Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/N8aXPW2_iNxUXj4O68pR042fSqs.roa
File: N8aXPW2_iNxUXj4O68pR042fSqs.roa (raw, json)
Hash identifier: IOa4r94ztnENF8eAp6Jt17M7uD6SNEx4w8SB041i+KU=
Subject key identifier: 37:C6:97:3D:6D:BF:88:DC:54:5E:3E:0E:EB:CA:51:D3:8D:9F:4A:AB
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 07A61F52
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/N8aXPW2_iNxUXj4O68pR042fSqs.roa
Signing time: Sat 01 Jan 2022 08:01:46 +0000
ROA not before: Sat 01 Jan 2022 08:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43357
IP address blocks: 2a09:7:2007::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128327506 (0x7a61f52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 08:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37c6973d6dbf88dc545e3e0eebca51d38d9f4aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:d6:3e:ee:c6:56:c2:ae:f6:ec:ee:31:7c:
17:20:db:ec:0f:d6:1c:6a:c1:8a:05:a4:98:ff:19:
8f:12:d4:a3:fc:4c:76:71:e5:3e:6c:c3:e6:5d:3a:
21:ec:d2:35:48:7c:12:42:df:d7:4a:40:6b:bf:c8:
6a:0e:1f:fa:5a:f6:4c:61:dd:bc:25:76:7a:51:0e:
9e:f0:b0:a2:67:69:41:9d:d2:6a:9e:9a:23:c2:77:
f9:14:a9:aa:73:ed:f3:8d:cc:2a:2b:6a:5c:96:bb:
21:fb:79:03:da:60:53:8a:9f:d4:c4:56:55:7d:f8:
f5:46:6d:25:4a:ad:57:5c:94:cf:df:14:bc:68:68:
af:fe:3a:08:20:fd:42:47:1d:41:a4:8a:27:a9:7a:
32:26:c7:72:11:b9:31:7c:92:04:2e:bd:85:77:25:
3c:55:b8:b6:1f:0d:8f:5f:c0:93:e2:d1:8b:60:bf:
8d:46:d4:14:c4:7e:92:03:3e:7c:e3:f6:94:aa:2e:
11:f9:df:16:69:bc:65:b2:4b:0a:f5:49:89:53:90:
21:25:4d:1a:6e:a1:e1:9f:8a:ce:55:1f:e3:cb:25:
38:26:af:1a:5f:c9:b8:08:e2:41:78:6d:f4:5a:8c:
dc:5d:94:98:d6:4e:0f:90:86:23:64:84:b3:f0:ef:
86:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C6:97:3D:6D:BF:88:DC:54:5E:3E:0E:EB:CA:51:D3:8D:9F:4A:AB
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/N8aXPW2_iNxUXj4O68pR042fSqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7:2007::/48
Signature Algorithm: sha256WithRSAEncryption
1d:37:c2:75:7e:ad:ec:ff:e9:55:a5:c8:92:2d:4e:c5:f5:1d:
a6:ad:65:93:75:ca:c1:e6:fb:b7:4c:b3:62:95:97:ce:65:e3:
45:35:01:40:db:ad:68:7c:cb:6e:2b:ae:b8:df:74:f8:d3:aa:
7a:42:06:79:45:a4:3c:92:2e:16:72:e2:23:b7:05:ce:31:ff:
7b:93:93:6c:42:31:3e:24:f5:a0:ce:15:e5:f8:05:89:39:a1:
96:3a:3b:8c:9c:5b:99:54:22:16:31:88:5c:33:dd:a7:b6:e9:
2a:b8:88:80:48:8c:b0:59:a3:e0:7b:bc:89:c0:d3:b7:bc:74:
ae:22:d1:67:f1:98:47:4a:07:b0:69:31:2f:08:05:30:5c:1c:
ac:23:4a:43:f7:96:e2:8e:c7:bd:50:ee:19:13:c8:32:ff:2b:
9c:88:30:5d:97:0d:c6:45:bf:b8:48:9b:3c:3c:29:d7:62:cc:
e6:45:1f:2b:72:1b:0e:99:f6:52:5a:b7:74:75:b6:e8:b2:e9:
99:16:a6:08:64:f8:f2:d2:69:29:6a:b9:d5:f6:5f:84:ad:43:
28:a3:c3:57:6a:4f:1f:77:3a:87:05:1d:a1:04:09:8e:29:97:
c2:df:58:d1:04:24:e1:fe:0c:b8:95:5d:cd:52:d1:5a:a8:6a:
15:cc:4d:ec
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEB6YfUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTc2ZWIyY2M0NjJlNmU0YmYwZGU2OWI5ZjYzNDg3NWRlYmJhYWUyMB4XDTIyMDEw
MTA4MDE0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzdjNjk3M2Q2ZGJm
ODhkYzU0NWUzZTBlZWJjYTUxZDM4ZDlmNGFhYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK1/1j7uxlbCrvbs7jF8FyDb7A/WHGrBigWkmP8ZjxLUo/xM
dnHlPmzD5l06IezSNUh8EkLf10pAa7/Iag4f+lr2TGHdvCV2elEOnvCwomdpQZ3S
ap6aI8J3+RSpqnPt843MKitqXJa7Ift5A9pgU4qf1MRWVX349UZtJUqtV1yUz98U
vGhor/46CCD9QkcdQaSKJ6l6MibHchG5MXySBC69hXclPFW4th8Nj1/Ak+LRi2C/
jUbUFMR+kgM+fOP2lKouEfnfFmm8ZbJLCvVJiVOQISVNGm6h4Z+KzlUf48slOCav
Gl/JuAjiQXht9FqM3F2UmNZOD5CGI2SEs/DvhmUCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQ3xpc9bb+I3FRePg7rylHTjZ9KqzAfBgNVHSMEGDAWgBSldussxGLm5L8N
5pufY0h13ruq4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BYYnJMTVJpNXVTX0RlYWJuMk5JZGQ2N3F1SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODcvOTMxOTI3LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8x
L044YVhQVzJfaU54VVhqNE82OHBSMDQyZlNxcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcv
OTMxOTI3LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8xL3BYYnJMTVJpNXVT
X0RlYWJuMk5JZGQ2N3F1SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoJAAcgBzANBgkqhkiG9w0BAQsF
AAOCAQEAHTfCdX6t7P/pVaXIki1OxfUdpq1lk3XKweb7t0yzYpWXzmXjRTUBQNut
aHzLbiuuuN90+NOqekIGeUWkPJIuFnLiI7cFzjH/e5OTbEIxPiT1oM4V5fgFiTmh
ljo7jJxbmVQiFjGIXDPdp7bpKriIgEiMsFmj4Hu8icDTt7x0riLRZ/GYR0oHsGkx
LwgFMFwcrCNKQ/eW4o7HvVDuGRPIMv8rnIgwXZcNxkW/uEibPDwp12LM5kUfK3Ib
Dpn2Ulq3dHW26LLpmRamCGT48tJpKWq51fZfhK1DKKPDV2pPH3c6hwUdoQQJjimX
wt9Y0QQk4f4MuJVdzVLRWqhqFcxN7A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-fra.rpki-client.org