Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/4wD_p9Hh3O3Xnag0o7mB3KLYaD8.roa
File: 4wD_p9Hh3O3Xnag0o7mB3KLYaD8.roa (raw, json)
Hash identifier: kvbtbeuuaSknXvV8c8OZu5o/+jZJD20RTRrarNihW9E=
Subject key identifier: E3:00:FF:A7:D1:E1:DC:ED:D7:9D:A8:34:A3:B9:81:DC:A2:D8:68:3F
Certificate issuer: /CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Certificate serial: 06D3A65E
Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/4wD_p9Hh3O3Xnag0o7mB3KLYaD8.roa
Signing time: Wed 02 Mar 2022 15:21:25 +0000
ROA not before: Wed 02 Mar 2022 15:21:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6279
IP address blocks: 2a03:5400:100::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114533982 (0x6d3a65e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Validity
Not Before: Mar 2 15:21:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e300ffa7d1e1dcedd79da834a3b981dca2d8683f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:53:d9:4b:2c:34:b0:87:2e:c1:8b:e1:b4:2a:
21:de:2e:f7:1b:7c:4d:68:d0:1f:8a:9b:58:fc:88:
a0:b6:5d:8f:3d:51:76:bc:ec:91:37:9a:a8:c1:90:
9e:c8:fa:fc:71:f8:b4:41:53:c5:7e:90:62:a6:b5:
1d:aa:84:b1:9a:72:07:4e:0d:fd:2e:a2:68:c7:88:
99:63:87:37:e4:ac:02:8a:42:24:68:c6:66:05:c6:
cf:8b:c7:51:ab:64:c6:d7:2e:f2:27:35:10:72:84:
cc:a9:7a:1a:94:50:a8:d7:ff:3b:e7:09:53:e0:81:
73:1f:7e:3e:5a:e4:db:d0:b4:93:c9:30:56:79:e5:
2e:a6:98:19:b2:b8:0a:b4:7b:d9:e8:71:31:f5:18:
de:c3:5d:3b:14:97:92:f7:40:11:f5:0e:88:71:ab:
2b:e7:3b:08:b1:1e:2a:31:ce:64:40:e1:a7:1b:81:
73:45:35:87:72:45:a0:2c:af:89:f7:cf:c0:7f:27:
ff:2a:d1:94:bd:49:be:34:85:8e:63:4f:0d:96:59:
4f:f6:31:c8:86:18:a5:cf:0b:c6:d8:f0:13:71:79:
87:6b:00:bf:e3:96:a8:8e:e1:58:5c:65:fc:91:4a:
28:ae:9b:68:11:f2:95:e0:f9:f5:63:75:ba:d7:32:
f2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:00:FF:A7:D1:E1:DC:ED:D7:9D:A8:34:A3:B9:81:DC:A2:D8:68:3F
X509v3 Authority Key Identifier:
keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/4wD_p9Hh3O3Xnag0o7mB3KLYaD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5400:100::/40
Signature Algorithm: sha256WithRSAEncryption
b2:b4:3b:db:29:34:fb:ba:a2:9c:62:76:33:9a:a4:50:b5:57:
86:2b:19:ec:70:5b:59:de:29:53:c7:60:4d:a8:66:56:af:bf:
4d:df:82:b9:a6:a4:52:31:ad:af:f8:9d:bd:d6:45:5e:05:5b:
4e:36:4f:06:24:bf:61:b1:af:1b:53:12:a8:b8:80:9d:dd:5b:
9a:e2:fe:d3:07:1e:e3:67:1a:a1:12:5c:65:e5:55:8b:1f:b6:
36:a4:bd:a1:dd:40:50:1f:09:20:5a:a8:ae:7b:62:3a:9b:ea:
5a:4e:6b:c0:81:22:31:8d:a1:09:d8:6d:26:8b:a0:9d:22:db:
72:6a:56:88:e7:05:10:a3:42:b3:f0:a3:d9:74:a6:f7:51:d8:
e5:4c:cc:03:e4:1b:1d:b3:7f:cb:dd:3c:a3:41:67:d5:ad:4f:
a7:b3:ea:e6:c3:ad:c9:df:d4:fa:63:90:64:71:a8:1a:ba:39:
21:23:98:fb:88:d0:83:96:59:f0:76:af:72:b2:64:ea:22:fa:
f6:e8:3c:3e:06:11:b5:18:fb:b2:8d:b3:e9:97:2f:d6:e6:77:
0e:aa:85:2d:b6:71:0c:74:8d:dc:e7:d9:37:2f:4b:6e:3c:90:
70:d0:6a:4e:73:5d:a3:6b:af:2f:56:ba:06:a2:7b:2d:51:df:
63:f1:1b:67
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEBtOmXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ODUzMWFlMmNlNTdjOTVmNWEzOTg5MzBlYTQ1NTAzNTQyODAxYmExMB4XDTIyMDMw
MjE1MjEyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTMwMGZmYTdkMWUx
ZGNlZGQ3OWRhODM0YTNiOTgxZGNhMmQ4NjgzZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIpT2UssNLCHLsGL4bQqId4u9xt8TWjQH4qbWPyIoLZdjz1R
drzskTeaqMGQnsj6/HH4tEFTxX6QYqa1HaqEsZpyB04N/S6iaMeImWOHN+SsAopC
JGjGZgXGz4vHUatkxtcu8ic1EHKEzKl6GpRQqNf/O+cJU+CBcx9+Plrk29C0k8kw
VnnlLqaYGbK4CrR72ehxMfUY3sNdOxSXkvdAEfUOiHGrK+c7CLEeKjHOZEDhpxuB
c0U1h3JFoCyviffPwH8n/yrRlL1JvjSFjmNPDZZZT/YxyIYYpc8LxtjwE3F5h2sA
v+OWqI7hWFxl/JFKKK6baBHyleD59WN1utcy8gUCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBTjAP+n0eHc7dedqDSjuYHcothoPzAfBgNVHSMEGDAWgBTIUxrizlfJX1o5
iTDqRVA1QoAboTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lGTWE0czVYeVY5YU9Za3c2a1ZRTlVLQUc2RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWMvYzRjMzJjLTMyMmUtNGVkNy04YTI5LTQ1ZDU0MmQ1ZjU1Zi8x
LzR3RF9wOUhoM08zWG5hZzBvN21CM0tMWWFEOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMv
YzRjMzJjLTMyMmUtNGVkNy04YTI5LTQ1ZDU0MmQ1ZjU1Zi8xL3lGTWE0czVYeVY5
YU9Za3c2a1ZRTlVLQUc2RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoDVAABMA0GCSqGSIb3DQEBCwUA
A4IBAQCytDvbKTT7uqKcYnYzmqRQtVeGKxnscFtZ3ilTx2BNqGZWr79N34K5pqRS
Ma2v+J291kVeBVtONk8GJL9hsa8bUxKouICd3Vua4v7TBx7jZxqhElxl5VWLH7Y2
pL2h3UBQHwkgWqiue2I6m+paTmvAgSIxjaEJ2G0mi6CdIttyalaI5wUQo0Kz8KPZ
dKb3UdjlTMwD5Bsds3/L3TyjQWfVrU+ns+rmw63J39T6Y5BkcagaujkhI5j7iNCD
llnwdq9ysmTqIvr26Dw+BhG1GPuyjbPply/W5ncOqoUttnEMdI3c59k3L0tuPJBw
0GpOc12ja68vVroGonstUd9j8Rtn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:52 2024 by rpki-client on console-fra.rpki-client.org