Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/9XwPkwCzmNK6xB1j_JycktEJ7HM.roa
File: 9XwPkwCzmNK6xB1j_JycktEJ7HM.roa (raw, json)
Hash identifier: ph8BiZW0NQGpnF3lkUL++/r/ghYEHtRgKyXMNkH600Q=
Subject key identifier: F5:7C:0F:93:00:B3:98:D2:BA:C4:1D:63:FC:9C:9C:92:D1:09:EC:73
Certificate issuer: /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Certificate serial: 03787701
Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/9XwPkwCzmNK6xB1j_JycktEJ7HM.roa
Signing time: Sat 01 Jan 2022 06:55:18 +0000
ROA not before: Sat 01 Jan 2022 06:55:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212378
IP address blocks: 2001:678:ec0::/48 maxlen: 48
2001:678:ec4::/48 maxlen: 48
2001:678:9e4::/48 maxlen: 48
2001:67c:11f0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58226433 (0x3787701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Validity
Not Before: Jan 1 06:55:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f57c0f9300b398d2bac41d63fc9c9c92d109ec73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:9e:94:d0:ee:6c:7d:c0:f7:5c:a0:89:48:
84:62:2f:47:44:c9:98:ec:43:f1:cc:bb:6f:d7:c4:
cb:f0:e5:65:c6:37:df:68:67:c5:9d:14:25:4b:07:
6d:06:4b:68:76:0f:e0:8e:0a:b2:b1:35:bb:57:59:
ba:80:ff:23:7b:08:30:c4:bb:8e:fb:aa:d0:30:51:
61:11:58:1f:32:8c:13:73:9f:93:8d:6f:08:7c:36:
b5:70:8d:2a:88:68:7d:a0:e9:1a:7c:5d:52:d9:75:
3b:8a:0b:d6:d2:59:5c:96:49:4e:72:d0:7a:6c:f5:
c5:94:53:23:77:70:25:b0:c6:7b:22:08:70:98:07:
23:78:ab:ad:33:b6:57:d0:57:bd:ac:44:a3:ae:a1:
e5:21:9d:8c:47:87:64:60:d6:53:b9:d6:dd:26:73:
78:ab:1b:0b:f4:af:c8:31:14:de:76:2c:72:24:e8:
bc:8d:dd:45:d0:76:e0:7a:7b:8e:88:90:f1:7d:78:
f9:ae:47:5a:01:2e:a6:3d:cd:bf:d4:f2:b4:7f:c3:
3b:99:65:aa:f0:3d:fc:3f:78:54:2f:f2:24:69:e7:
70:fe:a9:42:f0:e7:b9:d1:39:70:b5:31:42:51:c7:
93:fe:a0:7e:66:64:fd:ec:b7:10:d8:b6:94:8c:60:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7C:0F:93:00:B3:98:D2:BA:C4:1D:63:FC:9C:9C:92:D1:09:EC:73
X509v3 Authority Key Identifier:
keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/9XwPkwCzmNK6xB1j_JycktEJ7HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:9e4::/48
2001:678:ec0::/48
2001:678:ec4::/48
2001:67c:11f0::/48
Signature Algorithm: sha256WithRSAEncryption
52:e5:36:6e:b3:63:7d:64:3a:d8:46:e0:5e:be:2c:a0:63:36:
b5:8f:bb:fd:d8:01:f1:e9:d0:c7:9e:32:34:51:c4:f3:12:74:
76:5b:ca:a8:4b:95:95:0a:04:ca:44:30:fc:31:55:85:15:d2:
