Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/6Yk5gQ-RadxgpUS9oB3Omgij3ng.roa
File: 6Yk5gQ-RadxgpUS9oB3Omgij3ng.roa (raw, json)
Hash identifier: O4olZpniJqp0Yi76g1d6uauxFuktqtq+laOAjFnGbtI=
Subject key identifier: E9:89:39:81:0F:91:69:DC:60:A5:44:BD:A0:1D:CE:9A:08:A3:DE:78
Certificate issuer: /CN=e69f2b69f4a95a521e18fb33e6793f467e031bc1
Certificate serial: 17184A
Authority key identifier: E6:9F:2B:69:F4:A9:5A:52:1E:18:FB:33:E6:79:3F:46:7E:03:1B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/6Yk5gQ-RadxgpUS9oB3Omgij3ng.roa
Signing time: Tue 15 Mar 2022 11:08:28 +0000
ROA not before: Tue 15 Mar 2022 11:08:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 2a12:5940::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1513546 (0x17184a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69f2b69f4a95a521e18fb33e6793f467e031bc1
Validity
Not Before: Mar 15 11:08:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e98939810f9169dc60a544bda01dce9a08a3de78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:89:a8:f6:cc:43:36:eb:8a:0a:90:9a:82:a8:
59:71:d3:00:fc:d4:79:6d:65:50:8e:eb:ff:a2:23:
ec:1f:b2:2e:67:ee:a0:ca:81:f0:30:9f:8b:05:be:
2e:6c:ca:fd:cb:6f:d9:54:7c:49:73:f4:2f:66:17:
2f:a9:18:41:ee:11:bd:36:38:78:ea:00:16:76:78:
f4:00:ed:25:18:f1:31:1e:5c:49:91:66:6f:1d:09:
4b:e3:4e:52:8a:5b:37:bf:25:c9:97:01:cf:27:3c:
ca:25:04:c1:eb:55:0f:59:52:b3:05:7b:64:16:4b:
b1:dd:8f:50:d4:65:f7:e7:37:c1:04:d2:4a:75:9f:
1a:7e:8c:46:06:49:89:61:f7:8f:4e:5b:f4:96:7e:
fa:88:2f:52:2a:62:e4:bd:13:ec:e1:1a:9a:7b:8b:
b6:03:ed:d4:e9:69:e0:19:51:e7:37:ff:7a:31:27:
5d:bb:0c:2a:e3:65:29:89:26:68:d2:df:ca:bf:86:
b2:40:ad:53:6f:6c:9b:dc:97:29:6f:87:92:bb:b6:
52:65:c1:a1:fb:55:97:67:58:d2:64:2d:d3:33:6b:
9e:45:53:5e:e2:e2:65:cb:1d:fc:73:53:5b:1b:7c:
aa:b7:21:7f:f6:2a:df:a5:1a:42:c0:5d:61:05:8a:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:89:39:81:0F:91:69:DC:60:A5:44:BD:A0:1D:CE:9A:08:A3:DE:78
X509v3 Authority Key Identifier:
keyid:E6:9F:2B:69:F4:A9:5A:52:1E:18:FB:33:E6:79:3F:46:7E:03:1B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/6Yk5gQ-RadxgpUS9oB3Omgij3ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/5p8rafSpWlIeGPsz5nk_Rn4DG8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5940::/29
Signature Algorithm: sha256WithRSAEncryption
a9:24:c6:92:55:be:fd:fe:18:e9:d9:5a:aa:61:15:57:13:01:
b2:2d:40:bc:8a:28:4b:b5:ae:d4:47:3c:b0:30:3f:b2:9e:c4:
