Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/STAJxhwoXIKSJ_RmS_QMXbGxA9U.roa
File: STAJxhwoXIKSJ_RmS_QMXbGxA9U.roa (raw, json)
Hash identifier: r+O4ZulXXKJ/cIQeGyKhQ76os9oKV4yY8KVbKuDe6Rk=
Subject key identifier: 49:30:09:C6:1C:28:5C:82:92:27:F4:66:4B:F4:0C:5D:B1:B1:03:D5
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0979C63C
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/STAJxhwoXIKSJ_RmS_QMXbGxA9U.roa
Signing time: Sat 01 Jan 2022 09:04:05 +0000
ROA not before: Sat 01 Jan 2022 09:04:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210815
IP address blocks: 2a0e:aa07:e027::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158975548 (0x979c63c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 09:04:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=493009c61c285c829227f4664bf40c5db1b103d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:ba:b7:80:13:04:ab:cd:87:e4:3a:6c:6d:
c1:2f:3b:87:21:d1:a5:80:c6:90:81:07:c3:24:91:
27:4b:0e:4b:5c:86:70:15:dc:18:9a:a1:11:a2:f1:
2a:a5:fc:46:8e:e1:56:70:2a:bc:09:8e:7d:3e:57:
ee:14:6f:84:b9:35:da:c5:b8:af:48:fd:3c:d7:91:
88:aa:1c:4a:47:99:b4:c0:c9:59:07:a4:99:e2:dc:
29:e2:c3:f5:13:76:dd:f2:33:aa:d9:d1:62:48:15:
10:2c:af:1c:70:d2:60:e8:fb:11:e9:e6:cd:1b:cb:
1b:5f:52:a4:02:2b:6d:96:9e:3c:2f:66:be:f6:2f:
41:cb:ce:a9:f5:29:5d:05:2c:0d:d6:11:c1:84:db:
38:e3:df:fb:b8:b3:ac:3e:28:5e:67:a6:26:96:6a:
5c:a0:a4:8c:4a:b7:60:53:66:70:e0:39:11:62:d6:
cd:c1:ee:e3:24:16:c8:7c:a3:d7:e2:c9:e5:ac:f6:
1c:7f:0b:c4:a0:c0:ca:fd:89:5d:28:64:87:87:02:
3c:a1:6d:db:a2:da:33:4c:a6:6f:bb:27:1f:2e:30:
13:36:9d:16:16:ec:36:87:81:71:f5:a2:b7:0b:4e:
c1:c4:ef:d1:72:85:7f:0b:eb:9b:3b:9e:58:93:24:
ac:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:30:09:C6:1C:28:5C:82:92:27:F4:66:4B:F4:0C:5D:B1:B1:03:D5
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/STAJxhwoXIKSJ_RmS_QMXbGxA9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e027::/48
Signature Algorithm: sha256WithRSAEncryption
88:f9:b7:5c:7d:18:63:ac:cd:93:4a:4d:84:90:0e:94:eb:c0:
94:5d:ab:1a:45:0c:ae:81:e3:df:af:4b:05:2e:b3:30:9a:81:
20:c7:c6:5f:b6:98:31:73:11:d2:3b:19:c9:3d:d4:d7:5f:c6:
f6:17:13:2f:e0:71:9b:35:b5:de:e3:bc:cd:09:b8:5d:43:b1:
a6:eb:cd:68:bd:01:99:f4:b5:2a:50:c4:7c:c3:f6:fc:cb:77:
40:23:05:77:63:8d:34:0b:4e:79:02:68:73:78:29:5d:ea:26:
c8:61:a8:d0:28:c6:cd:87:7a:3f:2c:40:26:19:55:59:1d:c2:
c2:ef:48:aa:ec:a6:4f:40:83:b6:46:34:09:93:b7:ba:ea:58:
42:3c:6c:d3:64:a2:ce:88:76:dd:e2:62:1d:9d:bf:e6:e5:39:
4e:64:9c:6c:8f:83:e5:a6:8f:5b:c0:93:53:fd:8d:a7:6e:c8:
f9:b2:10:12:0e:00:9f:7d:13:58:bd:f3:55:cb:cc:f4:29:b9:
f7:10:0b:70:ad:91:6e:28:a4:c5:20:85:4c:36:98:99:31:3a:
df:dc:39:76:59:5f:fb:2d:b3:d0:0d:1a:11:4a:d7:84:47:8c:
27:fe:26:67:2f:1d:ac:bd:00:95:88:84:8e:33:84:d4:b2:85:
cc:1a:3f:f6
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECXnGPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MzYxYjVjZDY5NjgyNWI3NGZjY2JhN2Q5N2MzZDBhMjcyNGVmM2FhMB4XDTIyMDEw
MTA5MDQwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDkzMDA5YzYxYzI4
NWM4MjkyMjdmNDY2NGJmNDBjNWRiMWIxMDNkNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMLNureAEwSrzYfkOmxtwS87hyHRpYDGkIEHwySRJ0sOS1yG
cBXcGJqhEaLxKqX8Ro7hVnAqvAmOfT5X7hRvhLk12sW4r0j9PNeRiKocSkeZtMDJ
WQekmeLcKeLD9RN23fIzqtnRYkgVECyvHHDSYOj7EenmzRvLG19SpAIrbZaePC9m
vvYvQcvOqfUpXQUsDdYRwYTbOOPf+7izrD4oXmemJpZqXKCkjEq3YFNmcOA5EWLW
zcHu4yQWyHyj1+LJ5az2HH8LxKDAyv2JXShkh4cCPKFt26LaM0ymb7snHy4wEzad
FhbsNoeBcfWitwtOwcTv0XKFfwvrmzueWJMkrD8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRJMAnGHChcgpIn9GZL9AxdsbED1TAfBgNVHSMEGDAWgBSTYbXNaWglt0/M
un2Xw9Cick7zqjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2syRzF6V2xvSmJkUHpMcDlsOFBRb25KTzg2by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2YvNzJiZjJmLThlMzQtNDhhMi04NDlhLWE1NDFkMWJjZWUxOS8x
L1NUQUp4aHdvWElLU0pfUm1TX1FNWGJHeEE5VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Yv
NzJiZjJmLThlMzQtNDhhMi04NDlhLWE1NDFkMWJjZWUxOS8xL2syRzF6V2xvSmJk
UHpMcDlsOFBRb25KTzg2by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoOqgfgJzANBgkqhkiG9w0BAQsF
AAOCAQEAiPm3XH0YY6zNk0pNhJAOlOvAlF2rGkUMroHj369LBS6zMJqBIMfGX7aY
MXMR0jsZyT3U11/G9hcTL+BxmzW13uO8zQm4XUOxpuvNaL0BmfS1KlDEfMP2/Mt3
QCMFd2ONNAtOeQJoc3gpXeomyGGo0CjGzYd6PyxAJhlVWR3Cwu9IquymT0CDtkY0
CZO3uupYQjxs02Sizoh23eJiHZ2/5uU5TmScbI+D5aaPW8CTU/2Np27I+bIQEg4A
n30TWL3zVcvM9Cm59xALcK2RbiikxSCFTDaYmTE639w5dllf+y2z0A0aEUrXhEeM
J/4mZy8drL0AlYiEjjOE1LKFzBo/9g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org