Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/jk7HjW_JT8LTHHkQGj-64kPBxe8.roa
File: jk7HjW_JT8LTHHkQGj-64kPBxe8.roa (raw, json)
Hash identifier: +V4jGSwEtraNGbft4gSIXlSYWtuvJxTsOdLgkOwF2Zs=
Subject key identifier: 8E:4E:C7:8D:6F:C9:4F:C2:D3:1C:79:10:1A:3F:BA:E2:43:C1:C5:EF
Certificate issuer: /CN=9fb79d298110b6fb319301ebc22bf180e7054796
Certificate serial: 1623364E
Authority key identifier: 9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/jk7HjW_JT8LTHHkQGj-64kPBxe8.roa
Signing time: Sat 01 Jan 2022 15:03:34 +0000
ROA not before: Sat 01 Jan 2022 15:03:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8949
IP address blocks: 2001:67c:7bc::/48 maxlen: 48
2001:67c:560::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371406414 (0x1623364e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb79d298110b6fb319301ebc22bf180e7054796
Validity
Not Before: Jan 1 15:03:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e4ec78d6fc94fc2d31c79101a3fbae243c1c5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c0:e3:68:34:26:7c:2c:a4:ea:a7:08:1e:b7:
8c:08:d1:ed:d1:b8:7f:0b:41:2a:d9:fb:3f:90:11:
84:70:3b:dd:fb:10:d1:64:15:05:6f:44:53:bb:87:
68:95:d9:e7:f6:5d:e7:9d:a3:23:ef:4a:0e:3e:48:
c1:f4:69:b2:d2:c2:d8:3f:55:a8:c0:4d:2d:c9:db:
84:87:3e:67:9d:a8:67:30:3c:f7:66:1f:7b:83:40:
39:03:b8:b0:aa:b7:2e:46:8b:e1:09:1d:ab:e6:e4:
ce:02:5e:8d:38:c1:6f:7f:fa:d1:55:a5:06:38:59:
e6:26:fc:fe:c7:2e:dd:4c:9e:f5:d2:2d:24:d2:f8:
1f:f9:14:66:fa:98:f9:1a:f5:98:12:e1:5a:2d:73:
1f:7e:c3:13:61:49:eb:3d:c1:f6:dd:52:0b:5d:63:
5d:5e:ea:44:8d:53:c8:4b:f9:fb:69:d8:eb:7b:90:
47:4a:e3:02:b3:bd:71:20:38:9c:fb:5f:b3:20:0a:
82:f0:62:54:f6:7c:09:15:1a:08:bb:d5:6d:de:a5:
79:10:c6:a3:b1:61:70:fb:05:e0:19:5a:88:be:f9:
47:03:0f:c1:bb:f9:a2:e5:e5:1c:f7:6f:14:45:b4:
8d:3d:48:76:17:90:48:c5:a6:f3:0f:ad:d7:0b:bb:
20:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4E:C7:8D:6F:C9:4F:C2:D3:1C:79:10:1A:3F:BA:E2:43:C1:C5:EF
X509v3 Authority Key Identifier:
keyid:9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/jk7HjW_JT8LTHHkQGj-64kPBxe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:560::/48
2001:67c:7bc::/48
Signature Algorithm: sha256WithRSAEncryption
23:76:2a:57:0f:61:36:46:bc:2e:f5:84:68:3c:0b:df:1b:56:
eb:a9:f3:dc:51:bf:14:0c:a4:53:e2:ee:21:c2:e3:f2:a4:4e:
de:10:58:7d:ab:61:42:08:78:ba:36:f0:cd:bc:7d:34:bb:f0:
