Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/AHz65QxaWasw4A6GCfXMiL8D40o.roa
File: AHz65QxaWasw4A6GCfXMiL8D40o.roa (raw, json)
Hash identifier: h02telFNNi3mwg+qBY6fokg3yt6QL0hkKEFL1UB28UI=
Subject key identifier: 00:7C:FA:E5:0C:5A:59:AB:30:E0:0E:86:09:F5:CC:88:BF:03:E3:4A
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 079A9227
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/AHz65QxaWasw4A6GCfXMiL8D40o.roa
Signing time: Sat 01 Jan 2022 08:01:39 +0000
ROA not before: Sat 01 Jan 2022 08:01:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3258
IP address blocks: 2a09:4::/48 maxlen: 48
2a09:2::/48 maxlen: 48
2a09:3::/48 maxlen: 48
2a09:7:2008::/48 maxlen: 48
2a09:5::/48 maxlen: 48
2a09:1::/48 maxlen: 48
2a10:480::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127570471 (0x79a9227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 08:01:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=007cfae50c5a59ab30e00e8609f5cc88bf03e34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:55:8b:d7:73:3c:e4:a5:1e:cd:06:32:9d:
c9:f5:7d:86:bd:a2:f1:04:32:e7:cd:c4:93:f1:92:
6b:f2:cf:ba:37:48:d9:2d:9f:ea:10:79:31:01:a2:
a4:e9:7b:0e:86:1b:90:45:e9:5b:73:31:b7:fb:f6:
79:97:68:97:34:24:8c:e8:2d:fc:54:73:6f:b5:d9:
4f:ff:38:c1:fb:07:21:e3:4b:bc:1b:77:89:7f:c6:
49:a8:99:7b:53:d2:14:09:28:51:b2:1a:9d:aa:90:
c2:ca:41:b9:38:a7:89:23:6b:31:39:91:3f:4e:cc:
80:f2:0c:28:3c:f0:df:2a:55:7d:ca:cd:6e:b8:08:
be:77:17:63:11:5c:f3:6f:11:06:8d:f5:00:74:e5:
e1:4b:88:76:6d:aa:6f:68:6b:70:cc:e3:bd:bb:df:
b4:9c:62:88:09:36:70:d5:a2:e4:7d:a3:b5:4a:0c:
2d:da:ab:cb:69:70:d2:73:eb:a1:73:1a:75:11:a9:
f6:19:ea:7f:09:eb:2c:ae:c7:6e:c5:ff:73:b6:46:
87:72:1a:08:65:4d:35:3c:43:ba:7f:cd:d7:93:d0:
92:4a:c7:b3:23:a0:26:89:55:3b:9e:17:4d:0c:73:
c0:48:cc:65:78:95:23:f1:52:ab:b1:31:61:5c:09:
25:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7C:FA:E5:0C:5A:59:AB:30:E0:0E:86:09:F5:CC:88:BF:03:E3:4A
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/AHz65QxaWasw4A6GCfXMiL8D40o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:1::/48
2a09:2::/48
2a09:3::/48
2a09:4::/48
2a09:5::/48
2a09:7:2008::/48
2a10:480::/29
Signature Algorithm: sha256WithRSAEncryption
01:80:23:87:bd:e3:3a:5b:2b:59:24:b0:be:b6:57:dd:b3:e1:
50:c8:1e:b4:dc:7a:75:17:2c:60:65:0c:f7:eb:0f:85:4f:12:
9f:5c:32:92:74:00:63:72:e5:a9:0c:1f:6c:22:86:2e:c1:f8:
ae:e9:03:38:27:25:90:bd:2d:10:25:ac:1e:8f:01:b4:3c:35:
