Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/PislnlkmVmfOcm5rHd3bUbtFh9I.roa
File: PislnlkmVmfOcm5rHd3bUbtFh9I.roa (raw, json)
Hash identifier: /1qiDEUdgkF5PMeyh+1l0QCl+/OpY31os/fdsOl718c=
Subject key identifier: 3E:2B:25:9E:59:26:56:67:CE:72:6E:6B:1D:DD:DB:51:BB:45:87:D2
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 02368DE0
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/PislnlkmVmfOcm5rHd3bUbtFh9I.roa
Signing time: Sat 01 Jan 2022 10:03:21 +0000
ROA not before: Sat 01 Jan 2022 10:03:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211442
IP address blocks: 2a10:e1c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37129696 (0x2368de0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Jan 1 10:03:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e2b259e59265667ce726e6b1ddddb51bb4587d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:9b:4d:71:1a:29:a2:04:d3:ac:87:ad:a4:
82:df:65:0c:6a:a6:56:0e:86:19:db:91:1e:fb:1d:
ef:08:c2:56:65:ed:52:eb:59:76:86:35:76:43:7d:
06:69:77:79:d9:42:d0:f0:e0:ed:05:4b:dd:74:f6:
83:6a:b4:86:83:d2:67:4c:17:b1:dd:6f:1a:3e:26:
28:aa:56:99:ee:92:e3:5c:b8:96:9c:94:61:5f:bf:
7e:25:d3:50:c3:47:42:78:b0:97:41:2c:e7:bc:ea:
f6:0e:fa:b1:07:d1:95:0f:56:c2:80:73:6f:c5:60:
15:a7:02:a9:0f:75:06:76:09:4b:31:80:32:d5:05:
67:0a:2c:2f:86:a4:42:0a:a8:1f:9c:01:e7:d5:c8:
ea:80:2d:2c:cd:57:a2:12:07:1f:aa:fc:1b:5f:a0:
11:5b:5e:b2:88:45:b1:93:03:c9:f7:91:bd:ef:c9:
18:7a:fe:d7:aa:5e:ec:06:bc:a5:93:03:51:79:f9:
94:55:2e:35:2d:d5:1c:c8:8f:12:a5:ac:ab:7f:81:
75:7b:8b:0c:c0:05:0c:7b:76:0f:0b:8e:ef:d7:2e:
b2:5b:ee:d4:83:47:66:c0:15:bb:15:7d:7c:1c:9d:
f0:f5:63:9f:e0:42:79:b7:ec:c1:bc:b4:5c:e5:6b:
ea:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2B:25:9E:59:26:56:67:CE:72:6E:6B:1D:DD:DB:51:BB:45:87:D2
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/PislnlkmVmfOcm5rHd3bUbtFh9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:e1c0::/29
Signature Algorithm: sha256WithRSAEncryption
9f:78:86:b2:99:46:b9:94:48:44:a4:3f:fc:6a:0f:67:30:56:
df:cf:aa:a8:28:57:0a:49:81:cb:f9:51:97:33:3a:2d:d0:82:
cf:c9:d8:c4:86:55:8e:04:22:92:cf:96:1f:bb:cc:2c:02:54:
09:a5:5a:c1:eb:e0:21:46:89:d6:47:c5:9a:1b:3e:6b:ef:74:
d3:b5:26:b6:80:92:e1:d7:30:17:c0:ee:62:35:15:ac:de:6f:
99:74:c2:38:23:bd:f2:9e:eb:95:c7:64:d7:b5:2b:1d:f6:07:
3a:88:65:49:b4:29:d6:ea:a4:7f:1d:8a:11:d6:ba:f6:d0:fd:
fd:6b:c3:e3:0d:f9:88:1a:83:1d:7e:7a:36:be:fd:1c:a0:21:
71:3f:02:76:f3:2b:07:91:48:ea:37:a2:e4:85:2f:23:11:92:
3a:08:07:76:a5:d5:e2:6e:d1:9f:93:3e:bf:13:dc:7e:95:aa:
b7:7d:0d:e4:11:aa:4d:79:d7:18:a9:6c:e2:10:1d:cd:d0:20:
b3:b6:c7:53:73:4d:f4:17:9c:c9:90:9c:ee:98:12:40:a5:9c:
ba:04:87:07:b6:45:02:9d:1c:82:0a:8f:ce:51:6a:68:e5:51:
3f:26:6e:ce:d5:74:cc:d3:de:c1:50:71:a4:04:a9:e6:b5:28:
11:32:41:52
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEAjaN4DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YWY5YzU0MGIxNDZiYjQ0YzgyMTlkMDEzNzVjMTAxMjQ5MjBhZTlmMB4XDTIyMDEw
MTEwMDMyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2UyYjI1OWU1OTI2
NTY2N2NlNzI2ZTZiMWRkZGRiNTFiYjQ1ODdkMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKbBm01xGimiBNOsh62kgt9lDGqmVg6GGduRHvsd7wjCVmXt
UutZdoY1dkN9Bml3edlC0PDg7QVL3XT2g2q0hoPSZ0wXsd1vGj4mKKpWme6S41y4
lpyUYV+/fiXTUMNHQniwl0Es57zq9g76sQfRlQ9WwoBzb8VgFacCqQ91BnYJSzGA
MtUFZwosL4akQgqoH5wB59XI6oAtLM1XohIHH6r8G1+gEVtesohFsZMDyfeRve/J
GHr+16pe7Aa8pZMDUXn5lFUuNS3VHMiPEqWsq3+BdXuLDMAFDHt2DwuO79cuslvu
1INHZsAVuxV9fByd8PVjn+BCebfswby0XOVr6tcCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBQ+KyWeWSZWZ85ybmsd3dtRu0WH0jAfBgNVHSMEGDAWgBRq+cVAsUa7RMgh
nQE3XBASSSCunzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2F2bkZRTEZHdTBUSUlaMEJOMXdRRWtrZ3JwOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWIvMzc5NTI5LWY0NjktNDM2My04Yjg3LTQyMWE5OWJkZDc4Zi8x
L1Bpc2xubGttVm1mT2NtNXJIZDNiVWJ0Rmg5SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIv
Mzc5NTI5LWY0NjktNDM2My04Yjg3LTQyMWE5OWJkZDc4Zi8xL2F2bkZRTEZHdTBU
SUlaMEJOMXdRRWtrZ3JwOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoQ4cAwDQYJKoZIhvcNAQELBQAD
ggEBAJ94hrKZRrmUSESkP/xqD2cwVt/PqqgoVwpJgcv5UZczOi3Qgs/J2MSGVY4E
IpLPlh+7zCwCVAmlWsHr4CFGidZHxZobPmvvdNO1JraAkuHXMBfA7mI1Fazeb5l0
wjgjvfKe65XHZNe1Kx32BzqIZUm0KdbqpH8dihHWuvbQ/f1rw+MN+Ygagx1+eja+
/RygIXE/AnbzKweRSOo3ouSFLyMRkjoIB3al1eJu0Z+TPr8T3H6Vqrd9DeQRqk15
1xipbOIQHc3QILO2x1NzTfQXnMmQnO6YEkClnLoEhwe2RQKdHIIKj85RamjlUT8m
bs7VdMzT3sFQcaQEqea1KBEyQVI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:39 2024 by rpki-client on console-fra.rpki-client.org