10:fb:fc:92:59:46:0c:de:91:59:54:d9:e8:1f:57:20:e4:70:
36:fb:ad:c0:c5:85:b6:e1:7e:37:4a:71:0c:3d:f5:01:93:7e:
44:56:c1:51:34:7f:09:07:db:93:3e:38:78:6e:16:45:94:b4:
87:94:75:02:88:1f:5b:b4:ee:bd:27:70:63:ce:dd:85:a7:5f:
ea:2f:48:09:dd:8e:65:f7:a9:5b:71:02:7a:2b:da:c0:31:3a:
05:10:be:34:0d:f9:fa:62:28:96:27:ca:33:6e:eb:47:26:a0:
37:35:86:52:bd:d9:c5:18:61:b2:ad:bf:42:b4:4b:11:9c:93:
32:cd:a2:2b:8c:fa:b1:c9:51:64:71:2e:19:bb:6d:10:12:b4:
d1:dc:29:f7:c8:50:68:52:6e:e6:7c:d4:42:70:b1:48:10:e2:
e8:35:ad:cd:a6:b4:17:e8:d8:c6:75:18:c6:6d:f7:95:b9:2d:
54:55:a0:3a:d0:f1:ee:56:fd:32:6f:7e:b4:8c:52:7a:ed:79:
c6:5d:c8:b6
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEFiM2TjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZmI3OWQyOTgxMTBiNmZiMzE5MzAxZWJjMjJiZjE4MGU3MDU0Nzk2MB4XDTIyMDEw
MTE1MDMzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGU0ZWM3OGQ2ZmM5
NGZjMmQzMWM3OTEwMWEzZmJhZTI0M2MxYzVlZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMbA42g0JnwspOqnCB63jAjR7dG4fwtBKtn7P5ARhHA73fsQ
0WQVBW9EU7uHaJXZ5/Zd552jI+9KDj5IwfRpstLC2D9VqMBNLcnbhIc+Z52oZzA8
92Yfe4NAOQO4sKq3LkaL4Qkdq+bkzgJejTjBb3/60VWlBjhZ5ib8/scu3Uye9dIt
JNL4H/kUZvqY+Rr1mBLhWi1zH37DE2FJ6z3B9t1SC11jXV7qRI1TyEv5+2nY63uQ
R0rjArO9cSA4nPtfsyAKgvBiVPZ8CRUaCLvVbd6leRDGo7FhcPsF4BlaiL75RwMP
wbv5ouXlHPdvFEW0jT1IdheQSMWm8w+t1wu7IKkCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSOTseNb8lPwtMceRAaP7riQ8HF7zAfBgNVHSMEGDAWgBSft50pgRC2+zGT
AevCK/GA5wVHljAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L243ZWRLWUVRdHZzeGt3SHJ3aXZ4Z09jRlI1WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTMvZTg1YTQxLWIzZmYtNGZjZC04MGIyLTRhYWJlYzBkMzBhMy8x
L2prN0hqV19KVDhMVEhIa1FHai02NGtQQnhlOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMv
ZTg1YTQxLWIzZmYtNGZjZC04MGIyLTRhYWJlYzBkMzBhMy8xL243ZWRLWUVRdHZz
eGt3SHJ3aXZ4Z09jRlI1WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACABBnwFYAMHACABBnwHvDANBgkq
hkiG9w0BAQsFAAOCAQEAI3YqVw9hNka8LvWEaDwL3xtW66nz3FG/FAykU+LuIcLj
8qRO3hBYfathQgh4ujbwzbx9NLvwEPv8kllGDN6RWVTZ6B9XIORwNvutwMWFtuF+
N0pxDD31AZN+RFbBUTR/CQfbkz44eG4WRZS0h5R1AogfW7TuvSdwY87dhadf6i9I
Cd2OZfepW3ECeivawDE6BRC+NA35+mIolifKM27rRyagNzWGUr3ZxRhhsq2/QrRL
EZyTMs2iK4z6sclRZHEuGbttEBK00dwp98hQaFJu5nzUQnCxSBDi6DWtzaa0F+jY
xnUYxm33lbktVFWgOtDx7lb9Mm9+tIxSeu15xl3Itg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:23 2024 by rpki-client on console-ams.rpki-client.org