Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/bOqVuv0VRy5ij2UeaE2WsS0pEq4.roa
File: bOqVuv0VRy5ij2UeaE2WsS0pEq4.roa (raw, json)
Hash identifier: 5dKogCiT4kIxl23NCMyWgkPNzKelsbpj5qgWRnq/Z6o=
Subject key identifier: 6C:EA:95:BA:FD:15:47:2E:62:8F:65:1E:68:4D:96:B1:2D:29:12:AE
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 081D24DA
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/bOqVuv0VRy5ij2UeaE2WsS0pEq4.roa
Signing time: Sat 01 Jan 2022 06:55:59 +0000
ROA not before: Sat 01 Jan 2022 06:55:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212591
IP address blocks: 2a0f:5707:aad1::/48 maxlen: 48
2a0f:5707:aad0::/46 maxlen: 46
2a0f:5707:aad0::/44 maxlen: 48
2a0f:5707:aad0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136127706 (0x81d24da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 06:55:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cea95bafd15472e628f651e684d96b12d2912ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c6:79:e6:f2:d6:4f:16:ea:8c:a7:17:d8:f2:
47:5a:91:15:ff:cc:b4:bb:c9:f3:42:e2:6c:eb:b2:
8f:42:6e:91:9c:c3:9a:d9:41:be:db:dd:f1:e9:71:
5e:6f:54:b9:a4:8e:3d:4f:4c:f1:f8:16:5c:2a:f6:
68:9e:ba:07:5f:50:2b:e3:cf:88:3d:02:92:4f:70:
f5:a9:17:24:65:06:b9:f6:1d:1f:25:5e:ee:86:c6:
e7:99:40:b1:1e:89:6d:82:4e:81:62:51:54:dd:41:
e8:06:1f:be:1c:43:e0:be:51:c7:58:7b:c4:3b:ee:
12:1b:0d:46:fb:e0:fb:cd:13:82:85:a9:1f:ed:2f:
ad:9b:41:a8:59:42:17:a9:d2:6e:85:8a:33:43:bf:
75:f6:83:ff:07:92:11:db:10:5c:3b:07:7a:a2:bf:
19:bf:22:e6:f7:4d:2a:0e:fa:38:f0:cd:cc:ca:b9:
4f:97:92:4a:3f:40:bc:db:85:c1:5c:bb:46:4a:83:
43:7b:74:d3:57:c8:85:a0:ac:c2:d3:98:4b:1a:05:
b2:f4:3f:53:a8:41:03:7e:31:d2:23:cc:65:fd:09:
20:ee:12:96:6b:d1:1d:0a:ee:9c:b3:94:b3:38:fd:
ae:25:9c:7a:5c:9d:93:eb:62:6d:8c:83:d2:c5:ce:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EA:95:BA:FD:15:47:2E:62:8F:65:1E:68:4D:96:B1:2D:29:12:AE
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/bOqVuv0VRy5ij2UeaE2WsS0pEq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aad0::/44
Signature Algorithm: sha256WithRSAEncryption
3d:13:ce:26:9c:1b:4b:be:f3:25:20:db:b5:40:eb:0b:7f:16:
ea:2c:c2:22:73:21:71:02:6e:61:71:75:c4:4e:a5:15:69:77:
ab:7e:a1:81:a7:cc:98:d4:1e:70:1e:72:50:2e:51:86:ba:86:
aa:40:fc:9c:07:e4:ed:24:19:f0:9d:e9:dc:c9:20:7e:fd:bf:
64:dc:ff:cc:37:dd:1c:36:a1:02:81:92:c0:91:0d:1c:11:6a:
fa:13:90:7d:35:5e:76:3b:e2:9a:ce:0f:b0:f6:a9:94:3a:fd:
81:da:ce:f8:23:40:51:01:1e:65:71:fa:a6:52:98:38:fa:eb:
dd:02:e6:d4:d9:83:d3:14:48:9e:c9:ba:ef:82:29:f1:d2:23:
3a:c3:14:65:9c:28:eb:0c:75:6c:b2:10:28:f9:1e:db:83:e2:
94:cc:f7:ec:ae:91:6a:ff:f4:e1:b3:ae:46:c5:4d:bf:a5:a9:
09:90:be:79:ae:26:97:c8:5e:28:a6:dc:7f:1a:3c:b6:b8:6a:
da:ed:4b:80:4f:a5:52:12:b2:f6:3c:36:13:0c:a2:e0:61:47:
27:f9:e8:52:7c:34:e6:c3:32:30:13:6c:46:9b:a1:22:37:7d:
f1:ec:9c:4c:03:d1:8f:18:13:77:78:df:0a:e8:7c:76:4b:c5:
86:3f:34:77
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECB0k2jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YTY0NGMxMTU2ODUxODAzZjM3YWRlZWMwODc2Y2NmOTg5ZDVhZWYwMB4XDTIyMDEw
MTA2NTU1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmNlYTk1YmFmZDE1
NDcyZTYyOGY2NTFlNjg0ZDk2YjEyZDI5MTJhZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPDGeeby1k8W6oynF9jyR1qRFf/MtLvJ80LibOuyj0JukZzD
mtlBvtvd8elxXm9UuaSOPU9M8fgWXCr2aJ66B19QK+PPiD0Ckk9w9akXJGUGufYd
HyVe7obG55lAsR6JbYJOgWJRVN1B6AYfvhxD4L5Rx1h7xDvuEhsNRvvg+80TgoWp
H+0vrZtBqFlCF6nSboWKM0O/dfaD/weSEdsQXDsHeqK/Gb8i5vdNKg76OPDNzMq5
T5eSSj9AvNuFwVy7RkqDQ3t001fIhaCswtOYSxoFsvQ/U6hBA34x0iPMZf0JIO4S
lmvRHQrunLOUszj9riWcelydk+tibYyD0sXOhl8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRs6pW6/RVHLmKPZR5oTZaxLSkSrjAfBgNVHSMEGDAWgBRKZEwRVoUYA/N6
3uwIdsz5idWu8DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NtUk1FVmFGR0FQemV0N3NDSGJNLVluVnJ2QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTkvNmIwNzk4LTNkNGYtNDBlNi1iNzM5LWNjMWM5YjVmNjY0MC8x
L2JPcVZ1djBWUnk1aWoyVWVhRTJXc1MwcEVxNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkv
NmIwNzk4LTNkNGYtNDBlNi1iNzM5LWNjMWM5YjVmNjY0MC8xL1NtUk1FVmFGR0FQ
emV0N3NDSGJNLVluVnJ2QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoPVweq0DANBgkqhkiG9w0BAQsF
AAOCAQEAPRPOJpwbS77zJSDbtUDrC38W6izCInMhcQJuYXF1xE6lFWl3q36hgafM
mNQecB5yUC5RhrqGqkD8nAfk7SQZ8J3p3Mkgfv2/ZNz/zDfdHDahAoGSwJENHBFq
+hOQfTVedjvims4PsPaplDr9gdrO+CNAUQEeZXH6plKYOPrr3QLm1NmD0xRInsm6
74Ip8dIjOsMUZZwo6wx1bLIQKPke24PilMz37K6Rav/04bOuRsVNv6WpCZC+ea4m
l8heKKbcfxo8trhq2u1LgE+lUhKy9jw2Ewyi4GFHJ/noUnw05sMyMBNsRpuhIjd9
8eycTAPRjxgTd3jfCuh8dkvFhj80dw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:22 2024 by rpki-client on console-ams.rpki-client.org