Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/2TKcLUMYBac99z-hz5Icy0HDLls.roa
File: 2TKcLUMYBac99z-hz5Icy0HDLls.roa (raw, json)
Hash identifier: 1epoMloriHRgp2Ix6p5xuRgCjbZc/2W26Z0axx2oL0s=
Subject key identifier: D9:32:9C:2D:43:18:05:A7:3D:F7:3F:A1:CF:92:1C:CB:41:C3:2E:5B
Certificate issuer: /CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
Certificate serial: 01850B268A911C34F9EF8C4371FB7A0D26FC
Authority key identifier: 98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/2TKcLUMYBac99z-hz5Icy0HDLls.roa
Signing time: Tue 13 Dec 2022 11:02:33 +0000
ROA not before: Tue 13 Dec 2022 11:02:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207186
IP address blocks: 2001:67c:984::/48 maxlen: 48
2001:67c:980::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:26:8a:91:1c:34:f9:ef:8c:43:71:fb:7a:0d:26:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
Validity
Not Before: Dec 13 11:02:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9329c2d431805a73df73fa1cf921ccb41c32e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:8f:dd:4f:2f:f1:ee:df:09:ce:0f:71:5e:
59:fb:83:7c:60:29:83:f7:b7:73:51:27:6b:b1:4b:
83:21:dd:a1:45:54:5e:36:d3:3d:ad:a3:dc:70:10:
83:9d:e4:31:9e:40:2a:44:cb:15:ff:42:5b:33:1f:
7f:24:f9:1e:73:74:6f:d7:6d:9d:bc:a1:6b:2d:89:
8d:b0:f3:a8:57:5e:c3:ab:c5:d1:ab:14:95:d2:e8:
05:34:b8:d2:f8:f4:88:e0:d6:93:d0:75:12:80:43:
f4:66:88:b6:51:ad:92:4d:63:19:cb:cf:59:1f:d2:
63:d7:65:5b:b4:ab:e3:14:35:02:a9:72:10:44:7b:
45:e1:17:62:05:42:cd:8f:e2:5b:5d:86:bd:d8:38:
83:63:d0:51:0c:d1:02:99:80:b5:bf:ef:89:d0:ab:
21:49:0d:97:2d:b8:21:50:a1:18:08:d0:c2:6d:8c:
57:1a:b1:69:12:37:66:f4:34:30:2f:ac:b2:c4:50:
29:ee:84:ec:8b:e8:9f:bb:1c:7e:c4:56:7a:ca:c1:
f3:a0:eb:41:00:c7:9f:c3:a8:f9:a0:8a:b1:82:15:
78:30:3e:93:9a:0c:ca:50:97:5e:30:3d:4f:a1:56:
fe:72:3f:27:e4:a6:65:0f:5d:bf:c0:eb:34:4f:d9:
6d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:32:9C:2D:43:18:05:A7:3D:F7:3F:A1:CF:92:1C:CB:41:C3:2E:5B
X509v3 Authority Key Identifier:
keyid:98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/2TKcLUMYBac99z-hz5Icy0HDLls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:980::/48
2001:67c:984::/48
Signature Algorithm: sha256WithRSAEncryption
af:8d:61:6f:76:8c:b1:02:79:5f:d1:a1:dc:f5:36:90:31:7b:
67:85:02:2e:92:a9:20:2b:40:69:4a:2b:68:d1:1e:58:5b:e0:
59:a9:20:37:8f:11:f8:a6:8e:df:b4:9a:be:a6:b7:56:ab:99:
