Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/DpYbHYmVfOBpCapScOoITrBH8wI.roa
File: DpYbHYmVfOBpCapScOoITrBH8wI.roa (raw, json)
Hash identifier: 6EuPOa25lyDj59K52X7M+XOSuJ1m31wAVlYHW5qotng=
Subject key identifier: 0E:96:1B:1D:89:95:7C:E0:69:09:AA:52:70:EA:08:4E:B0:47:F3:02
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 19DE89C6
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/DpYbHYmVfOBpCapScOoITrBH8wI.roa
Signing time: Sat 01 Jan 2022 04:55:11 +0000
ROA not before: Sat 01 Jan 2022 04:55:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205749
IP address blocks: 2a04:92c7:31::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434014662 (0x19de89c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 1 04:55:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e961b1d89957ce06909aa5270ea084eb047f302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:a3:37:7c:a9:83:97:37:61:a3:1c:9b:bc:
b0:a7:47:58:8e:b2:39:3b:00:27:7f:71:06:87:92:
1a:c0:01:eb:8e:34:51:82:19:52:a2:3d:2f:82:c5:
dc:89:db:1f:a4:5d:c9:c0:7b:ef:0b:4f:7f:f6:be:
c9:53:20:c5:27:8e:73:20:93:5f:c0:12:52:78:90:
c5:8e:b7:d0:64:91:d6:f1:40:5b:10:5d:7e:67:6e:
87:b2:80:15:cd:9e:de:4a:fc:df:68:b1:ac:d4:33:
26:06:d6:f3:d0:33:b6:80:09:31:49:bf:80:e0:4e:
76:49:67:4e:fe:cc:9c:b4:fe:5e:8e:60:63:24:84:
18:d1:80:54:ee:3d:b6:13:ba:81:ae:f7:64:96:0a:
c8:d8:35:45:d3:79:f1:ec:68:5b:29:69:7f:a7:71:
20:5d:4e:5d:55:e3:23:f3:d7:c6:47:bd:7c:37:b7:
73:6f:f5:ea:8a:62:fa:e0:17:92:4a:ae:99:9a:0e:
b8:6b:0b:68:7c:b0:86:09:07:d5:2f:4b:7b:08:15:
dc:ff:79:39:db:c4:89:1c:a4:34:cb:f2:92:a9:93:
96:86:a8:30:57:86:0c:70:95:19:da:a4:79:2b:d5:
68:14:35:c1:16:35:6a:4a:ae:3b:d9:b5:35:67:67:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:96:1B:1D:89:95:7C:E0:69:09:AA:52:70:EA:08:4E:B0:47:F3:02
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/DpYbHYmVfOBpCapScOoITrBH8wI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:92c7:31::/48
Signature Algorithm: sha256WithRSAEncryption
7a:da:42:d7:56:03:e5:3d:02:2d:cd:95:ac:cd:7b:14:0c:b2:
61:65:2d:58:33:85:88:7b:77:de:2a:ff:cc:89:d2:e2:37:93:
96:eb:ea:42:71:08:e0:3f:de:e4:e1:72:0f:41:db:32:8c:1f:
95:24:42:1f:a6:b2:1d:32:1c:83:f7:67:28:8d:2a:94:1d:f9:
ee:f3:dc:dd:cb:02:40:ac:fc:cd:c3:0b:ec:63:90:bd:26:1c:
d1:d7:f8:b8:23:ee:00:80:a1:9b:37:8d:0d:0c:50:7b:72:4b:
d0:c2:15:da:d0:f2:7d:a2:90:c6:76:a7:51:07:be:40:9a:c0:
df:e2:59:21:0e:8d:89:85:b4:97:eb:11:19:cf:fe:fd:19:ab:
14:49:d2:4d:65:73:b5:61:b5:08:c0:c7:4c:88:a2:c6:b9:7b:
fe:d6:12:c8:62:7f:a4:a6:47:20:4c:33:92:fc:6e:4f:c8:05:
c5:df:e0:5b:3f:91:09:81:90:79:42:19:6d:1c:4e:1a:05:22:
79:4c:b7:27:03:88:cf:6b:d0:a4:b1:43:cc:84:24:3f:7c:25:
ef:e8:06:50:1c:97:9c:29:0a:35:ce:00:d0:9c:aa:59:ee:25:
5f:cf:eb:1e:bb:3f:c1:fb:b5:d9:44:f1:b1:f9:b5:29:69:68:
50:61:d5:28
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEGd6JxjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZmRlYzRhNDZhNmU2ZTRmOWE5MmQwYmEyZTBiM2FiNTY1OGJlMWJkMB4XDTIyMDEw
MTA0NTUxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGU5NjFiMWQ4OTk1
N2NlMDY5MDlhYTUyNzBlYTA4NGViMDQ3ZjMwMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJC6ozd8qYOXN2GjHJu8sKdHWI6yOTsAJ39xBoeSGsAB6440
UYIZUqI9L4LF3InbH6RdycB77wtPf/a+yVMgxSeOcyCTX8ASUniQxY630GSR1vFA
WxBdfmduh7KAFc2e3kr832ixrNQzJgbW89AztoAJMUm/gOBOdklnTv7MnLT+Xo5g
YySEGNGAVO49thO6ga73ZJYKyNg1RdN58exoWylpf6dxIF1OXVXjI/PXxke9fDe3
c2/16opi+uAXkkqumZoOuGsLaHywhgkH1S9LewgV3P95OdvEiRykNMvykqmTloao
MFeGDHCVGdqkeSvVaBQ1wRY1akquO9m1NWdnnpcCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQOlhsdiZV84GkJqlJw6ghOsEfzAjAfBgNVHSMEGDAWgBT/3sSkam5uT5qS
0LouCzq1ZYvhvTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L185N0VwR3B1YmstYWt0QzZMZ3M2dFdXTDRiMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzQvMTFlNWIzLTQzYWEtNDI3OS05NDQxLTdlOGM2ZDRkOWJlZi8x
L0RwWWJIWW1WZk9CcENhcFNjT29JVHJCSDh3SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQv
MTFlNWIzLTQzYWEtNDI3OS05NDQxLTdlOGM2ZDRkOWJlZi8xL185N0VwR3B1Ymst
YWt0QzZMZ3M2dFdXTDRiMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoEkscAMTANBgkqhkiG9w0BAQsF
AAOCAQEAetpC11YD5T0CLc2VrM17FAyyYWUtWDOFiHt33ir/zInS4jeTluvqQnEI
4D/e5OFyD0HbMowflSRCH6ayHTIcg/dnKI0qlB357vPc3csCQKz8zcML7GOQvSYc
0df4uCPuAIChmzeNDQxQe3JL0MIV2tDyfaKQxnanUQe+QJrA3+JZIQ6NiYW0l+sR
Gc/+/RmrFEnSTWVztWG1CMDHTIiixrl7/tYSyGJ/pKZHIEwzkvxuT8gFxd/gWz+R
CYGQeUIZbRxOGgUieUy3JwOIz2vQpLFDzIQkP3wl7+gGUByXnCkKNc4A0JyqWe4l
X8/rHrs/wfu12UTxsfm1KWloUGHVKA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:56 2024 by rpki-client on console-fra.rpki-client.org