f8:28:46:e1:95:80:42:50:2d:2c:e6:4e:07:ab:a9:61:d1:fe:
c5:d9:90:77:d6:9e:08:88:98:27:c8:d8:01:ab:9d:2b:f7:c6:
ff:20:f3:22:c5:2d:3c:de:6e:fb:4d:d1:0c:f8:d7:48:31:97:
be:0d:45:b7:3e:7d:8e:12:81:6e:66:a4:58:58:05:9b:ec:f7:
3c:f0:cb:79:a0:30:01:7e:7e:76:e6:2b:68:2e:e1:cc:2b:37:
54:85:62:b1:12:c4:fb:d0:1e:fe:e1:1d:61:f4:8b:a8:fc:41:
5b:5a:64:c1:ba:18:a8:b5:d5:6b:f4:2a:ff:d9:64:06:de:40:
22:a9:65:66:b3:3f:0d:8e:d9:11:e6:16:69:ac:c8:ed:e8:8c:
f9:56:e3:8e:c4:6a:fc:a0:e8:02:30:d1:ef:d0:cd:30:40:bc:
f7:04:70:c0:fb:5a:93:9c:1d:2f:1e:8d:d6:af:98:df:80:90:
da:64:6a:c5
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIEB5qSJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTc2ZWIyY2M0NjJlNmU0YmYwZGU2OWI5ZjYzNDg3NWRlYmJhYWUyMB4XDTIyMDEw
MTA4MDEzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDA3Y2ZhZTUwYzVh
NTlhYjMwZTAwZTg2MDlmNWNjODhiZjAzZTM0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKmzVYvXczzkpR7NBjKdyfV9hr2i8QQy583Ek/GSa/LPujdI
2S2f6hB5MQGipOl7DoYbkEXpW3Mxt/v2eZdolzQkjOgt/FRzb7XZT/84wfsHIeNL
vBt3iX/GSaiZe1PSFAkoUbIanaqQwspBuTiniSNrMTmRP07MgPIMKDzw3ypVfcrN
brgIvncXYxFc828RBo31AHTl4UuIdm2qb2hrcMzjvbvftJxiiAk2cNWi5H2jtUoM
Ldqry2lw0nProXMadRGp9hnqfwnrLK7HbsX/c7ZGh3IaCGVNNTxDun/N15PQkkrH
syOgJolVO54XTQxzwEjMZXiVI/FSq7ExYVwJJWcCAwEAAaOCAkAwggI8MB0GA1Ud
DgQWBBQAfPrlDFpZqzDgDoYJ9cyIvwPjSjAfBgNVHSMEGDAWgBSldussxGLm5L8N
5pufY0h13ruq4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BYYnJMTVJpNXVTX0RlYWJuMk5JZGQ2N3F1SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODcvOTMxOTI3LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8x
L0FIejY1UXhhV2FzdzRBNkdDZlhNaUw4RDQwby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcv
OTMxOTI3LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8xL3BYYnJMTVJpNXVT
X0RlYWJuMk5JZGQ2N3F1SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBW
BggrBgEFBQcBBwEB/wRHMEUwQwQCAAIwPQMHACoJAAEAAAMHACoJAAIAAAMHACoJ
AAMAAAMHACoJAAQAAAMHACoJAAUAAAMHACoJAAcgCAMFAyoQBIAwDQYJKoZIhvcN
AQELBQADggEBAAGAI4e94zpbK1kksL62V92z4VDIHrTcenUXLGBlDPfrD4VPEp9c
MpJ0AGNy5akMH2wihi7B+K7pAzgnJZC9LRAlrB6PAbQ8NfgoRuGVgEJQLSzmTger
qWHR/sXZkHfWngiImCfI2AGrnSv3xv8g8yLFLTzebvtN0Qz410gxl74NRbc+fY4S
gW5mpFhYBZvs9zzwy3mgMAF+fnbmK2gu4cwrN1SFYrESxPvQHv7hHWH0i6j8QVta
ZMG6GKi11Wv0Kv/ZZAbeQCKpZWazPw2O2RHmFmmsyO3ojPlW447Eavyg6AIw0e/Q
zTBAvPcEcMD7WpOcHS8ejdavmN+AkNpkasU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-fra.rpki-client.org