Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/2W82h-J1bsWuXnX1tq4tIcrLGbA.roa
File: 2W82h-J1bsWuXnX1tq4tIcrLGbA.roa (raw, json)
Hash identifier: WdXsSlCsrpJ43F1qaKDVpmFIiIGmwDzCkESbSkOVNEg=
Subject key identifier: D9:6F:36:87:E2:75:6E:C5:AE:5E:75:F5:B6:AE:2D:21:CA:CB:19:B0
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 19115D3E
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/2W82h-J1bsWuXnX1tq4tIcrLGbA.roa
Signing time: Sat 01 Jan 2022 03:55:46 +0000
ROA not before: Sat 01 Jan 2022 03:55:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12310
IP address blocks: 2a02:2a00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420568382 (0x19115d3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jan 1 03:55:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d96f3687e2756ec5ae5e75f5b6ae2d21cacb19b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:90:89:56:c2:75:b6:87:56:97:45:d3:ef:
60:ad:ab:88:24:7a:52:3c:19:61:56:c2:61:1b:ca:
b4:3f:c6:47:33:ef:de:8c:06:86:e5:ed:f3:cf:bd:
fc:88:94:25:cf:ea:9c:80:a7:a5:1d:30:cc:24:fd:
05:48:23:83:50:4e:fd:4a:75:27:fe:28:20:dd:9e:
e4:e6:be:41:4e:1a:2a:64:76:e9:5f:26:31:21:00:
f5:47:7a:f0:c4:6f:17:07:e7:55:5c:ec:74:8e:7c:
7d:98:75:b8:fc:fe:7a:a4:98:3f:71:2c:1c:c8:a8:
a9:68:28:93:90:bc:01:1b:00:3a:cb:a8:2c:a8:1a:
23:7e:14:2b:a6:b0:d1:47:9d:cd:50:51:5c:20:b6:
a3:bc:61:c4:3f:d6:ab:81:07:81:0e:e8:43:b0:58:
42:ed:35:e2:c4:03:44:91:94:d1:86:29:d7:7e:9b:
53:08:be:30:87:77:29:f7:3f:b7:19:b0:ad:df:46:
3e:cf:de:71:7f:32:6b:b8:e9:cb:a7:a2:d8:45:d5:
34:9d:75:5f:84:51:b2:ec:c4:27:6d:12:62:6a:8a:
43:b8:b4:65:9f:85:d2:c0:03:15:ab:d0:d2:20:ed:
03:a3:34:96:32:7d:e0:89:a7:a6:e8:17:65:c6:8c:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6F:36:87:E2:75:6E:C5:AE:5E:75:F5:B6:AE:2D:21:CA:CB:19:B0
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/2W82h-J1bsWuXnX1tq4tIcrLGbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2a00::/32
Signature Algorithm: sha256WithRSAEncryption
56:f5:ba:ce:89:5a:f2:0d:9a:3d:95:f2:e1:62:9c:38:9f:46:
48:24:11:86:3e:47:82:ae:0c:9d:a9:f2:c3:9e:51:e7:9f:dc:
c2:2e:43:58:5b:44:3a:cd:f3:1b:7b:8b:62:4d:40:f1:52:d0:
81:c4:47:66:6e:42:71:88:17:b9:39:38:83:b3:fd:02:0f:b0:
df:f9:16:b9:1a:34:52:b3:94:8e:7e:fb:cd:68:7c:5f:9a:c0:
c5:44:fb:e4:87:45:0c:38:01:04:eb:08:d9:d1:c9:cc:84:58:
ea:2b:07:38:08:b3:0b:ff:61:42:20:99:dc:f0:ca:23:3b:3c:
ef:12:45:4d:2d:ab:46:8a:c5:e4:24:36:e3:3d:a3:a9:71:70:
af:bb:88:8f:45:1b:53:99:0c:81:11:6b:cd:2d:aa:4d:52:63:
4e:c4:c6:ab:74:73:19:33:a2:b6:4a:97:e5:93:34:07:08:40:
c7:f0:ea:fd:a7:b2:61:db:d6:b5:48:52:de:77:7c:69:fb:eb:
95:ab:6b:ce:11:e6:c6:59:b3:d5:3a:76:1d:d8:ba:47:c5:df:
10:88:98:a6:b2:51:09:56:df:c1:7c:ec:b2:28:22:26:bb:a6:
68:14:50:a7:bc:9e:4b:69:a0:1d:b9:cc:ee:14:3c:53:fe:5c:
98:61:72:c4
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEGRFdPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZTQ1OWFhNDYwMmJmZmEyZDI2NTBiYTY2ODE4NDU4Yzg5ZmM0NTgyMB4XDTIyMDEw
MTAzNTU0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDk2ZjM2ODdlMjc1
NmVjNWFlNWU3NWY1YjZhZTJkMjFjYWNiMTliMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL8BkIlWwnW2h1aXRdPvYK2riCR6UjwZYVbCYRvKtD/GRzPv
3owGhuXt88+9/IiUJc/qnICnpR0wzCT9BUgjg1BO/Up1J/4oIN2e5Oa+QU4aKmR2
6V8mMSEA9Ud68MRvFwfnVVzsdI58fZh1uPz+eqSYP3EsHMioqWgok5C8ARsAOsuo
LKgaI34UK6aw0UedzVBRXCC2o7xhxD/Wq4EHgQ7oQ7BYQu014sQDRJGU0YYp136b
Uwi+MId3Kfc/txmwrd9GPs/ecX8ya7jpy6ei2EXVNJ11X4RRsuzEJ20SYmqKQ7i0
ZZ+F0sADFavQ0iDtA6M0ljJ94ImnpugXZcaMZ8UCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBTZbzaH4nVuxa5edfW2ri0hyssZsDAfBgNVHSMEGDAWgBSeRZqkYCv/otJl
C6ZoGEWMifxFgjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25rV2FwR0FyXzZMU1pRdW1hQmhGakluOFJZSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGIvOWNjMzMzLTY4ZDUtNDY5Mi05YzViLTI4YTg0MWRhMGJmZC8x
LzJXODJoLUoxYnNXdVhuWDF0cTR0SWNyTEdiQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIv
OWNjMzMzLTY4ZDUtNDY5Mi05YzViLTI4YTg0MWRhMGJmZC8xL25rV2FwR0FyXzZM
U1pRdW1hQmhGakluOFJZSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoCKgAwDQYJKoZIhvcNAQELBQAD
ggEBAFb1us6JWvINmj2V8uFinDifRkgkEYY+R4KuDJ2p8sOeUeef3MIuQ1hbRDrN
8xt7i2JNQPFS0IHER2ZuQnGIF7k5OIOz/QIPsN/5FrkaNFKzlI5++81ofF+awMVE
++SHRQw4AQTrCNnRycyEWOorBzgIswv/YUIgmdzwyiM7PO8SRU0tq0aKxeQkNuM9
o6lxcK+7iI9FG1OZDIERa80tqk1SY07Exqt0cxkzorZKl+WTNAcIQMfw6v2nsmHb
1rVIUt53fGn765Wra84R5sZZs9U6dh3YukfF3xCImKayUQlW38F87LIoIia7pmgU
UKe8nktpoB25zO4UPFP+XJhhcsQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:47 2024 by rpki-client on console-ams.rpki-client.org