Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/PzBRbM4DrZtbXPEE4J0hHNLANq8.roa
File: PzBRbM4DrZtbXPEE4J0hHNLANq8.roa (raw, json)
Hash identifier: uUcsueIB06xWM9z+QsuIhe9UPRhL6K3YvC2YbjHqulQ=
Subject key identifier: 3F:30:51:6C:CE:03:AD:9B:5B:5C:F1:04:E0:9D:21:1C:D2:C0:36:AF
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 058F9CFA
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/PzBRbM4DrZtbXPEE4J0hHNLANq8.roa
Signing time: Sat 01 Jan 2022 05:01:27 +0000
ROA not before: Sat 01 Jan 2022 05:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209300
IP address blocks: 2a05:1085::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93297914 (0x58f9cfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 05:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f30516cce03ad9b5b5cf104e09d211cd2c036af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:c4:ec:0a:0d:f0:94:cb:e5:0d:7c:17:28:
88:55:d6:45:cc:b8:11:e6:18:ad:5a:24:6a:85:9a:
eb:22:2a:9d:2f:da:c2:57:be:b0:95:01:be:c4:a5:
90:71:38:ed:5c:59:93:93:4d:8d:23:50:82:7a:ef:
ed:63:51:f3:c9:4d:27:8d:e1:2a:46:ff:53:c9:88:
85:4b:d6:a2:10:c9:2c:b9:d0:d9:ab:e2:83:43:e0:
47:8b:ec:f9:52:0e:9a:7f:82:b2:f2:d5:b1:ea:72:
1b:a0:0b:8f:20:ad:cc:d6:ee:10:5c:b4:44:fb:8f:
c5:25:d3:d2:9b:ba:7d:5e:6d:49:2a:7a:a8:4b:f1:
ed:e3:c7:d8:ab:ce:73:1e:e2:e2:5b:74:88:48:15:
ba:b3:31:99:53:8f:97:93:54:ef:4d:cd:24:e5:de:
bf:56:60:71:33:41:ba:c4:cb:d7:c1:44:93:41:58:
d0:39:e3:8d:cf:4c:6c:da:17:63:21:e5:bb:53:7c:
45:21:9b:3a:fc:e8:c1:7a:55:6e:ce:1c:83:e5:e6:
2d:05:be:c9:ef:c9:c6:87:28:8d:e8:72:18:53:e9:
e0:3e:cd:5e:98:9f:3d:87:f3:3b:ce:d7:58:a6:1c:
b8:e6:5f:50:cb:95:e8:38:65:ad:1d:08:49:32:fc:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:30:51:6C:CE:03:AD:9B:5B:5C:F1:04:E0:9D:21:1C:D2:C0:36:AF
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/PzBRbM4DrZtbXPEE4J0hHNLANq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1085::/32
Signature Algorithm: sha256WithRSAEncryption
3f:10:66:69:54:9a:e7:40:01:ec:d8:48:9c:7f:04:50:dd:1b:
e0:69:ad:0d:0b:51:32:89:63:e4:b0:5a:80:ea:c9:46:32:92:
6f:b8:cc:be:47:18:3e:20:0c:76:9b:61:e1:cb:ee:7b:2d:d0:
34:0b:bf:98:27:ee:8f:be:06:66:6a:f0:6a:4f:c8:db:4b:59:
53:d9:87:ff:60:63:61:9b:a3:ea:c4:7f:ca:87:73:9e:51:1d:
f2:18:b9:6f:b3:cb:15:c8:f1:b3:f6:92:a4:3f:c4:5b:36:23:
fd:7e:39:ae:c5:4e:50:a1:49:f2:01:3b:c6:3c:1a:88:8c:ae:
e9:a3:50:ca:29:fe:44:ae:66:2c:bf:11:7b:1d:61:54:92:d7:
fc:c0:af:62:86:e8:fc:91:a7:57:dd:aa:fc:d3:6a:0e:a2:fa:
e5:ff:61:1d:7e:78:f9:02:43:e1:0b:d7:f6:16:48:fb:37:9d:
b1:91:48:11:d3:3f:60:e7:37:2d:e9:50:26:b6:fa:85:56:01:
26:9e:e0:11:07:af:c9:f4:e4:87:43:cd:a6:88:ce:4c:96:7b:
8d:4b:b6:39:66:8a:c8:a3:5e:d0:10:f7:0c:be:a3:01:17:0c:
26:9b:9a:f3:bd:75:69:d3:71:1f:4e:9d:80:0f:36:77:63:76:
a9:02:61:da
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEBY+c+jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
M2M2OWQwNDU4MzUwMGM1ZWY4MTEzNjgzMTIzNzU5M2UwYmI4NmNlMB4XDTIyMDEw
MTA1MDEyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2YzMDUxNmNjZTAz
YWQ5YjViNWNmMTA0ZTA5ZDIxMWNkMmMwMzZhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMV4xOwKDfCUy+UNfBcoiFXWRcy4EeYYrVokaoWa6yIqnS/a
wle+sJUBvsSlkHE47VxZk5NNjSNQgnrv7WNR88lNJ43hKkb/U8mIhUvWohDJLLnQ
2avig0PgR4vs+VIOmn+CsvLVsepyG6ALjyCtzNbuEFy0RPuPxSXT0pu6fV5tSSp6
qEvx7ePH2KvOcx7i4lt0iEgVurMxmVOPl5NU703NJOXev1ZgcTNBusTL18FEk0FY
0Dnjjc9MbNoXYyHlu1N8RSGbOvzowXpVbs4cg+XmLQW+ye/JxocojehyGFPp4D7N
XpifPYfzO87XWKYcuOZfUMuV6DhlrR0ISTL8YdUCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBQ/MFFszgOtm1tc8QTgnSEc0sA2rzAfBgNVHSMEGDAWgBRzxp0EWDUAxe+B
E2gxI3WT4LuGzjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2M4YWRCRmcxQU1YdmdSTm9NU04xay1DN2hzNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzgvNmY2Y2UyLWU2ZWUtNGUyYS05MDVkLWY5Y2IwYTdiMjA2Yy8x
L1B6QlJiTTREclp0YlhQRUU0SjBoSE5MQU5xOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgv
NmY2Y2UyLWU2ZWUtNGUyYS05MDVkLWY5Y2IwYTdiMjA2Yy8xL2M4YWRCRmcxQU1Y
dmdSTm9NU04xay1DN2hzNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoFEIUwDQYJKoZIhvcNAQELBQAD
ggEBAD8QZmlUmudAAezYSJx/BFDdG+BprQ0LUTKJY+SwWoDqyUYykm+4zL5HGD4g
DHabYeHL7nst0DQLv5gn7o++BmZq8GpPyNtLWVPZh/9gY2Gbo+rEf8qHc55RHfIY
uW+zyxXI8bP2kqQ/xFs2I/1+Oa7FTlChSfIBO8Y8GoiMrumjUMop/kSuZiy/EXsd
YVSS1/zAr2KG6PyRp1fdqvzTag6i+uX/YR1+ePkCQ+EL1/YWSPs3nbGRSBHTP2Dn
Ny3pUCa2+oVWASae4BEHr8n05IdDzaaIzkyWe41LtjlmisijXtAQ9wy+owEXDCab
mvO9dWnTcR9OnYAPNndjdqkCYdo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org