95:fe:7f:67:40:e2:be:d0:a5:a8:87:d1:28:cb:13:51:2f:d8:
3d:4e:1c:fc:fa:de:2a:05:86:8c:00:0a:f1:ec:f3:07:e1:01:
b3:2e:71:7e:a5:c7:57:03:85:64:34:82:25:67:8c:1c:5e:99:
c2:39:10:10:f2:f7:b8:25:c9:37:25:1f:46:c3:1a:0b:76:db:
16:da:66:ec:5a:4f:11:c8:ab:25:3c:fa:a3:a2:08:84:39:ea:
28:0e:18:46:94:64:1f:b9:3a:37:da:91:9d:91:8c:76:a2:ac:
ed:92:56:14:24:c6:e8:61:67:38:41:63:bd:0d:ca:c4:e6:9f:
34:30:6e:e5:80:4a:4e:7f:4b:d5:85:a4:8b:5c:92:18:60:bd:
a6:b7:ca:ee:81:14:81:ec:3a:a8:b0:7f:7b:d5:0d:28:a2:07:
6a:9a:53:9b:df:d6:2e:10:7a:55:7e:ba:8a:1c:e5:35:2d:28:
7f:57:8e:3f:78:d5:66:3b:3d:ff:2d:e4:6f:e6:d0:71:31:fd:
19:1a:48:a5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYULJoqRHDT574xDcft6DSb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MDNjNDBmNzdiYzg4ZmFmMjA5ZjMxZDM2MWViYmFiNWNh
ZWFjNGEwHhcNMjIxMjEzMTEwMjMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTMyOWMyZDQzMTgwNWE3M2RmNzNmYTFjZjkyMWNjYjQxYzMyZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYCP3U8v8e7fCc4PcV5Z+4N8YCmD
97dzUSdrsUuDId2hRVReNtM9raPccBCDneQxnkAqRMsV/0JbMx9/JPkec3Rv122d
vKFrLYmNsPOoV17Dq8XRqxSV0ugFNLjS+PSI4NaT0HUSgEP0Zoi2Ua2STWMZy89Z
H9Jj12VbtKvjFDUCqXIQRHtF4RdiBULNj+JbXYa92DiDY9BRDNECmYC1v++J0Ksh
SQ2XLbghUKEYCNDCbYxXGrFpEjdm9DQwL6yyxFAp7oTsi+ifuxx+xFZ6ysHzoOtB
AMefw6j5oIqxghV4MD6TmgzKUJdeMD1PoVb+cj8n5KZlD12/wOs0T9ltaQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNkynC1DGAWnPfc/oc+SHMtBwy5bMB8GA1UdIwQY
MBaAFJgDxA93vIj68gnzHTYeu6tcrqxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUFQRUQzZThpUHJ5Q2ZNZE5oNjdxMXl1ckVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iYWQ0YTAtM2U5Yi00NzY0LThhMjQt
ZjNhMjZmMDU1ZjRlLzEvMlRLY0xVTVlCYWM5OXotaHo1SWN5MEhETGxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iYWQ0YTAtM2U5Yi00NzY0LThhMjQtZjNhMjZmMDU1ZjRl
LzEvbUFQRUQzZThpUHJ5Q2ZNZE5oNjdxMXl1ckVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGfAmA
AwcAIAEGfAmEMA0GCSqGSIb3DQEBCwUAA4IBAQCvjWFvdoyxAnlf0aHc9TaQMXtn
hQIukqkgK0BpSito0R5YW+BZqSA3jxH4po7ftJq+prdWq5mV/n9nQOK+0KWoh9Eo
yxNRL9g9Thz8+t4qBYaMAArx7PMH4QGzLnF+pcdXA4VkNIIlZ4wcXpnCORAQ8ve4
Jck3JR9GwxoLdtsW2mbsWk8RyKslPPqjogiEOeooDhhGlGQfuTo32pGdkYx2oqzt
klYUJMboYWc4QWO9DcrE5p80MG7lgEpOf0vVhaSLXJIYYL2mt8rugRSB7DqosH97
1Q0oogdqmlOb39YuEHpVfrqKHOU1LSh/V44/eNVmOz3/LeRv5tBxMf0ZGkil
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:01 2024 by rpki-client on console-fra.rpki-client.org