Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/6-J84NDsIVl78ixmwgVlctcbZIQ.roa
File: 6-J84NDsIVl78ixmwgVlctcbZIQ.roa (raw, json)
Hash identifier: cBqB6OKGaGOfL4z4Y0udjATDKb/kKUXpiJQv3yFn4FE=
Subject key identifier: EB:E2:7C:E0:D0:EC:21:59:7B:F2:2C:66:C2:05:65:72:D7:1B:64:84
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0182E80225982DCC306304A9C865ED80AD98
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/6-J84NDsIVl78ixmwgVlctcbZIQ.roa
Signing time: Mon 29 Aug 2022 05:10:30 +0000
ROA not before: Mon 29 Aug 2022 05:10:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400177
IP address blocks: 2a0f:34c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e8:02:25:98:2d:cc:30:63:04:a9:c8:65:ed:80:ad:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Aug 29 05:10:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebe27ce0d0ec21597bf22c66c2056572d71b6484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:ca:05:50:d2:69:65:bc:2d:81:ca:60:b7:
70:96:27:2a:03:ee:45:fe:c4:b3:f4:b1:a7:1f:78:
ba:42:33:7d:7d:30:e9:a5:b0:c2:be:07:cd:45:8b:
7a:f3:67:7b:01:57:a6:7a:57:64:c7:e9:eb:6d:ac:
6c:39:1c:55:11:c0:03:33:8f:71:15:88:c7:7a:39:
52:fc:0e:00:ce:44:15:11:40:d9:62:ad:c4:9e:c6:
ee:96:5f:59:e2:7f:4c:5b:21:33:ed:73:97:f1:af:
44:d2:71:b6:83:4d:9a:95:85:a0:96:1a:40:08:3c:
d6:58:0d:56:3a:ff:11:e0:d1:dc:b0:3f:cf:d6:6a:
b8:e5:0c:2b:de:d4:62:99:a7:77:8d:eb:7d:d7:6f:
61:df:c1:8b:a5:e6:90:98:16:1a:e6:89:a2:9c:e8:
f9:43:49:8c:f2:a0:0a:de:11:b2:1f:c9:d9:e8:b8:
95:4d:bc:44:46:33:5b:9a:81:a8:1e:85:ce:fd:ce:
bd:54:24:ea:d5:c9:a7:5d:b7:d4:1d:7d:97:12:78:
24:92:51:a0:ed:ad:51:00:aa:71:40:15:03:11:9f:
2c:2b:f0:2e:cc:10:65:25:94:26:e5:2f:68:ec:f9:
3a:cf:ed:d3:dc:6c:a1:68:1e:16:9e:4a:16:e1:09:
68:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E2:7C:E0:D0:EC:21:59:7B:F2:2C:66:C2:05:65:72:D7:1B:64:84
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/6-J84NDsIVl78ixmwgVlctcbZIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:34c0::/29
Signature Algorithm: sha256WithRSAEncryption
bb:6d:ff:4e:3c:cb:88:98:64:d0:9b:c0:24:9e:57:74:99:59:
86:26:42:6c:e4:ae:bb:c9:42:99:db:c8:40:50:8b:37:6a:08:
07:2d:0b:5c:8e:59:e8:2e:bb:18:76:a8:7a:8a:04:0d:ca:34:
21:c1:5d:71:79:57:74:d3:87:8d:cb:6d:d4:73:2f:5c:0f:26:
a9:dd:5d:7e:ed:54:d0:9e:ed:a1:74:39:81:8d:61:c2:fd:60:
27:46:de:11:c4:84:6d:a1:7d:53:cc:3e:51:21:8f:82:1e:d0:
de:d5:46:d2:57:e7:bf:ff:0f:df:eb:c1:d0:8d:89:2c:24:62:
0a:e8:89:0c:b9:30:f6:1c:11:7b:0d:16:7e:2d:1e:67:88:2e:
7a:e1:80:ea:04:82:67:72:a6:cc:cc:a3:54:18:27:74:1b:91:
ac:c0:8b:07:4f:0b:0d:6a:4c:cd:9a:b2:e9:0e:00:0f:29:b8:
b9:6d:e6:63:0a:95:b2:bf:3e:03:32:61:6c:b1:05:5c:9b:1b:
b7:3d:37:d7:ad:ce:c5:1b:eb:38:6f:1c:97:82:9b:15:a2:5a:
9a:d2:ad:af:87:dc:ce:57:d9:55:1e:81:bf:ba:29:a2:e2:86:
05:bf:35:59:2a:55:07:6d:6c:e1:95:28:56:87:22:8d:e2:d3:
02:28:cf:ef
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYLoAiWYLcwwYwSpyGXtgK2YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjIwODI5MDUxMDMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmUyN2NlMGQwZWMyMTU5N2JmMjJjNjZjMjA1NjU3MmQ3MWI2NDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujXKBVDSaWW8LYHKYLdwlicqA+5F
/sSz9LGnH3i6QjN9fTDppbDCvgfNRYt682d7AVemeldkx+nrbaxsORxVEcADM49x
FYjHejlS/A4AzkQVEUDZYq3Ensbull9Z4n9MWyEz7XOX8a9E0nG2g02alYWglhpA
CDzWWA1WOv8R4NHcsD/P1mq45Qwr3tRimad3jet9129h38GLpeaQmBYa5ominOj5
Q0mM8qAK3hGyH8nZ6LiVTbxERjNbmoGoHoXO/c69VCTq1cmnXbfUHX2XEngkklGg
7a1RAKpxQBUDEZ8sK/AuzBBlJZQm5S9o7Pk6z+3T3GyhaB4WnkoW4QlowQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFOvifODQ7CFZe/IsZsIFZXLXG2SEMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvNi1KODRORHNJVmw3OGl4bXdnVmxjdGNiWklRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg80wDAN
BgkqhkiG9w0BAQsFAAOCAQEAu23/TjzLiJhk0JvAJJ5XdJlZhiZCbOSuu8lCmdvI
QFCLN2oIBy0LXI5Z6C67GHaoeooEDco0IcFdcXlXdNOHjctt1HMvXA8mqd1dfu1U
0J7toXQ5gY1hwv1gJ0beEcSEbaF9U8w+USGPgh7Q3tVG0lfnv/8P3+vB0I2JLCRi
CuiJDLkw9hwRew0Wfi0eZ4gueuGA6gSCZ3KmzMyjVBgndBuRrMCLB08LDWpMzZqy
6Q4ADym4uW3mYwqVsr8+AzJhbLEFXJsbtz03163OxRvrOG8cl4KbFaJamtKtr4fc
zlfZVR6Bv7opouKGBb81WSpVB21s4ZUoVocijeLTAijP7w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:51 2024 by rpki-client on console-ams.rpki-client.org