Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/6RDqRB4ioE1VYDpce38WfEqZmtM.roa
File: 6RDqRB4ioE1VYDpce38WfEqZmtM.roa (raw, json)
Hash identifier: EPJiCEm16doeA1H18IWkgedggEffRuCkjY0g6M9p1wI=
Subject key identifier: E9:10:EA:44:1E:22:A0:4D:55:60:3A:5C:7B:7F:16:7C:4A:99:9A:D3
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0183C1D52D0D8615E276E1AFDB2B7BCF1356
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/6RDqRB4ioE1VYDpce38WfEqZmtM.roa
Signing time: Mon 10 Oct 2022 12:18:36 +0000
ROA not before: Mon 10 Oct 2022 12:18:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52041
IP address blocks: 2a12:bec0:7000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c1:d5:2d:0d:86:15:e2:76:e1:af:db:2b:7b:cf:13:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Oct 10 12:18:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e910ea441e22a04d55603a5c7b7f167c4a999ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ac:8d:87:e7:c1:da:78:a4:f9:e8:16:d1:07:
3b:4f:a4:1b:4f:5b:51:89:a7:7c:8a:9c:e6:ab:c0:
91:5f:83:f0:12:72:7a:7c:3f:da:d1:aa:ea:89:fc:
11:f6:ce:f4:2a:94:24:d5:85:70:ed:b7:ce:89:8b:
ec:0d:67:20:a3:90:b5:2b:77:de:aa:b7:a3:3b:8c:
0c:3f:c2:7b:df:54:d2:bb:0c:6a:80:15:6e:0d:2d:
e8:fc:a8:5e:ea:ca:ff:e4:05:c1:b8:37:e1:be:86:
e1:18:d6:dd:c1:fe:60:c2:d3:19:79:55:bd:00:48:
66:4b:8c:a1:e3:3e:bf:b9:5e:28:12:30:a0:cb:31:
72:cc:01:f1:c7:49:29:a7:62:b2:19:35:cf:5f:6e:
cf:07:8e:a1:d4:0d:46:88:33:bb:7f:a0:a6:a9:51:
d2:4a:38:e3:32:f6:e9:3e:a9:35:cb:7b:b3:4d:d2:
a9:a1:4e:fd:31:af:0a:6f:22:9a:21:e6:07:b2:19:
ea:af:ac:bf:84:e1:3a:d0:84:6e:8b:28:1d:de:fb:
3b:e2:85:98:57:6c:60:6e:bb:13:5a:54:ee:83:6e:
58:5c:e2:95:c9:b6:49:26:d3:ac:44:82:e3:d2:8d:
2e:2b:c5:63:2a:39:7b:db:ab:9f:e0:e7:ee:63:4c:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:10:EA:44:1E:22:A0:4D:55:60:3A:5C:7B:7F:16:7C:4A:99:9A:D3
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/6RDqRB4ioE1VYDpce38WfEqZmtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:7000::/48
Signature Algorithm: sha256WithRSAEncryption
9c:80:20:2a:fb:55:03:1f:3b:f5:9b:94:ec:7e:e2:5e:1e:af:
c6:04:9c:20:ae:cf:53:52:6d:c6:99:17:83:0f:8d:2f:ad:71:
f8:c5:0e:b2:bb:68:94:40:fb:c7:c1:a5:64:23:68:af:d9:5c:
83:dd:c3:da:3d:9a:3d:1c:95:8e:28:3d:cb:7a:18:6e:48:7c:
75:31:92:ec:42:f2:05:18:53:46:63:17:16:0d:c1:7d:e0:32:
32:08:f2:ad:b6:46:49:0d:b6:a4:b9:dd:b3:bb:ef:13:f0:f0:
af:b1:9d:3a:7d:16:25:c2:aa:e5:5a:f9:3e:4b:f1:c0:a9:2c:
2d:3b:a4:da:2b:db:d3:e8:35:ab:c5:e3:60:fd:1c:12:2a:df:
4d:8d:01:26:16:66:b4:e1:2e:30:3d:fc:77:98:ec:d5:70:16:
ed:74:70:16:9e:5e:8a:0b:91:9e:8b:f5:cf:b9:4b:85:49:99:
0b:9e:25:7d:83:02:92:f3:64:40:40:22:33:6d:6c:0a:2a:d2:
8e:61:ab:88:3b:5c:9d:82:13:c9:d6:aa:7e:bd:c2:9e:a3:c2:
85:91:63:b6:b7:9e:49:e2:0b:36:52:84:63:75:ee:94:2f:8d:
b8:89:60:27:ad:fa:94:0f:e6:18:4c:ee:ed:64:bf:16:0a:98:
c6:b2:1f:de
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYPB1S0NhhXiduGv2yt7zxNWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjIxMDEwMTIxODM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTEwZWE0NDFlMjJhMDRkNTU2MDNhNWM3YjdmMTY3YzRhOTk5YWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlayNh+fB2nik+egW0Qc7T6QbT1tR
iad8ipzmq8CRX4PwEnJ6fD/a0arqifwR9s70KpQk1YVw7bfOiYvsDWcgo5C1K3fe
qrejO4wMP8J731TSuwxqgBVuDS3o/Khe6sr/5AXBuDfhvobhGNbdwf5gwtMZeVW9
AEhmS4yh4z6/uV4oEjCgyzFyzAHxx0kpp2KyGTXPX27PB46h1A1GiDO7f6CmqVHS
SjjjMvbpPqk1y3uzTdKpoU79Ma8KbyKaIeYHshnqr6y/hOE60IRuiygd3vs74oWY
V2xgbrsTWlTug25YXOKVybZJJtOsRILj0o0uK8VjKjl726uf4OfuY0wHyQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOkQ6kQeIqBNVWA6XHt/FnxKmZrTMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvNlJEcVJCNGlvRTFWWURwY2UzOFdmRXFabXRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhK+wHAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCcgCAq+1UDHzv1m5TsfuJeHq/GBJwgrs9TUm3G
mReDD40vrXH4xQ6yu2iUQPvHwaVkI2iv2VyD3cPaPZo9HJWOKD3LehhuSHx1MZLs
QvIFGFNGYxcWDcF94DIyCPKttkZJDbakud2zu+8T8PCvsZ06fRYlwqrlWvk+S/HA
qSwtO6TaK9vT6DWrxeNg/RwSKt9NjQEmFma04S4wPfx3mOzVcBbtdHAWnl6KC5Ge
i/XPuUuFSZkLniV9gwKS82RAQCIzbWwKKtKOYauIO1ydghPJ1qp+vcKeo8KFkWO2
t55J4gs2UoRjde6UL424iWAnrfqUD+YYTO7tZL8WCpjGsh/e
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org