Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3qr5wkgjhWCH6m0mSbUs3NpwHGk.roa
File: 3qr5wkgjhWCH6m0mSbUs3NpwHGk.roa (raw, json)
Hash identifier: +jYqpd3HF8sphhttvma3v7IEjjyh92UWOVoP6lOc1Ig=
Subject key identifier: DE:AA:F9:C2:48:23:85:60:87:EA:6D:26:49:B5:2C:DC:DA:70:1C:69
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 059AC7B3
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3qr5wkgjhWCH6m0mSbUs3NpwHGk.roa
Signing time: Sat 01 Jan 2022 07:03:59 +0000
ROA not before: Sat 01 Jan 2022 07:03:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43443
IP address blocks: 2a03:9c00:a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94029747 (0x59ac7b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 07:03:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=deaaf9c24823856087ea6d2649b52cdcda701c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:dd:2b:e5:47:dd:1a:56:3c:3b:01:b4:df:
46:af:30:d1:2b:a7:e3:70:cd:03:ea:c4:5b:bc:a4:
a8:08:d3:54:1d:d9:a8:bb:8f:84:cb:c6:8c:25:fc:
b1:0a:80:cc:e6:47:8f:62:92:25:41:ce:c5:4a:81:
59:27:2f:b0:8a:36:72:13:c8:11:92:63:10:8f:b0:
2d:e0:5f:db:1b:1c:8e:b2:f6:50:3a:1f:08:29:73:
74:12:dd:61:55:00:93:f8:de:b0:aa:5c:17:75:67:
13:8b:44:0e:c4:5e:13:0a:23:11:c6:ef:0f:50:32:
d9:48:ae:5d:c8:20:f2:83:89:fb:76:b9:1e:28:1c:
95:aa:1d:a1:b6:9e:a4:f8:6a:12:59:15:45:94:9a:
41:cd:b8:ca:44:88:f5:05:7e:ad:7c:e3:81:5e:eb:
4e:28:21:3a:54:34:1f:2b:25:40:cf:43:7c:af:e0:
85:5e:a5:f4:96:c9:33:67:78:4a:d2:15:88:6a:69:
06:ce:14:fe:11:7d:d1:43:cd:bf:34:d5:be:73:ef:
9e:9b:5d:03:25:b3:16:26:3b:af:59:d6:0d:5a:91:
29:53:83:52:bb:c4:69:f5:41:d9:3e:c2:8e:e3:f8:
ab:31:20:05:9a:3c:43:60:f7:42:34:43:aa:e3:d5:
fa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AA:F9:C2:48:23:85:60:87:EA:6D:26:49:B5:2C:DC:DA:70:1C:69
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3qr5wkgjhWCH6m0mSbUs3NpwHGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:9c00:a::/48
Signature Algorithm: sha256WithRSAEncryption
9b:b7:cb:15:aa:6a:a7:37:15:7b:56:87:93:b6:08:3c:99:65:
85:25:74:40:53:05:d0:94:e9:2a:34:ca:c3:54:36:12:0f:72:
76:8a:f8:e7:fb:4f:dc:ec:f2:18:47:90:10:52:7d:e8:15:c8:
47:f8:2e:ba:a1:3a:9c:4f:0c:0f:b3:9d:f8:0f:85:b5:a3:ee:
b8:f1:48:68:fc:b4:6d:3e:03:60:da:bd:66:4e:c1:48:fc:08:
9c:56:19:bd:24:1a:85:00:b0:3e:1e:b8:ea:1d:f8:e5:d3:fb:
ff:07:bc:fb:54:6b:51:66:23:63:de:6f:93:5e:7b:8a:a3:65:
e9:5e:73:8a:1d:20:79:6d:df:b1:c5:3c:eb:bf:a0:9c:59:21:
22:e6:fd:2d:1a:0e:3d:97:75:c2:4a:37:c4:f7:c5:25:ba:c6:
46:16:f8:7d:94:45:93:3f:d6:90:b9:f2:89:14:51:da:84:57:
4b:cd:83:69:1c:62:52:d3:c3:48:73:be:51:25:a7:10:19:13:
6a:0e:2b:ba:79:28:12:a9:11:02:55:20:0e:1c:37:d9:1a:74:
26:64:b5:29:aa:de:4a:0e:57:ae:e8:c6:5b:c3:36:f6:ba:28:
9d:94:ba:b1:5c:83:83:dc:4c:fa:fe:93:16:3c:7f:b8:96:f6:
41:57:b1:80
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBZrHszANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
Y2VmNThkNGNmYTM1NTQzZjg0ODhhMjc1NmU2OTI0ZTY0N2I0NTg5MB4XDTIyMDEw
MTA3MDM1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGVhYWY5YzI0ODIz
ODU2MDg3ZWE2ZDI2NDliNTJjZGNkYTcwMWM2OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKyd3SvlR90aVjw7AbTfRq8w0Sun43DNA+rEW7ykqAjTVB3Z
qLuPhMvGjCX8sQqAzOZHj2KSJUHOxUqBWScvsIo2chPIEZJjEI+wLeBf2xscjrL2
UDofCClzdBLdYVUAk/jesKpcF3VnE4tEDsReEwojEcbvD1Ay2UiuXcgg8oOJ+3a5
HigclaodobaepPhqElkVRZSaQc24ykSI9QV+rXzjgV7rTighOlQ0HyslQM9DfK/g
hV6l9JbJM2d4StIViGppBs4U/hF90UPNvzTVvnPvnptdAyWzFiY7r1nWDVqRKVOD
UrvEafVB2T7CjuP4qzEgBZo8Q2D3QjRDquPV+ssCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTeqvnCSCOFYIfqbSZJtSzc2nAcaTAfBgNVHSMEGDAWgBTc71jUz6NVQ/hI
iidW5pJOZHtFiTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNPOVkxTS1qVlVQNFNJb25WdWFTVG1SN1JZay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWEvZWE0NDU1LTc4MzYtNDRjNC1iMmEzLTJlY2UwNGUxODVjMi8x
LzNxcjV3a2dqaFdDSDZtMG1TYlVzM05wd0hHay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEv
ZWE0NDU1LTc4MzYtNDRjNC1iMmEzLTJlY2UwNGUxODVjMi8xLzNPOVkxTS1qVlVQ
NFNJb25WdWFTVG1SN1JZay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoDnAAACjANBgkqhkiG9w0BAQsF
AAOCAQEAm7fLFapqpzcVe1aHk7YIPJllhSV0QFMF0JTpKjTKw1Q2Eg9ydor45/tP
3OzyGEeQEFJ96BXIR/guuqE6nE8MD7Od+A+FtaPuuPFIaPy0bT4DYNq9Zk7BSPwI
nFYZvSQahQCwPh646h345dP7/we8+1RrUWYjY95vk157iqNl6V5zih0geW3fscU8
67+gnFkhIub9LRoOPZd1wko3xPfFJbrGRhb4fZRFkz/WkLnyiRRR2oRXS82DaRxi
UtPDSHO+USWnEBkTag4runkoEqkRAlUgDhw32Rp0JmS1KareSg5XrujGW8M29roo
nZS6sVyDg9xM+v6TFjx/uJb2QVexgA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:14 2024 by rpki-client on console-fra.rpki-client.org