Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/0O1ZAhE7pW4sCETlZuRwOkJsYRQ.roa
File: 0O1ZAhE7pW4sCETlZuRwOkJsYRQ.roa (raw, json)
Hash identifier: 6CL5SSGamz97IlhonBQNAyMKhypc102oXrIAhjx21Eo=
Subject key identifier: D0:ED:59:02:11:3B:A5:6E:2C:08:44:E5:66:E4:70:3A:42:6C:61:14
Certificate issuer: /CN=d8a56e2d63ac5da9bed35da01cbfad225f04beb0
Certificate serial: 119A2823
Authority key identifier: D8:A5:6E:2D:63:AC:5D:A9:BE:D3:5D:A0:1C:BF:AD:22:5F:04:BE:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/0O1ZAhE7pW4sCETlZuRwOkJsYRQ.roa
Signing time: Sat 01 Jan 2022 07:57:57 +0000
ROA not before: Sat 01 Jan 2022 07:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5608
IP address blocks: 2a00:9b40:100::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295315491 (0x119a2823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a56e2d63ac5da9bed35da01cbfad225f04beb0
Validity
Not Before: Jan 1 07:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0ed5902113ba56e2c0844e566e4703a426c6114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fc:26:13:a5:95:53:26:be:a2:9d:54:21:3c:
27:ec:98:db:18:1d:55:97:85:aa:db:10:5a:e6:80:
0c:22:1c:5a:5d:e2:df:a4:8d:5f:ca:1e:35:91:00:
6f:f2:2f:f0:d9:49:27:20:d1:f9:37:e1:b7:4c:52:
1b:b4:9d:64:6d:68:ab:0f:3a:ec:f5:2f:d8:6b:88:
12:99:5c:58:cc:31:ce:fe:c8:2f:50:4f:22:c4:cf:
57:37:34:46:78:a6:af:57:f5:0b:3f:40:23:9f:02:
55:b4:a2:95:03:80:16:95:e9:1b:86:9d:c3:e0:04:
9e:8d:8b:e0:3e:38:99:2b:b9:1a:df:11:39:fe:e6:
44:c0:21:5a:c8:5b:ef:21:7a:d7:4f:28:97:46:81:
dc:d6:c8:1b:08:32:92:0b:36:85:e7:65:1d:02:7d:
96:15:af:6c:bb:fb:cb:4b:7d:b5:6e:08:f1:36:41:
bc:7b:00:72:d1:64:91:8c:ab:5e:4e:57:06:bd:7a:
ab:15:a3:6e:79:9a:d7:71:e4:c6:b8:b7:bf:f2:e4:
6d:42:01:cc:28:ee:fb:fc:5c:3e:28:bd:b2:ec:3d:
9b:b3:11:60:69:57:7f:50:90:34:ea:19:a0:a2:54:
0f:63:a9:74:64:a0:96:fb:e1:0d:5a:8c:86:6f:3d:
9e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:ED:59:02:11:3B:A5:6E:2C:08:44:E5:66:E4:70:3A:42:6C:61:14
X509v3 Authority Key Identifier:
keyid:D8:A5:6E:2D:63:AC:5D:A9:BE:D3:5D:A0:1C:BF:AD:22:5F:04:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/0O1ZAhE7pW4sCETlZuRwOkJsYRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:9b40:100::/40
Signature Algorithm: sha256WithRSAEncryption
14:4d:c4:7f:75:25:01:44:e3:b1:a9:74:73:85:6a:57:d4:0e:
33:87:9c:34:2c:27:e2:e9:68:08:3f:b8:c0:0d:1f:9c:ae:07:
ad:2a:d4:33:fe:13:ef:ad:d7:32:ab:7d:83:69:af:e1:89:96:
