Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/BYSo4x6fx3sTNgVJP_u5Vd3AqCs.roa
File: BYSo4x6fx3sTNgVJP_u5Vd3AqCs.roa (raw, json)
Hash identifier: OqEaG63QbSPPNOlbjlPbrzIYISsb5orI0aV291eJku4=
Subject key identifier: 05:84:A8:E3:1E:9F:C7:7B:13:36:05:49:3F:FB:B9:55:DD:C0:A8:2B
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 0183141AFF1C3228692BBB506629ABECD663
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/BYSo4x6fx3sTNgVJP_u5Vd3AqCs.roa
Signing time: Tue 06 Sep 2022 18:40:57 +0000
ROA not before: Tue 06 Sep 2022 18:40:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 2a11:840:2::/48 maxlen: 48
2a11:840:5::/48 maxlen: 48
2a11:840:3::/48 maxlen: 48
2a11:840:6::/48 maxlen: 48
2a11:840:9::/48 maxlen: 48
2a11:840:1::/48 maxlen: 48
2a11:840:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:14:1a:ff:1c:32:28:69:2b:bb:50:66:29:ab:ec:d6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Sep 6 18:40:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0584a8e31e9fc77b133605493ffbb955ddc0a82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:52:83:35:50:d3:2f:c5:92:0f:99:0f:2a:
d3:03:b4:3f:16:2b:14:2d:9d:d2:b2:24:9e:57:4f:
55:8a:ca:ca:4c:9f:67:69:9f:7c:54:9b:13:bd:6f:
4f:db:d1:83:6d:20:90:20:2a:9b:32:ae:e6:49:25:
a7:02:53:07:9a:5b:53:84:5d:e6:5c:24:6b:c9:72:
f0:af:59:e0:0a:63:27:73:04:d1:d4:4c:25:15:8a:
e2:10:2e:10:05:1d:91:2e:8c:d4:67:41:93:c1:96:
3f:20:0b:d2:3c:ef:fc:61:85:68:16:9f:1d:fa:92:
f7:ec:be:4e:f6:69:a9:53:bf:bd:01:c5:2c:18:30:
9f:2c:e5:8d:53:e3:68:39:89:3a:ae:46:6e:ac:84:
2a:f7:50:b1:42:c2:0f:41:6b:e0:4c:87:d6:57:c2:
f3:1a:26:da:09:d9:19:3d:27:8c:81:c9:d2:b9:02:
3a:57:b8:3f:ff:59:26:42:0c:a9:5a:6e:1d:a8:b7:
e6:f2:bf:1d:1f:90:51:c2:00:dd:f1:0d:78:d2:99:
b3:cc:b0:ed:68:ce:ff:05:4e:58:9f:95:a1:f4:09:
c6:b7:3b:3d:e3:a3:0e:3d:d3:68:6c:f9:be:b0:61:
b7:ef:e9:aa:d9:ab:2d:e7:59:bf:75:39:f1:72:da:
9c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:84:A8:E3:1E:9F:C7:7B:13:36:05:49:3F:FB:B9:55:DD:C0:A8:2B
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/BYSo4x6fx3sTNgVJP_u5Vd3AqCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:1::-2a11:840:6:ffff:ffff:ffff:ffff:ffff
2a11:840:9::/48
Signature Algorithm: sha256WithRSAEncryption
45:1c:c5:14:38:d8:fb:6c:f9:9c:4f:48:81:c6:e0:65:d4:78:
63:ad:4f:92:e7:9e:fc:cf:04:55:39:52:00:fa:87:06:ae:6b:
fa:68:c3:89:d0:d3:64:cf:5f:4b:c8:f8:63:e0:e3:f1:28:4a:
78:67:06:53:b8:c6:8e:5e:86:06:b2:7f:9b:fa:13:37:7c:86:
03:b3:d0:3a:b4:65:4a:e4:91:24:45:05:31:9d:82:08:ab:ba:
bf:22:14:02:05:a7:f3:f0:03:c4:7a:5f:0d:37:3e:5d:38:cd:
fa:c1:9b:4c:7c:8d:f2:3b:d5:91:fb:7a:54:65:a1:f3:b0:63:
e2:d6:71:9d:56:c1:a3:3d:61:5a:5f:ff:2c:c9:3e:ac:bf:60:
d4:07:9b:14:8a:6b:ae:87:45:cc:57:b7:8c:44:1c:b9:c9:de:
0b:0d:22:2f:a1:c9:f1:bc:57:09:c1:3a:d8:48:72:d7:8f:a3:
a4:06:a7:b9:67:24:41:f7:0d:f4:e4:3d:30:bd:51:3c:ae:1a:
43:cd:ce:b6:07:a8:1f:31:7d:ae:f2:28:24:7d:b2:8a:90:ca:
c7:24:2e:57:30:a5:20:2b:83:a6:75:d6:be:ed:8f:20:78:9e:
40:71:b6:78:d5:ce:49:8e:e9:c4:8e:f8:0f:bc:54:d5:ad:ee:
a0:87:58:9c
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYMUGv8cMihpK7tQZimr7NZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx
NjAwNDUwHhcNMjIwOTA2MTg0MDU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTg0YThlMzFlOWZjNzdiMTMzNjA1NDkzZmZiYjk1NWRkYzBhODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniJSgzVQ0y/Fkg+ZDyrTA7Q/FisU
LZ3SsiSeV09VisrKTJ9naZ98VJsTvW9P29GDbSCQICqbMq7mSSWnAlMHmltThF3m
XCRryXLwr1ngCmMncwTR1EwlFYriEC4QBR2RLozUZ0GTwZY/IAvSPO/8YYVoFp8d
+pL37L5O9mmpU7+9AcUsGDCfLOWNU+NoOYk6rkZurIQq91CxQsIPQWvgTIfWV8Lz
GibaCdkZPSeMgcnSuQI6V7g//1kmQgypWm4dqLfm8r8dH5BRwgDd8Q140pmzzLDt
aM7/BU5Yn5Wh9AnGtzs946MOPdNobPm+sGG37+mq2ast51m/dTnxctqcrQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFAWEqOMen8d7EzYFST/7uVXdwKgrMB8GA1UdIwQY
MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt
NTE5MjAzNzMzNTNjLzEvQllTbzR4NmZ4M3NUTmdWSlBfdTVWZDNBcUNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj
LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdMBIDBwAqEQhA
AAEDBwAqEQhAAAYDBwAqEQhAAAkwDQYJKoZIhvcNAQELBQADggEBAEUcxRQ42Pts
+ZxPSIHG4GXUeGOtT5LnnvzPBFU5UgD6hwaua/pow4nQ02TPX0vI+GPg4/EoSnhn
BlO4xo5ehgayf5v6Ezd8hgOz0Dq0ZUrkkSRFBTGdggirur8iFAIFp/PwA8R6Xw03
Pl04zfrBm0x8jfI71ZH7elRlofOwY+LWcZ1WwaM9YVpf/yzJPqy/YNQHmxSKa66H
RcxXt4xEHLnJ3gsNIi+hyfG8VwnBOthIctePo6QGp7lnJEH3DfTkPTC9UTyuGkPN
zrYHqB8xfa7yKCR9soqQysckLlcwpSArg6Z11r7tjyB4nkBxtnjVzkmO6cSO+A+8
VNWt7qCHWJw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:20 2024 by rpki-client on console-fra.rpki-client.org