:59:1b:
8d:80:8f:0b:88:f0:c6:2c:a0:2b:27:ef:c1:1a:30:
0f:cf:b5:27:f0:85:d1:90:16:cb:9f:86:7e:49:39:
2d:7b:4e:a3:c3:a4:54:44:60:af:6f:10:ca:3e:8c:
f7:70:8e:49:0a:8f:64:f7:61:d8:4c:cb:13:dc:d7:
2f:fe:54:2a:4b:42:e7:d7:b2:0c:b9:0a:95:da:90:
a2:a1:8b:f4:7d:08:61:c3:dd:e9:b2:0e:8f:34:49:
97:4a:5a:1d:51:a8:2e:91:b9:d0:46:82:87:ca:d8:
3f:3b:68:77:28:c0:f7:3d:64:e2:fd:f7:9c:19:2c:
93:29:17:50:5f:35:a7:07:82:5e:df:eb:0f:e5:1c:
d9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:31:82:FE:2B:1A:88:49:78:A5:8B:76:01:3A:89:FC:27:30:17:57
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/2jGC_isaiEl4pYt2ATqJ_CcwF1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:e640:1020::/44
Signature Algorithm: sha256WithRSAEncryption
32:df:5d:01:7f:c7:ce:06:2a:00:10:be:c4:ff:e1:ce:9c:ab:
57:20:74:77:1c:3c:41:26:6a:15:1c:d5:54:f0:9b:19:bd:e6:
5a:8f:31:38:99:38:e0:5a:ac:9e:94:52:a3:14:c1:ca:be:43:
63:43:7e:83:cd:7d:5b:3d:09:49:40:93:86:67:9d:7c:37:dd:
fb:e1:9a:f8:84:57:76:9c:bd:9d:91:87:1c:fb:93:67:71:f2:
13:59:85:98:6b:98:a6:1d:04:dc:65:a2:76:46:8f:6b:18:06:
8f:b7:ce:4c:dd:69:f5:54:85:4d:9c:8f:58:01:03:86:7d:9d:
16:9e:49:30:23:38:53:97:64:81:bb:27:7d:53:99:1c:d0:33:
90:37:43:30:c0:48:a2:7f:5f:63:eb:77:3b:ef:42:ea:3b:c2:
36:cc:78:86:67:e6:39:dc:04:c1:b5:62:86:10:8a:c2:b9:e4:
4e:69:16:f1:33:52:a3:b9:d2:bc:0c:3d:c9:df:8d:bf:e4:b3:
8f:8b:90:4c:ed:c2:5c:05:6a:19:23:fc:74:b3:78:64:8e:9f:
3d:64:d9:74:e3:23:62:79:90:5d:53:c6:5e:8a:6d:f0:35:33:
dc:f8:96:ca:e0:a0:6b:10:b6:07:47:1d:f2:59:ba:5a:20:15:
8b:a4:ae:48
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBZSjVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
M2M2OWQwNDU4MzUwMGM1ZWY4MTEzNjgzMTIzNzU5M2UwYmI4NmNlMB4XDTIyMDEw
MTA1MDEzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGEzMTgyZmUyYjFh
ODg0OTc4YTU4Yjc2MDEzYTg5ZmMyNzMwMTc1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ2VEQYcrcr0hXed728k8h14q5Ma3DiycJROn6M+zTUbou3Y
0UBAhvHbxWdFnSJBL7Kyyx/paTsJLeZUQUhaUDqEgBO3hmsmRbzUsEWiZdfFZSvM
/kVelei6PHq82pG2/LsChjSMVbQbqJOQxaUT7EhOXTApG1kbjYCPC4jwxiygKyfv
wRowD8+1J/CF0ZAWy5+Gfkk5LXtOo8OkVERgr28Qyj6M93COSQqPZPdh2EzLE9zX
L/5UKktC59eyDLkKldqQoqGL9H0IYcPd6bIOjzRJl0paHVGoLpG50EaCh8rYPzto
dyjA9z1k4v33nBkskykXUF81pweCXt/rD+Uc2d0CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTaMYL+KxqISXili3YBOon8JzAXVzAfBgNVHSMEGDAWgBRzxp0EWDUAxe+B
E2gxI3WT4LuGzjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2M4YWRCRmcxQU1YdmdSTm9NU04xay1DN2hzNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzgvNmY2Y2UyLWU2ZWUtNGUyYS05MDVkLWY5Y2IwYTdiMjA2Yy8x
LzJqR0NfaXNhaUVsNHBZdDJBVHFKX0Njd0YxYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgv
NmY2Y2UyLWU2ZWUtNGUyYS05MDVkLWY5Y2IwYTdiMjA2Yy8xL2M4YWRCRmcxQU1Y
dmdSTm9NU04xay1DN2hzNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoM5kAQIDANBgkqhkiG9w0BAQsF
AAOCAQEAMt9dAX/HzgYqABC+xP/hzpyrVyB0dxw8QSZqFRzVVPCbGb3mWo8xOJk4
4FqsnpRSoxTByr5DY0N+g819Wz0JSUCThmedfDfd++Ga+IRXdpy9nZGHHPuTZ3Hy
E1mFmGuYph0E3GWidkaPaxgGj7fOTN1p9VSFTZyPWAEDhn2dFp5JMCM4U5dkgbsn
fVOZHNAzkDdDMMBIon9fY+t3O+9C6jvCNsx4hmfmOdwEwbVihhCKwrnkTmkW8TNS
o7nSvAw9yd+Nv+Szj4uQTO3CXAVqGSP8dLN4ZI6fPWTZdOMjYnmQXVPGXopt8DUz
3PiWyuCgaxC2B0cd8lm6WiAVi6SuSA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:48 2024 by rpki-client on console-ams.rpki-client.org