Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/uuuMmgTxRtfM5j_Gx88Sp3ZYsxU.roa
File: uuuMmgTxRtfM5j_Gx88Sp3ZYsxU.roa (raw, json)
Hash identifier: Ciiv1kP7Z/w4eJAFdsJfhoGLOLWJax6DnDxN+M/hpcw=
Subject key identifier: BA:EB:8C:9A:04:F1:46:D7:CC:E6:3F:C6:C7:CF:12:A7:76:58:B3:15
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0811504A
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/uuuMmgTxRtfM5j_Gx88Sp3ZYsxU.roa
Signing time: Sat 01 Jan 2022 06:55:54 +0000
ROA not before: Sat 01 Jan 2022 06:55:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210522
IP address blocks: 2a0f:5707:abe0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135352394 (0x811504a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 06:55:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=baeb8c9a04f146d7cce63fc6c7cf12a77658b315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e8:5f:86:ef:18:80:42:45:0b:9d:af:94:6d:
4b:f8:3e:6d:72:ef:58:bc:06:ae:d5:45:28:82:49:
de:3d:06:b2:51:d4:de:45:83:d6:5e:68:c3:fa:12:
57:26:0c:45:a6:2b:26:36:59:09:61:3c:07:ea:3e:
45:6d:7a:46:fd:8e:9e:b8:71:0b:f4:8b:ae:83:63:
bd:ba:a8:f4:3b:18:bd:2e:77:44:3a:6e:73:4b:bd:
76:50:88:b0:33:6a:dd:cb:07:97:0c:ca:81:78:ce:
1e:f8:1b:e6:1c:e7:6e:60:56:f8:23:84:a3:45:c5:
2d:da:c6:90:02:fc:ce:6c:35:05:80:45:c1:fd:ed:
c5:dc:b4:ef:e0:f3:df:48:46:15:15:19:28:56:22:
fd:3c:0c:33:3b:86:46:0e:89:6e:b4:cb:c0:b6:4c:
b3:e3:45:b3:d7:02:56:59:ad:85:f2:87:6e:1e:40:
de:d0:ce:e0:c0:44:a4:be:5f:2d:76:72:f1:99:54:
d0:65:9a:4f:7f:4a:e6:4b:ce:93:17:e0:ae:97:65:
5f:53:0a:8d:46:4b:f4:16:37:46:fe:2a:8a:f4:68:
09:3e:2a:ee:86:2f:0c:0f:be:71:cc:af:86:db:15:
3e:0d:68:0d:42:6c:ac:d9:6b:e3:ec:ea:e5:c1:4f:
21:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EB:8C:9A:04:F1:46:D7:CC:E6:3F:C6:C7:CF:12:A7:76:58:B3:15
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/uuuMmgTxRtfM5j_Gx88Sp3ZYsxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:abe0::/44
Signature Algorithm: sha256WithRSAEncryption
79:16:47:08:79:5d:54:ed:7e:7a:aa:c3:23:77:b5:89:50:46:
6c:56:31:ef:a0:6c:0c:cf:f7:13:61:d2:1d:1f:b4:1e:b1:d7:
c9:29:a0:85:af:71:9c:f6:90:cf:aa:d8:00:d4:66:67:70:ad:
ac:d5:2b:66:5d:0a:22:d0:fc:7d:cc:ab:73:b4:fc:5a:a8:1c:
7e:1f:cd:0e:16:88:cf:83:3c:a5:b4:02:d4:df:20:92:6d:9b:
1a:77:04:7e:e4:a2:0c:b6:f7:55:b1:08:13:90:16:4a:26:ed:
38:35:09:b0:73:30:db:dc:1b:57:9a:dd:13:33:a1:56:61:93:
d8:86:0b:07:e5:3a:02:db:71:91:36:d4:d8:6c:a6:17:8a:49:
47:70:fd:35:7c:e5:79:44:1d:c8:ea:93:bd:53:50:4d:b7:00:
05:73:74:d9:ed:40:6a:71:5f:b6:af:fd:01:8d:81:a1:59:0c:
42:a6:52:e0:20:a8:e1:9b:cb:8c:58:05:f3:5f:ea:2f:21:33:
0c:0b:0e:dc:23:7d:e1:a1:0c:a8:8a:87:00:c4:dd:72:56:89:
b7:28:c4:01:6f:db:10:24:31:df:09:70:30:1b:f5:a2:57:cc:
7e:7c:3e:dc:6f:9d:86:ca:f8:e4:77:12:b8:dd:4a:66:46:26:
d3:72:92:e4
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECBFQSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YTY0NGMxMTU2ODUxODAzZjM3YWRlZWMwODc2Y2NmOTg5ZDVhZWYwMB4XDTIyMDEw
MTA2NTU1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmFlYjhjOWEwNGYx
NDZkN2NjZTYzZmM2YzdjZjEyYTc3NjU4YjMxNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOHoX4bvGIBCRQudr5RtS/g+bXLvWLwGrtVFKIJJ3j0GslHU
3kWD1l5ow/oSVyYMRaYrJjZZCWE8B+o+RW16Rv2OnrhxC/SLroNjvbqo9DsYvS53
RDpuc0u9dlCIsDNq3csHlwzKgXjOHvgb5hznbmBW+COEo0XFLdrGkAL8zmw1BYBF
wf3txdy07+Dz30hGFRUZKFYi/TwMMzuGRg6JbrTLwLZMs+NFs9cCVlmthfKHbh5A
3tDO4MBEpL5fLXZy8ZlU0GWaT39K5kvOkxfgrpdlX1MKjUZL9BY3Rv4qivRoCT4q
7oYvDA++ccyvhtsVPg1oDUJsrNlr4+zq5cFPIe8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBS664yaBPFG18zmP8bHzxKndlizFTAfBgNVHSMEGDAWgBRKZEwRVoUYA/N6
3uwIdsz5idWu8DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NtUk1FVmFGR0FQemV0N3NDSGJNLVluVnJ2QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTkvNmIwNzk4LTNkNGYtNDBlNi1iNzM5LWNjMWM5YjVmNjY0MC8x
L3V1dU1tZ1R4UnRmTTVqX0d4ODhTcDNaWXN4VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkv
NmIwNzk4LTNkNGYtNDBlNi1iNzM5LWNjMWM5YjVmNjY0MC8xL1NtUk1FVmFGR0FQ
emV0N3NDSGJNLVluVnJ2QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoPVwer4DANBgkqhkiG9w0BAQsF
AAOCAQEAeRZHCHldVO1+eqrDI3e1iVBGbFYx76BsDM/3E2HSHR+0HrHXySmgha9x
nPaQz6rYANRmZ3CtrNUrZl0KItD8fcyrc7T8Wqgcfh/NDhaIz4M8pbQC1N8gkm2b
GncEfuSiDLb3VbEIE5AWSibtODUJsHMw29wbV5rdEzOhVmGT2IYLB+U6AttxkTbU
2GymF4pJR3D9NXzleUQdyOqTvVNQTbcABXN02e1AanFftq/9AY2BoVkMQqZS4CCo
4ZvLjFgF81/qLyEzDAsO3CN94aEMqIqHAMTdclaJtyjEAW/bECQx3wlwMBv1olfM
fnw+3G+dhsr45HcSuN1KZkYm03KS5A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org