Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/sckByuLru6fT6CRHvX051DpZDbc.roa
File: sckByuLru6fT6CRHvX051DpZDbc.roa (raw, json)
Hash identifier: uBWzOfMV+kVZwzpJjXDYpuc64LPtMYJGZ8vi2/t0tNo=
Subject key identifier: B1:C9:01:CA:E2:EB:BB:A7:D3:E8:24:47:BD:7D:39:D4:3A:59:0D:B7
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 18CF5356
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/sckByuLru6fT6CRHvX051DpZDbc.roa
Signing time: Fri 01 Jul 2022 16:33:25 +0000
ROA not before: Fri 01 Jul 2022 16:33:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61335
IP address blocks: 2a00:fd40:c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416240470 (0x18cf5356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jul 1 16:33:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1c901cae2ebbba7d3e82447bd7d39d43a590db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d6:6a:51:bb:a1:3b:80:46:75:68:e6:cc:72:
61:9e:95:bf:ff:3e:42:89:38:59:0d:04:7f:14:ce:
9f:01:c5:48:dc:e4:25:98:c2:df:dc:64:39:9c:51:
38:f0:2f:35:87:bb:e5:09:1d:f0:b6:1b:b7:62:49:
9d:b6:66:c8:95:db:25:85:7e:c4:00:06:a3:4e:f7:
80:c2:d4:20:24:9b:e6:6f:5a:d6:4a:42:70:5f:38:
e1:85:64:66:91:ad:62:ba:23:07:54:72:ee:6e:22:
5f:ad:9f:60:1c:65:65:06:65:da:f9:ba:7d:42:62:
80:5c:54:25:c3:47:7d:4c:dc:11:59:5c:0b:0f:dd:
cd:a3:e2:d6:23:de:ff:5c:f3:89:0c:7c:7e:37:b2:
7e:33:08:90:ad:7a:08:a3:d3:dd:c7:c9:c4:5c:05:
74:7d:d9:8f:1e:ba:70:a6:de:b0:30:ce:5d:b3:2e:
15:f7:0f:06:87:b4:e7:72:7c:d2:58:e1:f2:09:d1:
d3:2f:81:86:24:0c:19:49:e6:e0:5b:06:69:be:ce:
82:1e:69:0a:cb:87:44:74:0e:32:81:d8:be:8d:cc:
43:f4:be:e3:c3:c7:aa:f8:34:06:03:ce:b7:53:6b:
2a:9a:c3:e1:71:c5:d8:52:be:06:15:c9:b9:5d:2e:
01:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C9:01:CA:E2:EB:BB:A7:D3:E8:24:47:BD:7D:39:D4:3A:59:0D:B7
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/sckByuLru6fT6CRHvX051DpZDbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:fd40:c::/48
Signature Algorithm: sha256WithRSAEncryption
90:4d:a1:7d:fc:7d:4b:22:25:fe:e6:2f:53:74:b0:d9:72:ee:
07:72:2b:e2:e3:00:1f:ff:67:2d:30:8b:00:78:b8:aa:2b:79:
56:4d:d5:c3:56:7f:1c:6e:ef:22:d5:68:b8:8d:9b:78:33:57:
da:ed:a7:48:42:bc:48:83:2f:0c:01:99:4d:f8:cc:13:16:d7:
c7:e6:90:ca:a1:77:d4:01:91:36:cb:b4:e7:be:38:88:16:ab:
b4:1e:c9:0a:ec:2b:6f:d8:1f:f5:e2:a9:65:ac:41:be:13:ba:
83:7e:92:61:17:5f:e8:a6:a2:a1:f7:41:20:eb:58:ec:e0:8d:
63:13:30:76:4b:0f:33:72:e6:0e:75:a1:65:a9:46:65:1e:cb:
96:87:24:03:a1:48:6b:8e:79:be:38:9f:6c:d7:3c:af:44:48:
85:a1:9f:1c:93:c3:f7:db:1b:41:f9:d8:38:c0:2e:28:bd:b3:
33:12:32:33:5b:01:cb:59:c3:b3:69:c8:cc:d0:a9:f8:0f:e6:
a5:b4:79:c0:bd:68:f7:7c:fd:f0:d5:28:f0:f4:7c:fd:90:0a:
11:1a:72:ba:d1:91:7a:c8:fe:03:3e:72:df:9f:7e:02:b1:a7:
d0:2b:d5:7e:b2:28:ba:20:b8:57:9f:80:b2:d9:91:bc:cb:a7:
79:70:d4:32
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEGM9TVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ODg1ZTg4NGMyZmM3YTc1ZDEyZGQxZGVhNDljZTIzNDljNDcwNjdlMB4XDTIyMDcw
MTE2MzMyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjFjOTAxY2FlMmVi
YmJhN2QzZTgyNDQ3YmQ3ZDM5ZDQzYTU5MGRiNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOPWalG7oTuARnVo5sxyYZ6Vv/8+Qok4WQ0EfxTOnwHFSNzk
JZjC39xkOZxROPAvNYe75Qkd8LYbt2JJnbZmyJXbJYV+xAAGo073gMLUICSb5m9a
1kpCcF844YVkZpGtYrojB1Ry7m4iX62fYBxlZQZl2vm6fUJigFxUJcNHfUzcEVlc
Cw/dzaPi1iPe/1zziQx8fjeyfjMIkK16CKPT3cfJxFwFdH3Zjx66cKbesDDOXbMu
FfcPBoe053J80ljh8gnR0y+BhiQMGUnm4FsGab7Ogh5pCsuHRHQOMoHYvo3MQ/S+
48PHqvg0BgPOt1NrKprD4XHF2FK+BhXJuV0uAXUCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSxyQHK4uu7p9PoJEe9fTnUOlkNtzAfBgNVHSMEGDAWgBRYheiEwvx6ddEt
0d6knOI0nEcGfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dJWG9oTUw4ZW5YUkxkSGVwSnppTkp4SEJuNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvNmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8x
L3Nja0J5dUxydTZmVDZDUkh2WDA1MURwWkRiYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
NmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8xL1dJWG9oTUw4ZW5Y
UkxkSGVwSnppTkp4SEJuNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoA/UAADDANBgkqhkiG9w0BAQsF
AAOCAQEAkE2hffx9SyIl/uYvU3Sw2XLuB3Ir4uMAH/9nLTCLAHi4qit5Vk3Vw1Z/
HG7vItVouI2beDNX2u2nSEK8SIMvDAGZTfjMExbXx+aQyqF31AGRNsu05744iBar
tB7JCuwrb9gf9eKpZaxBvhO6g36SYRdf6KaiofdBIOtY7OCNYxMwdksPM3LmDnWh
ZalGZR7LlockA6FIa455vjifbNc8r0RIhaGfHJPD99sbQfnYOMAuKL2zMxIyM1sB
y1nDs2nIzNCp+A/mpbR5wL1o93z98NUo8PR8/ZAKERpyutGResj+Az5y359+ArGn
0CvVfrIouiC4V5+AstmRvMuneXDUMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org