bc:9e:58:ec:52:73:e9:71:29:3a:ed:14:5d:c8:54:e1:84:07:
fa:7a:94:d6:07:16:dc:3b:cf:35:e0:b9:39:30:02:33:75:d4:
e4:76:8e:41:fc:60:07:0a:34:65:f9:2c:15:58:e7:d4:00:53:
3e:a0:48:03:3d:b8:82:9f:ba:ed:08:26:7a:cf:cf:64:1e:72:
b5:cf:a4:ba:a8:91:7d:db:1d:24:fc:bd:57:4b:f6:59:af:a5:
de:a7:34:10:db:a5:ca:20:d2:c5:00:3c:79:89:d5:a3:96:c9:
54:97:d4:dc:f3:96:fd:86:37:76:65:28:f3:f4:51:0b:67:48:
8e:70:5c:51:bd:c0:30:97:1b:c1:7b:23:30:cb:27:15:69:dd:
3f:4e:ad:5a:e5:26:6e:46:70:9a:4c:6c:b7:1c:8f:cd:fd:a9:
03:89:f2:ca:92:34:db:10:e2:2b:c9:c3:20:90:02:7b:15:65:
a1:6e:94:16:ec:1e:a0:61:6d:d5:bf:36:a5:a0:80:3a:eb:e4:
45:8a:5a:ac
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEA3h3ATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZjhkN2VhNDdkMWI3MDBjM2Q2Yjc5OTM1OGFhN2VhNWVjYThiM2QyMB4XDTIyMDEw
MTA2NTUxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjU3YzBmOTMwMGIz
OThkMmJhYzQxZDYzZmM5YzljOTJkMTA5ZWM3MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALEbnpTQ7mx9wPdcoIlIhGIvR0TJmOxD8cy7b9fEy/DlZcY3
32hnxZ0UJUsHbQZLaHYP4I4KsrE1u1dZuoD/I3sIMMS7jvuq0DBRYRFYHzKME3Of
k41vCHw2tXCNKohofaDpGnxdUtl1O4oL1tJZXJZJTnLQemz1xZRTI3dwJbDGeyII
cJgHI3irrTO2V9BXvaxEo66h5SGdjEeHZGDWU7nW3SZzeKsbC/SvyDEU3nYsciTo
vI3dRdB24Hp7joiQ8X14+a5HWgEupj3Nv9TytH/DO5llqvA9/D94VC/yJGnncP6p
QvDnudE5cLUxQlHHk/6gfmZk/ey3ENi2lIxg5EMCAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBT1fA+TALOY0rrEHWP8nJyS0QnsczAfBgNVHSMEGDAWgBSPjX6kfRtwDD1r
eZNYqn6l7Kiz0jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2o0MS1wSDBiY0F3OWEzbVRXS3AtcGV5b3M5SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvNjMxNGU1LWE5NjQtNDRmNi1hZGExLTIwNTIwZTZiNjE3YS8x
LzlYd1Brd0N6bU5LNnhCMWpfSnlja3RFSjdITS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
NjMxNGU1LWE5NjQtNDRmNi1hZGExLTIwNTIwZTZiNjE3YS8xL2o0MS1wSDBiY0F3
OWEzbVRXS3AtcGV5b3M5SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAIwJAMHACABBngJ5AMHACABBngOwAMHACAB
BngOxAMHACABBnwR8DANBgkqhkiG9w0BAQsFAAOCAQEAUuU2brNjfWQ62EbgXr4s
oGM2tY+7/dgB8enQx54yNFHE8xJ0dlvKqEuVlQoEykQw/DFVhRXSvJ5Y7FJz6XEp
Ou0UXchU4YQH+nqU1gcW3DvPNeC5OTACM3XU5HaOQfxgBwo0ZfksFVjn1ABTPqBI
Az24gp+67Qgmes/PZB5ytc+kuqiRfdsdJPy9V0v2Wa+l3qc0ENulyiDSxQA8eYnV
o5bJVJfU3POW/YY3dmUo8/RRC2dIjnBcUb3AMJcbwXsjMMsnFWndP06tWuUmbkZw
mkxstxyPzf2pA4nyypI02xDiK8nDIJACexVloW6UFuweoGFt1b82paCAOuvkRYpa
rA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:48 2024 by rpki-client on console-fra.rpki-client.org