Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/iuI4G86NZtPw6oU46sGf8qFeiPA.roa
File: iuI4G86NZtPw6oU46sGf8qFeiPA.roa (raw, json)
Hash identifier: XISeP30RaVxvUedJzeTl/yRa5DT38JRL+Qtbk9wQ9uA=
Subject key identifier: 8A:E2:38:1B:CE:8D:66:D3:F0:EA:85:38:EA:C1:9F:F2:A1:5E:88:F0
Certificate issuer: /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Certificate serial: 046C806F
Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/iuI4G86NZtPw6oU46sGf8qFeiPA.roa
Signing time: Sat 01 Jan 2022 07:03:17 +0000
ROA not before: Sat 01 Jan 2022 07:03:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60918
IP address blocks: 2001:67c:1720::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74219631 (0x46c806f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Validity
Not Before: Jan 1 07:03:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ae2381bce8d66d3f0ea8538eac19ff2a15e88f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8d:bc:68:a0:7d:3b:88:65:5f:32:93:09:6d:
f7:d5:b1:9c:4b:38:da:15:98:10:4e:ba:4b:0b:7b:
ed:be:a6:a3:0f:7e:65:95:27:f2:3c:97:be:21:0c:
b7:35:86:10:5a:03:b3:6c:c8:4d:94:e5:df:0d:0f:
05:48:e1:1c:7b:df:8c:be:ee:08:cc:2a:48:8d:ae:
6b:8b:b0:74:45:82:8d:65:e8:df:a7:37:e6:42:0e:
33:4e:71:d1:5c:2f:82:f1:f2:ca:81:13:92:62:4e:
05:2e:18:da:1d:38:41:57:79:d8:3b:b5:aa:dd:85:
50:c3:52:ca:f6:a2:62:94:03:65:a9:96:59:d6:9e:
17:72:83:3f:f7:82:5e:cc:10:e1:ba:24:88:c1:ad:
54:68:55:c7:38:f4:18:b4:38:c0:97:15:7c:06:c9:
38:f0:f6:6d:26:34:85:50:98:fe:df:fa:24:de:7a:
11:6c:30:1d:bf:c9:7c:c3:73:80:c5:01:12:ff:65:
2f:30:20:e3:39:80:5c:ce:93:c5:64:32:91:9f:5c:
08:5b:59:28:c6:8e:26:47:3a:c0:cf:49:71:83:e4:
1b:6d:78:e1:4a:cb:36:a9:a1:d4:88:29:76:20:f6:
0e:e1:80:41:3e:27:1b:b1:f3:39:85:53:a9:64:66:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E2:38:1B:CE:8D:66:D3:F0:EA:85:38:EA:C1:9F:F2:A1:5E:88:F0
X509v3 Authority Key Identifier:
keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/iuI4G86NZtPw6oU46sGf8qFeiPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1720::/48
Signature Algorithm: sha256WithRSAEncryption
53:ba:2c:63:5d:e5:3f:71:09:31:f0:22:87:a8:7c:c1:5f:e5:
a6:1e:92:be:49:77:c2:a1:a3:f9:43:26:fc:3e:b0:f0:9c:f7:
23:02:08:6a:4f:ea:de:03:18:79:50:05:11:5e:ee:9f:e5:7e:
fe:1a:5d:e7:fb:94:d2:07:d9:85:f0:92:cc:e9:43:7b:fb:19:
5e:8e:f4:cb:51:05:6e:fe:6d:12:8a:f4:69:b0:33:57:b4:dd:
fd:60:51:1f:1f:8f:5d:a5:a6:70:63:4d:88:14:ad:ca:b6:d3:
88:02:67:ac:1e:64:94:d3:a9:3f:56:39:3f:93:02:25:1d:38:
cc:1d:bc:96:80:d6:5d:05:9d:41:54:cc:2a:8d:88:0d:35:52:
73:d2:a8:fd:c9:c6:07:fe:d9:40:58:1c:a3:07:c4:22:37:84:
62:c3:0e:61:85:2c:e0:d9:57:b7:d5:9e:c1:40:4e:1e:cf:a9:
bd:8c:7c:f4:e7:d7:be:c6:28:71:e6:76:e8:79:4b:95:83:c7:
63:e2:c2:3d:23:18:ae:e3:3b:49:e8:2d:f0:f6:f9:1f:5e:6f:
f8:58:89:5d:d5:59:4e:05:90:ff:17:b2:61:1b:0c:5b:fa:1e:
b8:30:d8:39:b1:ae:1f:a4:f3:11:62:00:30:05:44:63:32:78:
17:b3:89:3d
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEBGyAbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YjE5ZDFiY2FjNzUyMzEyZWM0ZGU2ZjViZDM5YWNjZTMyYWI2YmQ2MB4XDTIyMDEw
MTA3MDMxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGFlMjM4MWJjZThk
NjZkM2YwZWE4NTM4ZWFjMTlmZjJhMTVlODhmMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJKNvGigfTuIZV8ykwlt99WxnEs42hWYEE66Swt77b6mow9+
ZZUn8jyXviEMtzWGEFoDs2zITZTl3w0PBUjhHHvfjL7uCMwqSI2ua4uwdEWCjWXo
36c35kIOM05x0VwvgvHyyoETkmJOBS4Y2h04QVd52Du1qt2FUMNSyvaiYpQDZamW
WdaeF3KDP/eCXswQ4bokiMGtVGhVxzj0GLQ4wJcVfAbJOPD2bSY0hVCY/t/6JN56
EWwwHb/JfMNzgMUBEv9lLzAg4zmAXM6TxWQykZ9cCFtZKMaOJkc6wM9JcYPkG214
4UrLNqmh1IgpdiD2DuGAQT4nG7HzOYVTqWRmMokCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSK4jgbzo1m0/DqhTjqwZ/yoV6I8DAfBgNVHSMEGDAWgBRrGdG8rHUjEuxN
5vW9OazOMqtr1jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2F4blJ2S3gxSXhMc1RlYjF2VG1zempLcmE5WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWQvNzc3NzQ2LWZiZWYtNGU1OC1hZmRmLWI1NTFlNDk0MzVhMi8x
L2l1STRHODZOWnRQdzZvVTQ2c0dmOHFGZWlQQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQv
Nzc3NzQ2LWZiZWYtNGU1OC1hZmRmLWI1NTFlNDk0MzVhMi8xL2F4blJ2S3gxSXhM
c1RlYjF2VG1zempLcmE5WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwXIDANBgkqhkiG9w0BAQsF
AAOCAQEAU7osY13lP3EJMfAih6h8wV/lph6Svkl3wqGj+UMm/D6w8Jz3IwIIak/q
3gMYeVAFEV7un+V+/hpd5/uU0gfZhfCSzOlDe/sZXo70y1EFbv5tEor0abAzV7Td
/WBRHx+PXaWmcGNNiBStyrbTiAJnrB5klNOpP1Y5P5MCJR04zB28loDWXQWdQVTM
Ko2IDTVSc9Ko/cnGB/7ZQFgcowfEIjeEYsMOYYUs4NlXt9WewUBOHs+pvYx89OfX
vsYoceZ26HlLlYPHY+LCPSMYruM7Segt8Pb5H15v+FiJXdVZTgWQ/xeyYRsMW/oe
uDDYObGuH6TzEWIAMAVEYzJ4F7OJPQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:35 2024 by rpki-client on console-fra.rpki-client.org