Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/j_NddVaHCxPNSB5b0CVaTUqaPjQ.roa
File: j_NddVaHCxPNSB5b0CVaTUqaPjQ.roa (raw, json)
Hash identifier: h/c+WlH9/0X+7BPur7r3uSHy5u9bCL0SU6SuHnTLJ0o=
Subject key identifier: 8F:F3:5D:75:56:87:0B:13:CD:48:1E:5B:D0:25:5A:4D:4A:9A:3E:34
Certificate issuer: /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial: 076F696C
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/j_NddVaHCxPNSB5b0CVaTUqaPjQ.roa
Signing time: Sat 01 Jan 2022 00:50:36 +0000
ROA not before: Sat 01 Jan 2022 00:50:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211672
IP address blocks: 2a0f:b100:40::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124741996 (0x76f696c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Validity
Not Before: Jan 1 00:50:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ff35d7556870b13cd481e5bd0255a4d4a9a3e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:cf:61:06:54:2d:a9:09:39:e6:d9:4b:97:
5f:a6:08:f1:ff:4c:4d:74:5a:cd:31:91:4a:96:79:
21:1e:f9:55:db:13:ec:29:b5:f0:2e:ba:ee:56:61:
2c:17:57:5e:e1:2d:50:f6:8a:e7:4f:cd:ac:ea:12:
15:60:63:c7:33:13:ce:17:56:d5:9d:9a:a9:40:e7:
94:54:26:a3:9b:1f:89:45:b8:ca:dc:14:9b:cc:72:
fd:fb:91:8c:10:0e:02:8d:91:c7:3f:2b:2c:78:3f:
0f:d1:b7:6c:94:b0:d3:c7:3c:83:ef:68:0c:86:97:
68:33:2b:6b:28:78:c4:29:8e:cd:7f:ea:d5:87:18:
2e:32:80:e1:aa:df:48:80:8d:e3:df:f1:e0:5b:e8:
93:80:b8:6a:b5:78:ac:f3:42:da:63:cf:4d:d3:dc:
01:c7:5b:5c:c6:b9:60:78:f1:de:96:63:e6:81:3c:
54:9a:e8:25:94:b7:b3:91:3d:b0:43:22:db:02:8a:
71:0e:76:ca:d4:86:62:41:ed:1b:40:9c:f2:a2:35:
ef:24:c7:b6:15:b1:8e:0c:28:9c:7b:45:5b:b7:71:
52:ad:b1:fb:b4:86:fa:17:7c:da:53:3f:b0:72:6f:
99:20:ca:a0:fd:59:07:c6:72:7e:62:dc:59:ee:b3:
b8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F3:5D:75:56:87:0B:13:CD:48:1E:5B:D0:25:5A:4D:4A:9A:3E:34
X509v3 Authority Key Identifier:
keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/j_NddVaHCxPNSB5b0CVaTUqaPjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b100:40::/44
Signature Algorithm: sha256WithRSAEncryption
e6:7d:90:4a:12:e1:c6:ec:c6:0c:1c:01:42:5b:8a:4e:76:7a:
57:83:5e:69:6b:24:9f:06:30:7b:a0:a8:96:9b:e0:ea:8f:46:
1f:7e:8e:71:ac:42:2d:ae:26:c8:77:66:39:e4:0a:3d:0b:8e:
00:b6:30:1a:15:db:13:e8:8a:35:56:14:d6:c4:c3:cc:c2:71:
11:1d:9f:f6:7d:3c:67:5a:87:45:9d:20:f5:e9:6f:32:95:09:
59:a5:5a:e5:68:5f:e9:1d:8f:3e:7d:a0:eb:71:40:67:f1:f3:
d5:e9:2b:84:b3:72:11:79:b1:53:93:c9:cb:89:93:e9:fc:d6:
ec:11:5e:7d:c6:da:28:c3:0f:ac:81:fc:d7:31:bd:e1:45:d9:
3c:56:fa:e2:90:25:9a:b5:31:a1:8f:0f:a3:cb:e9:14:6d:3e:
a1:48:c4:e8:88:bf:a9:94:de:8f:71:42:88:7d:d7:c9:1d:8e:
fa:69:a2:69:bd:10:29:d8:4f:5e:c6:9f:e2:fe:b6:44:29:78:
4e:bd:60:4a:80:27:9a:6e:cc:c8:1a:b4:fb:20:7e:c1:bd:5d:
3a:78:0d:86:f8:e8:32:7b:ad:1a:da:b4:f3:3f:4c:a1:80:ce:
1d:65:a0:28:ef:bd:9f:76:31:c2:5e:88:1d:f4:84:dc:cc:c5:
f7:cc:43:01
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEB29pbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NjU2MmQwODY5NDgwZGMxMWI3NGE1NTJjZDE2N2I2ZjYzMzljOGJhMB4XDTIyMDEw
MTAwNTAzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGZmMzVkNzU1Njg3
MGIxM2NkNDgxZTViZDAyNTVhNGQ0YTlhM2UzNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMPKz2EGVC2pCTnm2UuXX6YI8f9MTXRazTGRSpZ5IR75VdsT
7Cm18C667lZhLBdXXuEtUPaK50/NrOoSFWBjxzMTzhdW1Z2aqUDnlFQmo5sfiUW4
ytwUm8xy/fuRjBAOAo2Rxz8rLHg/D9G3bJSw08c8g+9oDIaXaDMrayh4xCmOzX/q
1YcYLjKA4arfSICN49/x4Fvok4C4arV4rPNC2mPPTdPcAcdbXMa5YHjx3pZj5oE8
VJroJZS3s5E9sEMi2wKKcQ52ytSGYkHtG0Cc8qI17yTHthWxjgwonHtFW7dxUq2x
+7SG+hd82lM/sHJvmSDKoP1ZB8ZyfmLcWe6zuAECAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSP8111VocLE81IHlvQJVpNSpo+NDAfBgNVHSMEGDAWgBSmVi0IaUgNwRt0
pVLNFntvYznIujAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BsWXRDR2xJRGNFYmRLVlN6Ulo3YjJNNXlMby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTcvMjEyZGQyLWRhOGQtNDA0OC05MTZhLTQ1YThmZWQzYTJhNS8x
L2pfTmRkVmFIQ3hQTlNCNWIwQ1ZhVFVxYVBqUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcv
MjEyZGQyLWRhOGQtNDA0OC05MTZhLTQ1YThmZWQzYTJhNS8xL3BsWXRDR2xJRGNF
YmRLVlN6Ulo3YjJNNXlMby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoPsQAAQDANBgkqhkiG9w0BAQsF
AAOCAQEA5n2QShLhxuzGDBwBQluKTnZ6V4NeaWsknwYwe6Colpvg6o9GH36OcaxC
La4myHdmOeQKPQuOALYwGhXbE+iKNVYU1sTDzMJxER2f9n08Z1qHRZ0g9elvMpUJ
WaVa5Whf6R2PPn2g63FAZ/Hz1ekrhLNyEXmxU5PJy4mT6fzW7BFefcbaKMMPrIH8
1zG94UXZPFb64pAlmrUxoY8Po8vpFG0+oUjE6Ii/qZTej3FCiH3XyR2O+mmiab0Q
KdhPXsaf4v62RCl4Tr1gSoAnmm7MyBq0+yB+wb1dOngNhvjoMnutGtq08z9MoYDO
HWWgKO+9n3Yxwl6IHfSE3MzF98xDAQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:58 2024 by rpki-client on console-fra.rpki-client.org