Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/K1AVsP9VCu7M0tG0zCl9XDGSbak.roa
File: K1AVsP9VCu7M0tG0zCl9XDGSbak.roa (raw, json)
Hash identifier: kcrjhswlA633oJ9E3OBDAXccGrAXefo41AuxSPD69dE=
Subject key identifier: 2B:50:15:B0:FF:55:0A:EE:CC:D2:D1:B4:CC:29:7D:5C:31:92:6D:A9
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 010ABA
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/K1AVsP9VCu7M0tG0zCl9XDGSbak.roa
Signing time: Wed 04 May 2022 17:45:10 +0000
ROA not before: Wed 04 May 2022 17:45:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205227
IP address blocks: 2a12:8dc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68282 (0x10aba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: May 4 17:45:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b5015b0ff550aeeccd2d1b4cc297d5c31926da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:d5:dd:1c:07:27:80:40:8d:96:27:2b:8b:
c5:fe:40:ff:05:af:07:44:88:b4:9c:0d:f6:1c:26:
22:12:97:8b:e3:e6:aa:01:68:48:dc:82:4a:0e:a3:
40:7f:4b:ed:da:06:62:e3:05:bc:fb:fa:63:f4:5d:
e5:f5:7c:31:5d:b8:da:8d:de:90:97:f2:4d:d6:4e:
99:02:01:45:96:9e:cd:35:14:24:83:48:db:51:ec:
ce:71:f1:bc:8e:c5:8f:56:28:ba:9e:81:2d:23:a2:
4f:8f:8b:d7:7e:19:16:c7:f9:78:14:26:bf:68:53:
f6:65:64:c8:98:1b:ba:3a:94:19:a4:8f:c4:56:67:
e5:a1:ff:4c:fa:ab:4a:76:c4:86:39:80:33:be:8e:
98:db:28:d4:c2:3e:c8:c0:ab:a0:44:34:bf:33:89:
7d:31:4a:c7:53:39:d7:bc:bc:59:b9:87:d4:3e:03:
3f:bb:83:8b:22:3b:39:70:a0:99:e7:bc:36:34:8b:
19:1f:03:07:bb:b9:be:fb:70:42:52:75:4a:64:b1:
e6:a0:00:16:e1:f7:a7:2c:83:57:ab:9f:31:81:5a:
4b:01:23:9f:d8:9e:59:24:43:a8:8e:8e:15:06:ca:
c3:59:da:8b:ea:99:de:d7:89:0b:c1:a4:77:20:b1:
6a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:50:15:B0:FF:55:0A:EE:CC:D2:D1:B4:CC:29:7D:5C:31:92:6D:A9
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/K1AVsP9VCu7M0tG0zCl9XDGSbak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8dc0::/29
Signature Algorithm: sha256WithRSAEncryption
60:69:73:a3:fe:a4:58:bf:b7:80:a0:0f:51:17:c6:65:36:2c:
3b:8c:ea:74:c0:da:c5:ad:ed:3a:8a:27:13:15:83:a7:49:8e:
8c:99:45:43:ac:8f:43:a7:fe:67:fb:8a:9c:37:1e:36:7d:c5:
62:45:b0:e3:85:95:81:52:e5:a6:f2:3a:58:23:53:f3:6b:86:
b4:8f:5a:c7:08:08:f0:73:89:4b:7b:e3:48:ce:04:a8:db:a3:
0e:5f:bd:26:93:d4:b9:d2:d4:4d:61:97:53:bf:55:e6:23:28:
1a:47:d3:af:d3:d0:ee:5d:09:92:3d:59:91:15:f6:91:e5:41:
fe:e1:29:ec:6a:4b:1a:98:b6:97:dc:bd:84:7d:7f:a3:88:57:
f2:f6:8f:f4:18:ba:b7:10:8e:52:5a:5a:1a:7c:dc:c5:46:e0:
38:c4:5d:04:fb:ce:05:ee:40:0f:b7:fe:6c:bb:02:b9:e4:dc:
8b:ae:c8:bb:94:ac:bc:2f:4e:85:bf:42:58:58:23:33:dd:1f:
ba:a0:18:6f:d7:96:00:3a:44:7c:c1:69:b0:f7:b6:30:52:fc:
6a:5d:da:5a:b3:3d:ce:4d:b5:51:0b:a0:63:16:8e:82:71:e7:
a0:44:18:ee:6f:cc:8e:13:fc:89:f6:37:87:89:93:16:3e:03:
c3:b1:d9:64
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIDAQq6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZh
OGI1YTM3NGYxNDZkN2I2YTZkYzdkMzE2ZThlYmIxMmRlZWE2NzAwHhcNMjIwNTA0
MTc0NTEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyYjUwMTViMGZmNTUw
YWVlY2NkMmQxYjRjYzI5N2Q1YzMxOTI2ZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq5TV3RwHJ4BAjZYnK4vF/kD/Ba8HRIi0nA32HCYiEpeL4+aq
AWhI3IJKDqNAf0vt2gZi4wW8+/pj9F3l9XwxXbjajd6Ql/JN1k6ZAgFFlp7NNRQk
g0jbUezOcfG8jsWPVii6noEtI6JPj4vXfhkWx/l4FCa/aFP2ZWTImBu6OpQZpI/E
Vmflof9M+qtKdsSGOYAzvo6Y2yjUwj7IwKugRDS/M4l9MUrHUznXvLxZuYfUPgM/
u4OLIjs5cKCZ57w2NIsZHwMHu7m++3BCUnVKZLHmoAAW4fenLINXq58xgVpLASOf
2J5ZJEOojo4VBsrDWdqL6pne14kLwaR3ILFqZQIDAQABo4ICCjCCAgYwHQYDVR0O
BBYEFCtQFbD/VQruzNLRtMwpfVwxkm2pMB8GA1UdIwQYMBaAFGqLWjdPFG17am3H
0xbo67Et7qZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
YW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQtNDQyNDFmZWMxYTlmLzEv
SzFBVnNQOVZDdTdNMHRHMHpDbDlYREdTYmFrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9m
NmM4NjItYWY4Yi00M2YzLTk4YWQtNDQyNDFmZWMxYTlmLzEvYW90YU4wOFViWHRx
YmNmVEZ1anJzUzN1cG5BLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAG
CCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhKNwDANBgkqhkiG9w0BAQsFAAOC
AQEAYGlzo/6kWL+3gKAPURfGZTYsO4zqdMDaxa3tOoonExWDp0mOjJlFQ6yPQ6f+
Z/uKnDceNn3FYkWw44WVgVLlpvI6WCNT82uGtI9axwgI8HOJS3vjSM4EqNujDl+9
JpPUudLUTWGXU79V5iMoGkfTr9PQ7l0Jkj1ZkRX2keVB/uEp7GpLGpi2l9y9hH1/
o4hX8vaP9Bi6txCOUlpaGnzcxUbgOMRdBPvOBe5AD7f+bLsCueTci67Iu5SsvC9O
hb9CWFgjM90fuqAYb9eWADpEfMFpsPe2MFL8al3aWrM9zk21UQugYxaOgnHnoEQY
7m/MjhP8ifY3h4mTFj4Dw7HZZA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:18 2024 by rpki-client on console-ams.rpki-client.org