Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/JsSKl1QBRUaFwySrGfD-7sLzlSo.roa
File: JsSKl1QBRUaFwySrGfD-7sLzlSo.roa (raw, json)
Hash identifier: GNtutxFgGTRFZVeXr+cPKJxvmhiXuDEaZcCpmzrCVOo=
Subject key identifier: 26:C4:8A:97:54:01:45:46:85:C3:24:AB:19:F0:FE:EE:C2:F3:95:2A
Certificate issuer: /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial: 1BD40158
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/JsSKl1QBRUaFwySrGfD-7sLzlSo.roa
Signing time: Wed 26 Jan 2022 08:49:23 +0000
ROA not before: Wed 26 Jan 2022 08:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29442
IP address blocks: 2a02:cac0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466878808 (0x1bd40158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Validity
Not Before: Jan 26 08:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26c48a975401454685c324ab19f0feeec2f3952a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:10:bc:07:0c:c1:83:14:a9:e2:c7:41:49:
30:75:7a:33:48:dd:47:21:d1:54:97:d6:77:cc:12:
21:a0:4e:25:c6:f6:d4:90:3c:87:e4:67:be:0c:89:
4a:58:a2:c7:c9:37:77:0a:7d:4e:73:1b:3f:7b:c8:
80:76:89:f8:1d:fe:9c:af:50:7f:5f:ce:37:71:86:
0f:48:0e:b4:f4:87:1e:80:0a:06:51:23:e0:6e:1a:
03:6d:9f:c8:94:10:2e:41:be:e5:67:0f:61:52:bf:
24:ef:ef:48:57:25:0e:68:d1:26:59:49:d2:75:c8:
8e:2c:69:70:d8:11:09:e1:85:a7:c1:c6:20:73:6a:
d5:cc:05:e1:f6:b8:d3:69:7f:30:ad:68:e2:b4:58:
1c:3a:3a:33:e1:78:ee:3a:47:f0:e3:d2:0b:e2:56:
0d:cf:5e:f8:7a:01:28:38:dc:c7:67:b1:81:c0:e1:
54:87:21:d2:66:a5:c6:83:26:4a:c6:42:96:35:18:
1a:e5:6e:a4:d9:32:8f:21:9c:d7:03:e0:39:af:09:
65:c3:1b:12:5c:49:d4:1a:c9:3f:7c:36:d2:64:cf:
81:24:62:b4:2a:fc:35:4e:b8:1f:d0:40:d8:d1:ee:
88:0c:49:77:e1:a6:1c:52:6d:40:5e:36:f8:dd:c8:
0a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C4:8A:97:54:01:45:46:85:C3:24:AB:19:F0:FE:EE:C2:F3:95:2A
X509v3 Authority Key Identifier:
keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/JsSKl1QBRUaFwySrGfD-7sLzlSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:cac0::/29
Signature Algorithm: sha256WithRSAEncryption
b2:df:ea:cd:9d:ca:f1:9d:d2:f0:ad:d9:f1:42:8b:2d:e2:b7:
68:a3:d4:8b:fa:f8:82:99:d0:f6:ae:91:b3:98:4e:ba:81:4f:
fc:42:5a:a9:16:65:7a:1c:d2:fe:37:e3:49:cb:fe:57:ee:36:
19:1e:da:72:f1:da:82:41:f9:e0:f8:4b:b7:3f:b9:57:60:a8:
96:16:67:d9:b7:87:c3:a9:de:c2:49:4a:dc:a0:0b:12:6f:78:
a3:75:2e:d7:27:9a:d5:35:9f:07:99:d1:c0:2a:82:1e:aa:db:
ae:ed:3d:5b:79:15:9a:4d:34:b3:9e:17:1e:76:00:fc:db:09:
03:7a:e1:c2:0c:66:b1:05:51:e9:ee:e5:9f:94:27:cf:a7:30:
64:5c:2a:e7:e5:fe:00:84:e0:8c:61:c1:74:84:e7:48:86:9a:
99:ef:3e:ed:0b:f9:26:c2:6b:23:f4:76:1a:60:75:f0:04:f9:
3a:34:29:1b:35:7f:e2:8f:15:79:98:a5:21:2a:b8:d4:23:10:
5b:e9:73:81:c1:fe:19:5f:d3:6e:c1:a8:a5:87:56:7f:29:13:
85:28:b3:7c:1a:17:ce:97:3e:f1:18:55:b7:5a:6d:a0:3f:2a:
85:a5:e9:eb:fd:99:80:3c:15:26:75:8d:2d:98:b9:91:57:1b:
fd:49:ef:c2
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEG9QBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
Y2M4YTFhYWQwMjA1OTQzYTQ1NzIzODliYjc0MzM0ZTFjYTI4NDg1MB4XDTIyMDEy
NjA4NDkyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjZjNDhhOTc1NDAx
NDU0Njg1YzMyNGFiMTlmMGZlZWVjMmYzOTUyYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMvHELwHDMGDFKnix0FJMHV6M0jdRyHRVJfWd8wSIaBOJcb2
1JA8h+RnvgyJSliix8k3dwp9TnMbP3vIgHaJ+B3+nK9Qf1/ON3GGD0gOtPSHHoAK
BlEj4G4aA22fyJQQLkG+5WcPYVK/JO/vSFclDmjRJllJ0nXIjixpcNgRCeGFp8HG
IHNq1cwF4fa402l/MK1o4rRYHDo6M+F47jpH8OPSC+JWDc9e+HoBKDjcx2exgcDh
VIch0malxoMmSsZCljUYGuVupNkyjyGc1wPgOa8JZcMbElxJ1BrJP3w20mTPgSRi
tCr8NU64H9BA2NHuiAxJd+GmHFJtQF42+N3ICtsCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBQmxIqXVAFFRoXDJKsZ8P7uwvOVKjAfBgNVHSMEGDAWgBTsyKGq0CBZQ6RX
I4m7dDNOHKKEhTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdNaWhxdEFnV1VPa1Z5T0p1M1F6VGh5aWhJVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvYjMyOThiLTljNWEtNGUzOC04MTMxLTRhNjhmMjM1YzM4OC8x
L0pzU0tsMVFCUlVhRnd5U3JHZkQtN3NMemxTby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
YjMyOThiLTljNWEtNGUzOC04MTMxLTRhNjhmMjM1YzM4OC8xLzdNaWhxdEFnV1VP
a1Z5T0p1M1F6VGh5aWhJVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoCysAwDQYJKoZIhvcNAQELBQAD
ggEBALLf6s2dyvGd0vCt2fFCiy3it2ij1Iv6+IKZ0PaukbOYTrqBT/xCWqkWZXoc
0v4340nL/lfuNhke2nLx2oJB+eD4S7c/uVdgqJYWZ9m3h8Op3sJJStygCxJveKN1
LtcnmtU1nweZ0cAqgh6q267tPVt5FZpNNLOeFx52APzbCQN64cIMZrEFUenu5Z+U
J8+nMGRcKufl/gCE4IxhwXSE50iGmpnvPu0L+SbCayP0dhpgdfAE+To0KRs1f+KP
FXmYpSEquNQjEFvpc4HB/hlf027BqKWHVn8pE4Uos3waF86XPvEYVbdabaA/KoWl
6ev9mYA8FSZ1jS2YuZFXG/1J78I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:30 2024 by rpki-client on console-fra.rpki-client.org