Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/RCq8niJpcrhRBNd70KrFixOtZOM.roa
File: RCq8niJpcrhRBNd70KrFixOtZOM.roa (raw, json)
Hash identifier: sjV03ylAvxnbLgx72zUqrObTofoUQcryzAZPAQi+tFk=
Subject key identifier: 44:2A:BC:9E:22:69:72:B8:51:04:D7:7B:D0:AA:C5:8B:13:AD:64:E3
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01847164D2847C6552348D9A4D4FF5755C34
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/RCq8niJpcrhRBNd70KrFixOtZOM.roa
Signing time: Sun 13 Nov 2022 14:29:03 +0000
ROA not before: Sun 13 Nov 2022 14:29:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205602
IP address blocks: 2a06:e881:116::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:71:64:d2:84:7c:65:52:34:8d:9a:4d:4f:f5:75:5c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Nov 13 14:29:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=442abc9e226972b85104d77bd0aac58b13ad64e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:29:64:60:e2:7a:cb:53:45:9b:57:21:92:
69:78:35:df:e3:6b:a1:bb:fb:cb:b9:d4:b1:58:b8:
ce:42:c1:c3:34:91:b8:a2:d5:0e:20:4a:21:46:9e:
a0:46:af:81:70:bc:a7:bd:a4:07:d1:c9:26:c3:66:
3b:a4:3e:09:53:08:52:2d:ab:95:5e:a1:59:b6:9d:
09:4f:8c:79:30:48:21:29:16:bd:14:1a:7d:4f:3b:
90:1b:63:71:29:fb:f0:15:37:d5:a7:b3:47:c6:42:
a7:42:6b:65:dd:73:0e:c4:01:2d:df:20:bf:ec:70:
a5:0f:73:74:35:c1:f5:b7:0f:66:d1:a9:ad:f9:6f:
08:3e:37:39:69:d3:76:5a:38:6a:55:29:47:ae:08:
61:d7:c5:c5:fd:2f:86:6c:4a:ee:68:ed:a0:7a:70:
8a:7b:bd:f7:be:dc:e3:b2:73:a6:e6:ee:db:4c:48:
11:72:c1:16:9f:d4:a9:c4:d0:41:c0:8e:06:5e:ff:
ce:c7:6e:99:11:6e:f5:47:ff:f6:48:b8:d1:54:e3:
69:89:9d:ac:2b:04:c3:a0:05:33:fb:15:69:54:a5:
e2:7e:06:fd:6d:44:df:de:8e:d2:e1:ee:05:59:df:
87:06:7f:8e:eb:00:23:37:3a:55:0e:45:1f:46:dc:
b9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2A:BC:9E:22:69:72:B8:51:04:D7:7B:D0:AA:C5:8B:13:AD:64:E3
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/RCq8niJpcrhRBNd70KrFixOtZOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:116::/48
Signature Algorithm: sha256WithRSAEncryption
73:a1:20:8a:64:7d:f2:a4:11:b9:1f:e7:a1:73:6b:2e:8e:d2:
f7:38:a1:41:50:93:90:5b:c2:e5:8c:4d:c5:98:98:bd:0b:d5:
74:c8:39:5d:fc:72:5b:3e:51:12:f1:6f:84:b5:47:dc:61:2a:
ff:57:aa:08:53:e4:68:7b:6d:2e:5a:3c:1a:50:74:97:c6:94:
cf:1b:35:ac:4d:a8:1d:17:d5:3b:cd:15:39:5c:db:26:d5:50:
f5:2c:f4:4e:03:e1:bf:33:2f:36:56:c4:4e:52:c1:f4:49:ee:
59:5f:91:54:f8:17:45:8a:14:cf:62:24:eb:47:64:f1:2b:3f:
48:ac:ce:17:3d:b6:e5:31:0e:23:94:bb:ca:27:fd:52:85:db:
2f:23:69:8d:20:ba:88:8e:61:a0:6d:b2:e7:8f:1e:e9:ef:b7:
d1:fd:12:2f:34:91:43:80:6e:dd:d6:3c:21:8a:ab:4f:52:66:
af:3c:28:fa:b6:ec:f5:f2:41:ea:ba:dd:7e:67:f0:ba:02:f1:
fc:ec:bc:27:94:b7:cb:0b:77:ce:a2:2c:1a:a2:77:59:19:c3:
88:e8:98:d7:be:8d:94:be:0a:3e:54:d3:b8:91:03:ea:02:2a:
b4:44:e3:cf:a9:76:6a:a5:d3:48:d3:d1:98:ec:04:fc:70:61:
a1:4b:40:d6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYRxZNKEfGVSNI2aTU/1dVw0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjIxMTEzMTQyOTAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDJhYmM5ZTIyNjk3MmI4NTEwNGQ3N2JkMGFhYzU4YjEzYWQ2NGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfkpZGDiestTRZtXIZJpeDXf42uh
u/vLudSxWLjOQsHDNJG4otUOIEohRp6gRq+BcLynvaQH0ckmw2Y7pD4JUwhSLauV
XqFZtp0JT4x5MEghKRa9FBp9TzuQG2NxKfvwFTfVp7NHxkKnQmtl3XMOxAEt3yC/
7HClD3N0NcH1tw9m0amt+W8IPjc5adN2WjhqVSlHrghh18XF/S+GbEruaO2genCK
e733vtzjsnOm5u7bTEgRcsEWn9SpxNBBwI4GXv/Ox26ZEW71R//2SLjRVONpiZ2s
KwTDoAUz+xVpVKXifgb9bUTf3o7S4e4FWd+HBn+O6wAjNzpVDkUfRty57QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEQqvJ4iaXK4UQTXe9CqxYsTrWTjMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvUkNxOG5pSnBjcmhSQk5kNzBLckZpeE90Wk9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgbogQEW
MA0GCSqGSIb3DQEBCwUAA4IBAQBzoSCKZH3ypBG5H+ehc2sujtL3OKFBUJOQW8Ll
jE3FmJi9C9V0yDld/HJbPlES8W+EtUfcYSr/V6oIU+Roe20uWjwaUHSXxpTPGzWs
TagdF9U7zRU5XNsm1VD1LPROA+G/My82VsROUsH0Se5ZX5FU+BdFihTPYiTrR2Tx
Kz9IrM4XPbblMQ4jlLvKJ/1ShdsvI2mNILqIjmGgbbLnjx7p77fR/RIvNJFDgG7d
1jwhiqtPUmavPCj6tuz18kHqut1+Z/C6AvH87LwnlLfLC3fOoiwaondZGcOI6JjX
vo2Uvgo+VNO4kQPqAiq0ROPPqXZqpdNI09GY7AT8cGGhS0DW
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:40 2024 by rpki-client on console-ams.rpki-client.org