Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/cO_fINFK0coVHPmf73y77P6dyYM.roa
File: cO_fINFK0coVHPmf73y77P6dyYM.roa (raw, json)
Hash identifier: RYosRjpzFsOQ3+Q9CLgRMgGAJtPRcCUOJgFXjdihFsA=
Subject key identifier: 70:EF:DF:20:D1:4A:D1:CA:15:1C:F9:9F:EF:7C:BB:EC:FE:9D:C9:83
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0A1E466C
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/cO_fINFK0coVHPmf73y77P6dyYM.roa
Signing time: Thu 10 Mar 2022 12:38:04 +0000
ROA not before: Thu 10 Mar 2022 12:38:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208679
IP address blocks: 2a0e:aa07:e035::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169756268 (0xa1e466c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Mar 10 12:38:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70efdf20d14ad1ca151cf99fef7cbbecfe9dc983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:3e:09:20:1a:3f:7e:6d:0f:c2:8e:27:24:
33:73:6e:f9:61:1a:75:c6:db:4b:a2:94:33:17:cb:
7c:47:f6:00:fe:df:9b:8a:bf:d4:0c:22:88:62:23:
e2:bd:37:25:62:81:8b:7b:fa:d7:75:6d:87:2a:c6:
87:df:6c:d4:7c:24:f9:c5:db:87:53:5f:f3:f2:aa:
a6:c7:04:84:b4:23:9b:9c:3b:a0:9c:e1:c2:91:61:
12:07:43:83:fb:1e:57:97:55:05:d1:1e:aa:ad:12:
28:13:64:94:cd:0b:c1:ab:a0:46:5e:72:e5:45:f5:
d6:b0:98:f8:f5:3a:80:98:8e:20:9f:28:c7:3a:d6:
4b:a6:58:94:a2:94:e1:3d:24:a0:80:ba:e5:f1:15:
72:4f:66:b5:cc:65:c9:66:fc:67:59:a4:17:ad:81:
d0:f8:74:94:28:65:a2:d3:cf:aa:03:00:ab:75:96:
9b:a7:85:aa:2d:8f:4d:b9:dd:e9:a5:1b:a7:77:8a:
5a:85:6a:95:ed:37:3e:f5:29:ca:85:e4:f0:7d:96:
6f:a0:a6:4e:ef:26:ac:0d:7c:e1:3c:52:4e:0d:dc:
1a:5a:bc:87:da:40:02:7b:1e:d1:e7:58:41:ea:0b:
a8:1b:d4:29:b4:78:cd:37:6e:59:08:8f:b7:c5:28:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EF:DF:20:D1:4A:D1:CA:15:1C:F9:9F:EF:7C:BB:EC:FE:9D:C9:83
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/cO_fINFK0coVHPmf73y77P6dyYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e035::/48
Signature Algorithm: sha256WithRSAEncryption
a7:8e:ef:be:5c:43:fe:b4:9f:e5:19:88:dc:0c:48:f6:ea:4a:
48:95:a9:0b:06:18:89:0e:af:0a:f8:25:8f:c2:de:70:0b:89:
08:b9:0a:34:5c:10:9a:ad:e5:5e:44:47:dd:29:8d:f7:e9:3c:
25:77:de:0c:fa:ee:7c:e3:ca:8d:a6:ac:67:83:3d:1b:f5:57:
84:8e:76:a1:63:74:dd:25:08:ae:24:5d:30:c7:96:bd:da:64:
51:e9:ab:78:0d:2c:b4:a7:cf:bd:d5:34:56:bf:e5:5e:24:1b:
59:e4:8e:90:1e:29:b3:83:35:7a:83:00:3b:27:38:2b:4e:67:
cd:16:d2:9d:a1:74:71:30:57:1f:65:a4:51:38:36:98:3c:f9:
c9:7a:93:3d:fe:e1:df:53:f2:61:5e:c3:29:f0:9a:05:4c:f3:
9b:73:c2:9b:b7:0a:eb:dd:40:50:b5:84:34:62:85:29:db:83:
0a:d6:d2:ef:35:4e:20:f6:10:48:ff:8c:fe:e7:5c:46:0b:b9:
99:d5:3b:48:a9:71:e8:41:d3:27:59:de:93:55:3e:bf:0c:3f:
9b:56:5e:a0:4c:c2:09:ca:28:fe:e9:63:70:4b:c3:22:c1:81:
82:aa:9c:85:a4:7f:54:dc:24:c3:86:89:18:ac:6c:df:41:3f:
c6:8b:c8:50
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECh5GbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MzYxYjVjZDY5NjgyNWI3NGZjY2JhN2Q5N2MzZDBhMjcyNGVmM2FhMB4XDTIyMDMx
MDEyMzgwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzBlZmRmMjBkMTRh
ZDFjYTE1MWNmOTlmZWY3Y2JiZWNmZTlkYzk4MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMEmPgkgGj9+bQ/CjickM3Nu+WEadcbbS6KUMxfLfEf2AP7f
m4q/1AwiiGIj4r03JWKBi3v613VthyrGh99s1Hwk+cXbh1Nf8/KqpscEhLQjm5w7
oJzhwpFhEgdDg/seV5dVBdEeqq0SKBNklM0LwaugRl5y5UX11rCY+PU6gJiOIJ8o
xzrWS6ZYlKKU4T0koIC65fEVck9mtcxlyWb8Z1mkF62B0Ph0lChlotPPqgMAq3WW
m6eFqi2PTbnd6aUbp3eKWoVqle03PvUpyoXk8H2Wb6CmTu8mrA184TxSTg3cGlq8
h9pAAnse0edYQeoLqBvUKbR4zTduWQiPt8UoCA0CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRw798g0UrRyhUc+Z/vfLvs/p3JgzAfBgNVHSMEGDAWgBSTYbXNaWglt0/M
un2Xw9Cick7zqjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2syRzF6V2xvSmJkUHpMcDlsOFBRb25KTzg2by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2YvNzJiZjJmLThlMzQtNDhhMi04NDlhLWE1NDFkMWJjZWUxOS8x
L2NPX2ZJTkZLMGNvVkhQbWY3M3k3N1A2ZHlZTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Yv
NzJiZjJmLThlMzQtNDhhMi04NDlhLWE1NDFkMWJjZWUxOS8xL2syRzF6V2xvSmJk
UHpMcDlsOFBRb25KTzg2by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoOqgfgNTANBgkqhkiG9w0BAQsF
AAOCAQEAp47vvlxD/rSf5RmI3AxI9upKSJWpCwYYiQ6vCvglj8LecAuJCLkKNFwQ
mq3lXkRH3SmN9+k8JXfeDPrufOPKjaasZ4M9G/VXhI52oWN03SUIriRdMMeWvdpk
UemreA0stKfPvdU0Vr/lXiQbWeSOkB4ps4M1eoMAOyc4K05nzRbSnaF0cTBXH2Wk
UTg2mDz5yXqTPf7h31PyYV7DKfCaBUzzm3PCm7cK691AULWENGKFKduDCtbS7zVO
IPYQSP+M/udcRgu5mdU7SKlx6EHTJ1nek1U+vww/m1ZeoEzCCcoo/uljcEvDIsGB
gqqchaR/VNwkw4aJGKxs30E/xovIUA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org