Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/KaWjR_gDwPWq8Sezlz8AdAALW_M.roa
File: KaWjR_gDwPWq8Sezlz8AdAALW_M.roa (raw, json)
Hash identifier: 1QgJCVw3jvEmwKaotIA1vUQfbS+WGn0imEOtjeYZEf4=
Subject key identifier: 29:A5:A3:47:F8:03:C0:F5:AA:F1:27:B3:97:3F:00:74:00:0B:5B:F3
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 097C1D09
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/KaWjR_gDwPWq8Sezlz8AdAALW_M.roa
Signing time: Sat 01 Jan 2022 09:04:07 +0000
ROA not before: Sat 01 Jan 2022 09:04:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210903
IP address blocks: 2a0e:aa07:e200::/44 maxlen: 48
2a0e:aa07:e025::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159128841 (0x97c1d09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 09:04:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29a5a347f803c0f5aaf127b3973f0074000b5bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:a6:66:32:18:97:27:b8:cd:62:8e:5a:d8:
2e:08:6a:9d:bc:ce:bc:e5:9b:63:11:db:dc:a3:02:
44:74:06:3e:2a:8d:03:93:09:89:d5:20:b8:46:98:
eb:4d:74:f7:17:11:b7:ab:dd:f3:cd:f6:3a:23:e2:
2d:7c:e4:a2:dc:19:de:e4:3d:50:96:7e:96:a5:88:
87:41:8d:e6:02:b0:c6:df:93:43:75:9c:47:e0:f0:
fe:ee:da:ea:0c:32:54:c5:08:8c:8e:ff:1d:32:74:
40:e1:46:ac:18:a4:b0:09:f1:63:8c:b1:20:fc:d7:
b4:1f:db:de:00:e6:0f:e8:84:c6:5c:e1:b3:7c:b1:
a3:59:36:d5:7e:50:24:2e:aa:b0:24:18:25:f8:74:
c4:f7:4d:0b:30:e0:1d:d2:84:c8:c5:a3:2c:69:0c:
84:15:9d:49:8d:a2:ed:e3:d6:79:59:36:cf:a9:3e:
ad:10:67:bd:bd:67:db:da:19:68:6a:8b:a5:11:c4:
ed:18:34:39:fe:53:41:2a:6e:8d:c7:bf:64:20:2a:
29:53:54:f7:e9:f5:a9:50:54:af:e2:27:2f:48:f3:
03:cf:e2:78:aa:57:2b:d0:70:01:a8:e9:6c:84:f3:
31:a1:da:81:80:f7:64:32:3b:13:c7:ad:e5:d1:9f:
c2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A5:A3:47:F8:03:C0:F5:AA:F1:27:B3:97:3F:00:74:00:0B:5B:F3
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/KaWjR_gDwPWq8Sezlz8AdAALW_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e025::/48
2a0e:aa07:e200::/44
Signature Algorithm: sha256WithRSAEncryption
6e:d2:2f:d6:31:d0:cb:3d:1b:fe:ea:95:43:70:94:56:8b:40:
c9:54:ed:34:f4:60:d9:92:4f:95:48:06:1b:77:42:9e:ca:63:
40:8c:55:60:b4:29:b6:19:0f:d9:0e:c4:e1:3a:21:e1:b4:59:
1b:32:83:5b:03:64:e3:41:94:e2:14:1d:ba:4f:2f:3f:74:ae:
40:a6:58:3b:31:8c:6a:cf:23:71:1f:58:82:92:c6:d3:04:f0:
84:f5:54:88:58:13:a2:cd:7b:4f:8d:0f:56:fa:c1:7a:17:49:
e2:95:51:b0:e6:3e:45:fc:89:53:03:5e:e2:a3:56:29:d5:d0:
65:7e:6e:f6:b3:1e:21:1a:5b:db:ec:44:ee:64:de:be:54:8f:
df:06:11:98:d3:94:33:34:76:70:50:7d:79:59:c1:95:65:82:
1a:c3:ca:62:24:b4:b2:6e:e9:e3:e4:c6:74:be:2d:9d:a4:92:
8e:0f:38:f0:dc:64:24:a5:5a:8f:4d:db:7b:c5:5c:5d:0a:ca:
44:3a:db:9d:a9:30:a6:d2:71:db:1a:80:e1:f8:92:e7:41:00:
06:f1:ba:27:47:54:2a:ed:de:72:65:10:c5:12:54:fe:60:07:
0f:1f:e6:f3:db:55:17:e9:95:0a:91:26:86:29:71:b2:97:03:
a2:d3:b3:d4
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIECXwdCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MzYxYjVjZDY5NjgyNWI3NGZjY2JhN2Q5N2MzZDBhMjcyNGVmM2FhMB4XDTIyMDEw
MTA5MDQwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjlhNWEzNDdmODAz
YzBmNWFhZjEyN2IzOTczZjAwNzQwMDBiNWJmMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJmRpmYyGJcnuM1ijlrYLghqnbzOvOWbYxHb3KMCRHQGPiqN
A5MJidUguEaY60109xcRt6vd8832OiPiLXzkotwZ3uQ9UJZ+lqWIh0GN5gKwxt+T
Q3WcR+Dw/u7a6gwyVMUIjI7/HTJ0QOFGrBiksAnxY4yxIPzXtB/b3gDmD+iExlzh
s3yxo1k21X5QJC6qsCQYJfh0xPdNCzDgHdKEyMWjLGkMhBWdSY2i7ePWeVk2z6k+
rRBnvb1n29oZaGqLpRHE7Rg0Of5TQSpujce/ZCAqKVNU9+n1qVBUr+InL0jzA8/i
eKpXK9BwAajpbITzMaHagYD3ZDI7E8et5dGfwkUCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQppaNH+APA9arxJ7OXPwB0AAtb8zAfBgNVHSMEGDAWgBSTYbXNaWglt0/M
un2Xw9Cick7zqjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2syRzF6V2xvSmJkUHpMcDlsOFBRb25KTzg2by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2YvNzJiZjJmLThlMzQtNDhhMi04NDlhLWE1NDFkMWJjZWUxOS8x
L0thV2pSX2dEd1BXcThTZXpsejhBZEFBTFdfTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Yv
NzJiZjJmLThlMzQtNDhhMi04NDlhLWE1NDFkMWJjZWUxOS8xL2syRzF6V2xvSmJk
UHpMcDlsOFBRb25KTzg2by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoOqgfgJQMHBCoOqgfiADANBgkq
hkiG9w0BAQsFAAOCAQEAbtIv1jHQyz0b/uqVQ3CUVotAyVTtNPRg2ZJPlUgGG3dC
nspjQIxVYLQpthkP2Q7E4Toh4bRZGzKDWwNk40GU4hQduk8vP3SuQKZYOzGMas8j
cR9YgpLG0wTwhPVUiFgTos17T40PVvrBehdJ4pVRsOY+RfyJUwNe4qNWKdXQZX5u
9rMeIRpb2+xE7mTevlSP3wYRmNOUMzR2cFB9eVnBlWWCGsPKYiS0sm7p4+TGdL4t
naSSjg848NxkJKVaj03be8VcXQrKRDrbnakwptJx2xqA4fiS50EABvG6J0dUKu3e
cmUQxRJU/mAHDx/m89tVF+mVCpEmhilxspcDotOz1A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org