82:9a:32:fd:86:b9:a2:fe:2a:79:67:8f:ed:a3:b8:f6:69:16:
f3:0d:fd:5d:22:82:b1:26:b6:ea:04:30:4e:b6:ac:03:b4:41:
dd:d4:2d:45:e1:8d:eb:05:a2:59:d4:6a:99:a8:98:db:67:0a:
c5:d7:bd:77:a2:13:ca:36:0c:96:65:bf:35:a4:2f:e4:0c:c0:
a0:42:4e:a9:e1:d7:b5:b7:24:3f:7a:27:48:c5:0d:f7:4d:49:
12:d9:de:9f:02:97:d8:1a:5f:b2:01:01:0a:56:99:65:f6:a5:
05:cf:29:01:25:21:1d:3c:ee:d8:19:03:c4:94:33:a0:7d:59:
0d:27:5d:45:2a:99:5e:10:9d:6a:ef:88:95:67:f9:88:cc:ef:
7d:aa:7d:82:6d:2b:b3:e6:58:a9:b0:a6:43:55:11:be:23:a2:
cc:34:b4:93:6e:85:0b:5d:15:8f:bf:3d:23:6f:a3:8c:06:ba:
f4:f8:64:43:6e:d3:f5:6a:fc:20:69:b7:14:08:18:73:fc:ab:
14:99:59:cf:7d:ff:3d:f6:a0:61:da:9b:c3:3d:6f:be:82:b3:
3d:3c:70:5d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIDFxhKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU2
OWYyYjY5ZjRhOTVhNTIxZTE4ZmIzM2U2NzkzZjQ2N2UwMzFiYzEwHhcNMjIwMzE1
MTEwODI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlOTg5Mzk4MTBmOTE2
OWRjNjBhNTQ0YmRhMDFkY2U5YTA4YTNkZTc4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA44mo9sxDNuuKCpCagqhZcdMA/NR5bWVQjuv/oiPsH7IuZ+6g
yoHwMJ+LBb4ubMr9y2/ZVHxJc/QvZhcvqRhB7hG9Njh46gAWdnj0AO0lGPExHlxJ
kWZvHQlL405Sils3vyXJlwHPJzzKJQTB61UPWVKzBXtkFkux3Y9Q1GX35zfBBNJK
dZ8afoxGBkmJYfePTlv0ln76iC9SKmLkvRPs4Rqae4u2A+3U6WngGVHnN/96MSdd
uwwq42UpiSZo0t/Kv4ayQK1Tb2yb3Jcpb4eSu7ZSZcGh+1WXZ1jSZC3TM2ueRVNe
4uJlyx38c1NbG3yqtyF/9irfpRpCwF1hBYpUgwIDAQABo4ICCjCCAgYwHQYDVR0O
BBYEFOmJOYEPkWncYKVEvaAdzpoIo954MB8GA1UdIwQYMBaAFOafK2n0qVpSHhj7
M+Z5P0Z+AxvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
NXA4cmFmU3BXbEllR1BzejVua19SbjRERzhFLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iZC8zN2VhYjAtN2Y1My00YjYyLWI1ZDQtNzgwMDZlMDc4MTcxLzEv
NllrNWdRLVJhZHhncFVTOW9CM09tZ2lqM25nLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8z
N2VhYjAtN2Y1My00YjYyLWI1ZDQtNzgwMDZlMDc4MTcxLzEvNXA4cmFmU3BXbEll
R1BzejVua19SbjRERzhFLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAG
CCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhJZQDANBgkqhkiG9w0BAQsFAAOC
AQEAqSTGklW+/f4Y6dlaqmEVVxMBsi1AvIooS7Wu1Ec8sDA/sp7Egpoy/Ya5ov4q
eWeP7aO49mkW8w39XSKCsSa26gQwTrasA7RB3dQtReGN6wWiWdRqmaiY22cKxde9
d6ITyjYMlmW/NaQv5AzAoEJOqeHXtbckP3onSMUN901JEtnenwKX2BpfsgEBClaZ
ZfalBc8pASUhHTzu2BkDxJQzoH1ZDSddRSqZXhCdau+IlWf5iMzvfap9gm0rs+ZY
qbCmQ1URviOizDS0k26FC10Vj789I2+jjAa69PhkQ27T9Wr8IGm3FAgYc/yrFJlZ
z33/PfagYdqbwz1vvoKzPTxwXQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:22 2024 by rpki-client on console-ams.rpki-client.org