Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/M_dOvvxvOHwp0jiGUSeqELBR45k.roa
File: M_dOvvxvOHwp0jiGUSeqELBR45k.roa (raw, json)
Hash identifier: 7FzlT+tgR2ZGV8+6Whr/ch11jBYEZE/k1twCCgeaM38=
Subject key identifier: 33:F7:4E:BE:FC:6F:38:7C:29:D2:38:86:51:27:AA:10:B0:51:E3:99
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 09604297
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/M_dOvvxvOHwp0jiGUSeqELBR45k.roa
Signing time: Sat 01 Jan 2022 09:03:50 +0000
ROA not before: Sat 01 Jan 2022 09:03:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135028
IP address blocks: 2a0e:aa07:f010::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157303447 (0x9604297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 09:03:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33f74ebefc6f387c29d238865127aa10b051e399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:73:36:0f:e2:c6:f2:c2:a7:c6:88:07:37:69:
02:66:af:96:4a:93:69:12:18:81:59:0e:47:35:53:
9b:12:a2:cd:c4:cd:c4:00:de:1e:40:57:4f:fa:f4:
34:12:ab:cb:cd:83:57:49:c6:26:8a:54:f5:6c:ec:
dc:98:f7:3e:ff:59:d5:e0:49:85:ab:67:b7:d8:b9:
f7:73:df:ed:b2:47:23:3f:73:e1:43:7f:57:13:0f:
97:32:a1:f3:8b:28:31:fb:d9:d2:d6:5a:17:f4:0d:
22:ea:82:7c:0f:5d:54:1e:b2:56:c5:f1:82:b1:7e:
18:43:17:93:06:74:57:0c:32:20:3d:02:3e:dc:98:
de:8a:ab:32:11:3e:5b:03:02:e8:dd:24:31:7d:c2:
ec:9d:83:fa:1a:4f:77:49:03:68:60:a2:0b:43:7b:
4f:59:c2:a4:2a:5e:0a:86:88:28:a0:2d:a7:b9:d2:
e6:e0:ac:73:5d:c1:cd:f7:a2:c5:cc:7a:c7:cb:85:
9e:71:88:d2:46:ff:9a:7d:12:ba:1e:94:4b:5e:05:
b0:4c:43:f3:a1:c2:4f:e5:04:17:59:04:c8:22:7b:
41:7f:57:51:b4:5f:3f:10:23:78:39:33:b5:ab:ea:
db:40:aa:1b:22:52:24:2e:10:ee:e9:1b:12:ba:86:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F7:4E:BE:FC:6F:38:7C:29:D2:38:86:51:27:AA:10:B0:51:E3:99
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/M_dOvvxvOHwp0jiGUSeqELBR45k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:f010::/44
Signature Algorithm: sha256WithRSAEncryption
89:45:4d:08:37:c3:65:4f:f3:29:fb:c0:d3:7a:e2:de:f9:4e:
74:f2:f1:8b:38:44:05:9f:3e:50:5b:e6:fc:2a:15:42:a6:a6:
b3:28:64:51:e8:a2:8a:4a:e7:d7:a1:a9:7e:0e:52:0f:1c:9b:
8b:6b:3c:0f:85:0a:5e:fb:8c:68:70:5f:0a:db:0f:2a:ff:bf:
55:0a:cc:a7:f9:22:23:34:7b:2b:5c:be:d7:d9:34:10:06:9d:
f3:86:da:06:52:28:61:f9:56:f2:16:1e:ea:ba:2a:89:16:b4:
dc:ca:1e:64:ec:83:c1:0f:4f:89:2b:53:9f:ea:3e:72:f5:e4:
6d:ae:e4:64:b7:89:60:ac:bb:0e:2a:53:81:cc:65:36:53:6c:
0e:9f:9f:8b:f1:af:5d:0a:33:4c:0c:b4:d1:aa:e2:c8:78:3e:
57:68:e9:54:44:c8:d7:e2:d8:f8:b3:37:8c:af:a9:ab:b4:80:
79:99:63:37:68:e8:31:55:32:c1:8d:76:89:65:bb:35:43:7d:
cb:90:77:5f:87:7d:98:79:93:88:bf:13:b2:56:cc:24:2a:5f:
8d:23:04:b9:86:81:75:8e:fc:7a:bb:b9:48:7c:96:8e:50:be:
0f:e4:5e:a1:e1:32:6b:53:25:b6:43:ab:35:b7:dd:a6:57:26:
71:d3:2b:4d
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECWBClzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MzYxYjVjZDY5NjgyNWI3NGZjY2JhN2Q5N2MzZDBhMjcyNGVmM2FhMB4XDTIyMDEw
MTA5MDM1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzNmNzRlYmVmYzZm
Mzg3YzI5ZDIzODg2NTEyN2FhMTBiMDUxZTM5OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO5zNg/ixvLCp8aIBzdpAmavlkqTaRIYgVkORzVTmxKizcTN
xADeHkBXT/r0NBKry82DV0nGJopU9Wzs3Jj3Pv9Z1eBJhatnt9i593Pf7bJHIz9z
4UN/VxMPlzKh84soMfvZ0tZaF/QNIuqCfA9dVB6yVsXxgrF+GEMXkwZ0VwwyID0C
PtyY3oqrMhE+WwMC6N0kMX3C7J2D+hpPd0kDaGCiC0N7T1nCpCpeCoaIKKAtp7nS
5uCsc13Bzfeixcx6x8uFnnGI0kb/mn0Suh6US14FsExD86HCT+UEF1kEyCJ7QX9X
UbRfPxAjeDkztavq20CqGyJSJC4Q7ukbErqGdSECAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQz906+/G84fCnSOIZRJ6oQsFHjmTAfBgNVHSMEGDAWgBSTYbXNaWglt0/M
un2Xw9Cick7zqjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2syRzF6V2xvSmJkUHpMcDlsOFBRb25KTzg2by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2YvNzJiZjJmLThlMzQtNDhhMi04NDlhLWE1NDFkMWJjZWUxOS8x
L01fZE92dnh2T0h3cDBqaUdVU2VxRUxCUjQ1ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Yv
NzJiZjJmLThlMzQtNDhhMi04NDlhLWE1NDFkMWJjZWUxOS8xL2syRzF6V2xvSmJk
UHpMcDlsOFBRb25KTzg2by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoOqgfwEDANBgkqhkiG9w0BAQsF
AAOCAQEAiUVNCDfDZU/zKfvA03ri3vlOdPLxizhEBZ8+UFvm/CoVQqamsyhkUeii
ikrn16Gpfg5SDxybi2s8D4UKXvuMaHBfCtsPKv+/VQrMp/kiIzR7K1y+19k0EAad
84baBlIoYflW8hYe6roqiRa03MoeZOyDwQ9PiStTn+o+cvXkba7kZLeJYKy7DipT
gcxlNlNsDp+fi/GvXQozTAy00ariyHg+V2jpVETI1+LY+LM3jK+pq7SAeZljN2jo
MVUywY12iWW7NUN9y5B3X4d9mHmTiL8TslbMJCpfjSMEuYaBdY78eru5SHyWjlC+
D+ReoeEya1MltkOrNbfdplcmcdMrTQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org