Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/bd--70iHkrRmvVkOGLfF_V4nIyE.roa
File: bd--70iHkrRmvVkOGLfF_V4nIyE.roa (raw, json)
Hash identifier: l38pZ3qAHYjDBU8ZzJhP0WiQZ5Dh8vbeS2N5nYcXD58=
Subject key identifier: 6D:DF:BE:EF:48:87:92:B4:66:BD:59:0E:18:B7:C5:FD:5E:27:23:21
Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial: 0C95E8
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/bd--70iHkrRmvVkOGLfF_V4nIyE.roa
Signing time: Mon 30 May 2022 10:03:14 +0000
ROA not before: Mon 30 May 2022 10:03:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31424
IP address blocks: 2001:67c:358::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 824808 (0xc95e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Validity
Not Before: May 30 10:03:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ddfbeef488792b466bd590e18b7c5fd5e272321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:7c:00:25:c5:ab:0b:31:ef:8d:12:d9:ba:
33:c5:c0:4b:e6:24:4e:5c:de:d1:f6:3a:2c:b6:d5:
de:53:64:b2:52:fd:7c:28:81:a0:a2:37:f1:b2:d1:
41:1f:c0:8d:93:50:48:1a:1d:af:90:b3:ef:1d:df:
25:5a:9b:7f:8c:7e:c6:03:1e:24:ae:7a:ad:e5:bc:
da:51:b6:62:14:25:19:d6:43:72:68:a8:4e:23:b6:
d4:b0:49:bb:cd:66:2b:69:d8:4c:e0:2d:61:d1:ac:
c9:cf:c2:2e:5d:a8:86:67:2f:8c:6c:20:61:7f:05:
0f:c4:c6:6f:f0:1c:35:5f:ce:f1:2b:08:7e:bd:61:
f7:43:af:33:35:42:28:86:21:44:5d:40:86:78:c0:
b6:32:b9:ce:56:06:7d:ae:b8:61:dd:db:3e:35:92:
44:ea:7e:62:cd:5c:94:16:f2:86:f9:28:16:b2:9d:
d5:a8:11:53:0d:6b:30:41:76:09:ff:0e:26:b2:66:
53:82:c4:cb:96:db:3d:d6:d6:b2:a0:d7:db:36:8b:
e0:4f:75:c8:eb:d9:91:4d:e8:7d:22:0c:dd:b8:dd:
5d:03:2b:26:57:c0:64:51:05:49:e8:21:f1:b4:95:
44:1a:01:4d:fd:fe:30:ff:79:84:ab:0f:f0:6f:58:
46:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DF:BE:EF:48:87:92:B4:66:BD:59:0E:18:B7:C5:FD:5E:27:23:21
X509v3 Authority Key Identifier:
keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/bd--70iHkrRmvVkOGLfF_V4nIyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:358::/48
Signature Algorithm: sha256WithRSAEncryption
13:14:d2:7d:8a:a4:6b:d3:7a:a8:7b:cd:28:e7:c0:c2:33:ce:
eb:99:bf:32:7c:ef:5b:90:00:a3:89:54:d5:72:61:26:6b:4b:
98:cf:9c:20:89:78:d2:4e:c1:51:51:2e:c5:1f:30:63:4d:7c:
4d:8d:5a:a8:01:83:37:a1:1f:72:3f:91:77:73:fd:42:28:26:
3f:32:ed:dd:00:3f:8b:49:37:62:f3:e6:05:83:69:d9:f1:a9:
f0:e4:3e:1b:fc:0b:2f:f1:05:9b:ac:00:e1:7f:d3:cc:26:e7:
d9:81:66:64:64:6f:af:b5:2a:2a:56:ae:5f:da:66:7c:20:68:
5a:40:25:a2:46:29:f5:1e:c3:79:c5:d4:39:14:bf:44:ea:cc:
5a:91:ef:15:59:1f:67:2f:21:18:0f:92:29:8f:98:f2:6a:58:
34:a4:07:11:d9:85:54:86:f3:b5:0f:07:37:0a:cf:94:32:33:
67:c6:e7:10:a8:13:4d:b8:79:b6:fc:1c:0b:6b:9a:ef:fb:25:
cd:02:dd:4a:9e:68:26:ff:c8:07:c3:5b:be:1e:a5:23:fb:98:
ac:77:17:74:e5:95:6c:7b:05:f6:a8:bd:9e:9c:1a:e9:d8:e9:
0c:86:ad:21:9b:70:cf:a4:ae:a5:42:f2:54:f3:f7:89:cf:86:
41:b8:cd:9c
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIDDJXoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE0
YTAxNWIyZDNkM2U5MDliNjAyZjlmZGQ0ZjZmNmY2MTg4NzNjNTgwHhcNMjIwNTMw
MTAwMzE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2ZGRmYmVlZjQ4ODc5
MmI0NjZiZDU5MGUxOGI3YzVmZDVlMjcyMzIxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoy98ACXFqwsx740S2bozxcBL5iROXN7R9josttXeU2SyUv18
KIGgojfxstFBH8CNk1BIGh2vkLPvHd8lWpt/jH7GAx4krnqt5bzaUbZiFCUZ1kNy
aKhOI7bUsEm7zWYradhM4C1h0azJz8IuXaiGZy+MbCBhfwUPxMZv8Bw1X87xKwh+
vWH3Q68zNUIohiFEXUCGeMC2MrnOVgZ9rrhh3ds+NZJE6n5izVyUFvKG+SgWsp3V
qBFTDWswQXYJ/w4msmZTgsTLlts91tayoNfbNovgT3XI69mRTeh9IgzduN1dAysm
V8BkUQVJ6CHxtJVEGgFN/f4w/3mEqw/wb1hGPQIDAQABo4ICDDCCAggwHQYDVR0O
BBYEFG3fvu9Ih5K0Zr1ZDhi3xf1eJyMhMB8GA1UdIwQYMBaAFKSgFbLT0+kJtgL5
/dT29vYYhzxYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cEtBVnN0UFQ2UW0yQXZuOTFQYjI5aGlIUEZnLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85MS9iOWJkYTMtYjYxMS00MzM4LWJiZTgtYTdkZDE2MzQzMjk3LzEv
YmQtLTcwaUhrclJtdlZrT0dMZkZfVjRuSXlFLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9i
OWJkYTMtYjYxMS00MzM4LWJiZTgtYTdkZDE2MzQzMjk3LzEvcEtBVnN0UFQ2UW0y
QXZuOTFQYjI5aGlIUEZnLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIG
CCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfANYMA0GCSqGSIb3DQEBCwUA
A4IBAQATFNJ9iqRr03qoe80o58DCM87rmb8yfO9bkACjiVTVcmEma0uYz5wgiXjS
TsFRUS7FHzBjTXxNjVqoAYM3oR9yP5F3c/1CKCY/Mu3dAD+LSTdi8+YFg2nZ8anw
5D4b/Asv8QWbrADhf9PMJufZgWZkZG+vtSoqVq5f2mZ8IGhaQCWiRin1HsN5xdQ5
FL9E6sxake8VWR9nLyEYD5Ipj5jyalg0pAcR2YVUhvO1Dwc3Cs+UMjNnxucQqBNN
uHm2/BwLa5rv+yXNAt1Knmgm/8gHw1u+HqUj+5isdxd05ZVsewX2qL2enBrp2OkM
hq0hm3DPpK6lQvJU8/eJz4ZBuM2c
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:01 2024 by rpki-client on console-ams.rpki-client.org