Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/M_ClRoWRhs3qjclD_HkCuJzKIkA.roa
File: M_ClRoWRhs3qjclD_HkCuJzKIkA.roa (raw, json)
Hash identifier: MSGEv0ah0l7AGjIZfgi6OH2RiqBkDXgW4hcuAELA88o=
Subject key identifier: 33:F0:A5:46:85:91:86:CD:EA:8D:C9:43:FC:79:02:B8:9C:CA:22:40
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018389D60A1F02018C96C01E97DFC02E86AF
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/M_ClRoWRhs3qjclD_HkCuJzKIkA.roa
Signing time: Thu 29 Sep 2022 15:20:49 +0000
ROA not before: Thu 29 Sep 2022 15:20:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205455
IP address blocks: 2a0e:aa07:e04e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:89:d6:0a:1f:02:01:8c:96:c0:1e:97:df:c0:2e:86:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Sep 29 15:20:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33f0a546859186cdea8dc943fc7902b89cca2240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:21:33:4a:04:c5:52:1b:28:3b:34:9e:d0:
09:13:85:e6:55:c8:12:3e:03:a3:89:cb:f4:9d:1e:
c9:6d:15:71:d4:d0:f6:e4:0e:b2:a8:0b:53:71:77:
b0:0c:79:8b:ee:0f:e0:e2:84:6b:1d:8d:af:fc:69:
00:3d:72:ec:8c:b6:14:dd:74:96:85:62:b9:ad:4e:
7d:30:59:e8:81:55:2f:3c:7a:95:e6:dc:74:c0:8c:
ea:67:a0:6e:bb:56:63:0b:9a:ae:a6:0c:99:75:58:
13:b1:20:cc:49:32:f6:be:de:0b:4e:60:f8:61:d0:
95:65:9c:3e:11:0e:37:67:27:17:84:f4:27:4d:0b:
24:d0:70:77:46:b2:17:b0:fc:2e:a7:4d:84:45:9b:
06:1c:2d:dc:f4:b5:b9:e7:80:c0:aa:b3:1f:ec:57:
74:1c:aa:d7:08:8b:7c:86:32:aa:2e:3a:70:05:8e:
bb:7d:42:6e:6e:3c:e3:ae:2e:40:6d:92:c6:e7:1d:
c2:27:4d:40:90:a7:ec:73:b0:0a:9d:25:de:20:a1:
87:81:f2:6b:1f:fb:b7:55:90:9a:7c:61:78:17:8a:
d2:3f:c9:02:28:a2:be:b0:8e:97:cd:42:fe:66:cd:
1c:96:99:09:3f:a2:69:48:73:82:ec:c9:98:14:2a:
75:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F0:A5:46:85:91:86:CD:EA:8D:C9:43:FC:79:02:B8:9C:CA:22:40
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/M_ClRoWRhs3qjclD_HkCuJzKIkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e04e::/48
Signature Algorithm: sha256WithRSAEncryption
be:bd:23:c0:75:89:e4:6b:d2:28:22:1c:46:bd:60:e8:76:f9:
da:2f:44:c9:73:25:84:25:dd:a9:45:0f:a2:f4:ee:57:35:8d:
0f:12:d7:33:2f:16:f9:94:8f:6c:5c:07:04:62:ae:cc:36:96:
ff:72:8a:d6:80:a0:8b:ff:e7:31:a2:38:83:b5:c9:1a:d2:a8:
03:c7:7d:d3:04:45:92:7f:8c:2d:24:73:95:6f:7b:a2:33:fd:
91:ef:5d:4c:31:d4:fa:02:fe:55:03:2e:a8:f1:0c:b0:94:22:
8b:98:ff:ff:15:69:c9:92:2c:96:16:91:ee:1c:bf:1e:ac:e2:
d9:6b:0a:57:53:98:5c:f4:91:cb:06:18:58:3b:b5:8b:4d:30:
d6:78:c2:55:9e:80:f2:2c:45:39:cd:0d:cd:47:8c:ea:f6:0a:
1d:aa:25:3f:ae:d6:2a:89:5d:00:15:f1:13:2b:62:25:de:55:
a6:25:5b:d6:95:22:11:a0:00:f9:2f:9c:30:d8:a2:80:7b:37:
d3:a4:08:43:f0:86:d2:ec:ce:4d:90:d2:12:60:5c:07:85:75:
cf:71:a8:54:14:f3:3c:ac:1f:e2:d2:0b:3e:ea:19:ed:0f:30:
71:27:4a:74:17:5d:4c:b3:e5:13:86:80:13:1e:1f:01:fc:19:
8c:14:c7:bc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYOJ1gofAgGMlsAel9/ALoavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjIwOTI5MTUyMDQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2YwYTU0Njg1OTE4NmNkZWE4ZGM5NDNmYzc5MDJiODljY2EyMjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvUhM0oExVIbKDs0ntAJE4XmVcgS
PgOjicv0nR7JbRVx1ND25A6yqAtTcXewDHmL7g/g4oRrHY2v/GkAPXLsjLYU3XSW
hWK5rU59MFnogVUvPHqV5tx0wIzqZ6Buu1ZjC5qupgyZdVgTsSDMSTL2vt4LTmD4
YdCVZZw+EQ43ZycXhPQnTQsk0HB3RrIXsPwup02ERZsGHC3c9LW554DAqrMf7Fd0
HKrXCIt8hjKqLjpwBY67fUJubjzjri5AbZLG5x3CJ01AkKfsc7AKnSXeIKGHgfJr
H/u3VZCafGF4F4rSP8kCKKK+sI6XzUL+Zs0clpkJP6JpSHOC7MmYFCp1KQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDPwpUaFkYbN6o3JQ/x5AricyiJAMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvTV9DbFJvV1JoczNxamNsRF9Ia0N1SnpLSWtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+BO
MA0GCSqGSIb3DQEBCwUAA4IBAQC+vSPAdYnka9IoIhxGvWDodvnaL0TJcyWEJd2p
RQ+i9O5XNY0PEtczLxb5lI9sXAcEYq7MNpb/corWgKCL/+cxojiDtcka0qgDx33T
BEWSf4wtJHOVb3uiM/2R711MMdT6Av5VAy6o8QywlCKLmP//FWnJkiyWFpHuHL8e
rOLZawpXU5hc9JHLBhhYO7WLTTDWeMJVnoDyLEU5zQ3NR4zq9godqiU/rtYqiV0A
FfETK2Il3lWmJVvWlSIRoAD5L5ww2KKAezfTpAhD8IbS7M5NkNISYFwHhXXPcahU
FPM8rB/i0gs+6hntDzBxJ0p0F11Ms+UThoATHh8B/BmMFMe8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org