bc:a6:65:87:cd:2f:a7:95:9d:78:f3:9b:ba:2b:f9:10:aa:72:
83:db:fc:04:dd:ee:25:99:ce:32:1a:31:d8:49:f6:b0:a0:73:
36:f4:43:46:7a:62:8b:5a:f9:03:08:cd:d5:86:b3:2d:59:17:
fc:b2:1a:e7:be:ae:e0:18:61:27:95:90:48:07:fe:b5:0d:dd:
ba:b6:4f:44:19:81:5a:1c:ab:aa:6f:1c:c0:78:08:38:ac:70:
ce:a9:35:b0:1b:91:37:c6:c2:8f:cc:ac:22:80:34:80:d9:00:
df:10:72:4c:92:d5:1d:7c:c7:a9:4a:14:b5:4f:10:19:61:5c:
60:57:ad:29:b0:55:3e:f7:ca:e3:c6:be:df:5f:e1:ea:d0:3c:
b3:ea:62:05:29:d0:f7:ea:37:5a:a5:40:bc:19:22:0d:fd:11:
5b:9a:bb:c8:e8:7c:12:24:d8:14:bf:4d:bd:4e:9d:d5:2a:08:
23:28:eb:fb:c2:25:c0:ea:1d:5c:45:13:17:db:87:4d:c0:5c:
56:1e:bc:97
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEEZooIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OGE1NmUyZDYzYWM1ZGE5YmVkMzVkYTAxY2JmYWQyMjVmMDRiZWIwMB4XDTIyMDEw
MTA3NTc1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDBlZDU5MDIxMTNi
YTU2ZTJjMDg0NGU1NjZlNDcwM2E0MjZjNjExNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIr8JhOllVMmvqKdVCE8J+yY2xgdVZeFqtsQWuaADCIcWl3i
36SNX8oeNZEAb/Iv8NlJJyDR+Tfht0xSG7SdZG1oqw867PUv2GuIEplcWMwxzv7I
L1BPIsTPVzc0Rnimr1f1Cz9AI58CVbSilQOAFpXpG4adw+AEno2L4D44mSu5Gt8R
Of7mRMAhWshb7yF6108ol0aB3NbIGwgykgs2hedlHQJ9lhWvbLv7y0t9tW4I8TZB
vHsActFkkYyrXk5XBr16qxWjbnma13Hkxri3v/LkbUIBzCju+/xcPii9suw9m7MR
YGlXf1CQNOoZoKJUD2OpdGSglvvhDVqMhm89nhECAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBTQ7VkCETulbiwIROVm5HA6QmxhFDAfBgNVHSMEGDAWgBTYpW4tY6xdqb7T
XaAcv60iXwS+sDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJLVnVMV09zWGFtLTAxMmdITC10SWw4RXZyQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODAvNzQxNzdjLTVlM2ItNDgzNi04ODY3LWU4ZDQ3YmJhMjViZi8x
LzBPMVpBaEU3cFc0c0NFVGxadVJ3T2tKc1lSUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAv
NzQxNzdjLTVlM2ItNDgzNi04ODY3LWU4ZDQ3YmJhMjViZi8xLzJLVnVMV09zWGFt
LTAxMmdITC10SWw4RXZyQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoAm0ABMA0GCSqGSIb3DQEBCwUA
A4IBAQAUTcR/dSUBROOxqXRzhWpX1A4zh5w0LCfi6WgIP7jADR+crgetKtQz/hPv
rdcyq32Daa/hiZa8pmWHzS+nlZ1485u6K/kQqnKD2/wE3e4lmc4yGjHYSfawoHM2
9ENGemKLWvkDCM3VhrMtWRf8shrnvq7gGGEnlZBIB/61Dd26tk9EGYFaHKuqbxzA
eAg4rHDOqTWwG5E3xsKPzKwigDSA2QDfEHJMktUdfMepShS1TxAZYVxgV60psFU+
98rjxr7fX+Hq0Dyz6mIFKdD36jdapUC8GSIN/RFbmrvI6HwSJNgUv029Tp3VKggj
KOv7wiXA6h1cRRMX24dNwFxWHryX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:29 2024 by rpki-client on console-ams.rpki-client.org