Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/01OZ8pw8pnxeD-qAyunNPlTPiIc.roa
File: 01OZ8pw8pnxeD-qAyunNPlTPiIc.roa (raw, json)
Hash identifier: 3yuIGctc2m7uQ6P2sIm0q81Hb6DOeAQIty2QKkF+Us8=
Subject key identifier: D3:53:99:F2:9C:3C:A6:7C:5E:0F:EA:80:CA:E9:CD:3E:54:CF:88:87
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 05EAAF92
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/01OZ8pw8pnxeD-qAyunNPlTPiIc.roa
Signing time: Sat 01 Jan 2022 06:02:14 +0000
ROA not before: Sat 01 Jan 2022 06:02:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29670
IP address blocks: 2001:bf6::/32 maxlen: 48
2001:bf0:c000::/35 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99266450 (0x5eaaf92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Jan 1 06:02:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d35399f29c3ca67c5e0fea80cae9cd3e54cf8887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b4:11:a0:4c:8c:d1:74:09:9b:6e:87:cd:d7:
36:c9:a2:3e:a6:99:b4:b0:89:c3:60:cd:8e:24:cd:
62:c4:28:dc:f2:2d:f2:d4:cc:75:00:36:a6:1e:92:
d1:5c:f2:c8:8a:ad:2d:b5:58:2c:c5:8a:63:c8:7f:
37:c8:f3:71:7a:45:64:33:6a:5b:bf:64:59:ac:a0:
01:20:08:6a:c1:e7:1f:00:e8:81:0c:14:c7:5a:6a:
97:7d:59:68:73:6f:48:67:8e:eb:5c:72:05:6a:34:
63:f3:da:de:85:e2:53:30:f3:83:ab:1b:8e:3e:45:
88:dd:9a:17:b7:fa:5c:61:0c:5b:6e:2d:9e:0a:34:
9a:d9:2e:a6:7d:59:a2:b4:27:32:1d:6b:a0:2b:0a:
11:cd:e0:7b:23:ac:70:e0:02:22:78:13:9c:da:2b:
c7:3d:8c:12:18:3e:fd:9f:d7:91:7c:cf:8f:d6:70:
ba:15:0c:dd:46:48:61:f2:03:e1:32:fa:48:3f:6f:
75:93:a0:25:85:9f:e8:e0:a6:ea:7a:56:ea:b0:fa:
e0:1f:f0:7c:69:b2:3a:48:75:b3:d0:63:13:e0:c5:
7a:5d:66:59:a7:72:d6:08:19:56:18:91:13:1f:84:
d6:39:5e:04:bd:e6:90:84:99:40:1b:ec:ac:73:e8:
b3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:53:99:F2:9C:3C:A6:7C:5E:0F:EA:80:CA:E9:CD:3E:54:CF:88:87
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/01OZ8pw8pnxeD-qAyunNPlTPiIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:bf0:c000::/35
2001:bf6::/32
Signature Algorithm: sha256WithRSAEncryption
8b:bf:ff:15:d1:9f:4d:a3:fb:77:c2:93:89:f1:1d:39:8d:b9:
bb:0a:b9:62:7d:a6:26:c2:ce:6b:19:81:46:5b:6f:1a:ee:49:
91:ec:ba:2e:d8:9e:0b:0e:05:25:48:c3:ea:f4:ec:40:ac:22:
3f:29:8b:6c:36:2d:e6:53:28:81:d8:65:d2:e1:70:2a:d0:8c:
4c:69:dc:22:a4:2d:d3:18:e3:f8:7f:9b:b2:d1:b0:45:e6:12:
40:02:eb:54:58:83:a6:a8:d0:28:11:78:06:aa:c7:d8:0a:6d:
d3:37:d0:90:01:d5:11:64:f2:06:f6:fc:a8:b6:12:9f:fc:1a:
b6:ec:c5:2a:96:c4:06:0c:c3:31:dd:83:9b:08:69:80:76:15:
5e:05:6c:96:aa:cb:65:5b:46:89:00:69:22:6e:2f:e5:57:9d:
03:89:d7:76:f6:92:cb:70:3d:00:18:59:14:80:00:13:b2:e5:
16:dc:b0:bd:88:4c:72:d7:8c:98:0e:5f:72:ac:f0:c3:6e:0a:
de:44:1c:b5:a1:45:a8:d4:2b:4d:c6:a6:f6:a9:b5:da:7b:64:
97:f2:85:91:da:d6:69:56:96:41:f2:eb:6a:1e:ba:38:de:d5:
a0:76:75:4f:11:eb:62:42:d5:03:3a:c9:3e:da:ca:f1:14:1d:
fe:8a:ec:94
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgIEBeqvkjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZjMxNDkyNDczYTc4YzZmZTlmNTM5ZjlmYTdkMjI1MjU2MGEyYjdlMB4XDTIyMDEw
MTA2MDIxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDM1Mzk5ZjI5YzNj
YTY3YzVlMGZlYTgwY2FlOWNkM2U1NGNmODg4NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIq0EaBMjNF0CZtuh83XNsmiPqaZtLCJw2DNjiTNYsQo3PIt
8tTMdQA2ph6S0VzyyIqtLbVYLMWKY8h/N8jzcXpFZDNqW79kWaygASAIasHnHwDo
gQwUx1pql31ZaHNvSGeO61xyBWo0Y/Pa3oXiUzDzg6sbjj5FiN2aF7f6XGEMW24t
ngo0mtkupn1ZorQnMh1roCsKEc3geyOscOACIngTnNorxz2MEhg+/Z/XkXzPj9Zw
uhUM3UZIYfID4TL6SD9vdZOgJYWf6OCm6npW6rD64B/wfGmyOkh1s9BjE+DFel1m
Wady1ggZVhiREx+E1jleBL3mkISZQBvsrHPos1UCAwEAAaOCAhIwggIOMB0GA1Ud
DgQWBBTTU5nynDymfF4P6oDK6c0+VM+IhzAfBgNVHSMEGDAWgBT/MUkkc6eMb+n1
Ofn6fSJSVgorfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L196RkpKSE9uakdfcDlUbjUtbjBpVWxZS0szNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzMvMWI0MTA1LTM0NzEtNDU5Mi1iZjA3LTczZmQzYmMxOWFhNy8x
LzAxT1o4cHc4cG54ZUQtcUF5dW5OUGxUUGlJYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMv
MWI0MTA1LTM0NzEtNDU5Mi1iZjA3LTczZmQzYmMxOWFhNy8xL196RkpKSE9uakdf
cDlUbjUtbjBpVWxZS0szNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAo
BggrBgEFBQcBBwEB/wQZMBcwFQQCAAIwDwMGBSABC/DAAwUAIAEL9jANBgkqhkiG
9w0BAQsFAAOCAQEAi7//FdGfTaP7d8KTifEdOY25uwq5Yn2mJsLOaxmBRltvGu5J
key6LtieCw4FJUjD6vTsQKwiPymLbDYt5lMogdhl0uFwKtCMTGncIqQt0xjj+H+b
stGwReYSQALrVFiDpqjQKBF4BqrH2Apt0zfQkAHVEWTyBvb8qLYSn/watuzFKpbE
BgzDMd2DmwhpgHYVXgVslqrLZVtGiQBpIm4v5VedA4nXdvaSy3A9ABhZFIAAE7Ll
FtywvYhMcteMmA5fcqzww24K3kQctaFFqNQrTcam9qm12ntkl/KFkdrWaVaWQfLr
ah66ON7VoHZ1TxHrYkLVAzrJPtrK8RQd/orslA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:46 2024 by rpki-client on console-fra.rpki-client.org