Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/a38QNuO4ZshgarR9hLrWn2mf3gQ.roa
File: a38QNuO4ZshgarR9hLrWn2mf3gQ.roa (raw, json)
Hash identifier: 4gbJiKPME3ElHbfAXsz1EEqEVoTwaIXwBUX34EC6zo4=
Subject key identifier: 6B:7F:10:36:E3:B8:66:C8:60:6A:B4:7D:84:BA:D6:9F:69:9F:DE:04
Certificate issuer: /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial: 018202DD45207EBDAD5E0E0745DE6E4B064D
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/a38QNuO4ZshgarR9hLrWn2mf3gQ.roa
Signing time: Fri 15 Jul 2022 17:17:11 +0000
ROA not before: Fri 15 Jul 2022 17:17:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209861
IP address blocks: 2a10:a642:ad00::/40 maxlen: 40
2a10:a642:aa00::/40 maxlen: 48
2a10:a642:aa00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:02:dd:45:20:7e:bd:ad:5e:0e:07:45:de:6e:4b:06:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Validity
Not Before: Jul 15 17:17:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b7f1036e3b866c8606ab47d84bad69f699fde04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:09:d7:41:a2:aa:f6:4d:7d:72:66:1c:6e:
6c:f3:bb:a0:3c:eb:71:c8:12:80:01:69:3d:e2:2d:
cb:ba:b4:fd:0b:69:a3:74:de:6b:3c:ff:73:16:8c:
0d:52:92:ed:3e:76:4c:32:37:38:99:e2:b9:9b:23:
49:71:eb:df:77:4a:d4:22:f6:24:d6:00:65:2a:7c:
28:70:fd:86:de:2b:06:a3:77:0d:17:15:1a:90:f1:
d3:f7:cb:53:90:55:fa:f3:da:9c:fd:95:41:65:dc:
86:43:1a:12:ea:36:6d:e0:73:bb:d2:81:63:46:c1:
53:13:d7:68:13:2f:b8:75:ab:2c:7d:bf:bf:3e:8c:
7d:15:13:90:b3:39:fb:32:16:66:ec:c7:de:af:bd:
96:c8:e8:6f:57:d2:64:ca:b0:0a:96:3a:8e:d7:99:
18:19:27:da:81:76:5f:e4:04:98:88:5a:bb:ef:f0:
40:ad:79:2e:45:37:95:4f:c3:fd:22:1e:34:69:5e:
da:4f:7e:24:45:1a:82:85:54:03:30:5c:87:0e:6f:
df:70:5b:c9:76:a8:3a:87:19:3b:ee:ff:cf:a5:86:
bc:54:64:a1:e5:94:86:3e:aa:15:cf:ba:95:b2:3c:
7b:81:09:55:4c:a3:db:48:bd:9c:d7:e2:c1:a0:15:
18:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7F:10:36:E3:B8:66:C8:60:6A:B4:7D:84:BA:D6:9F:69:9F:DE:04
X509v3 Authority Key Identifier:
keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/a38QNuO4ZshgarR9hLrWn2mf3gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:a642:aa00::/40
2a10:a642:ad00::/40
Signature Algorithm: sha256WithRSAEncryption
b8:2e:b8:77:3b:cc:59:93:b9:ec:50:35:cb:c6:70:c3:1c:4c:
0f:32:e4:13:a7:2c:fc:1c:af:04:23:9a:ed:d9:37:04:72:69:
3a:94:05:7c:21:a1:2b:6a:30:e2:2a:80:c8:5b:25:5d:56:ba:
2d:e8:e9:c0:f7:36:47:24:70:4c:ee:23:3f:f9:18:ca:a3:02:
fc:0b:db:e9:3a:ed:2e:59:94:f9:0e:b8:2f:be:a3:98:43:3b:
4a:47:f0:9d:2b:2a:73:f6:d3:d0:3e:08:b0:b5:0c:1c:16:92:
1a:79:16:09:b3:92:c5:f1:ff:e1:cb:b4:7c:ee:5a:79:69:b8:
6c:00:36:4e:b6:d5:5f:8b:34:58:38:47:00:79:bf:6e:95:52:
0d:1c:a6:28:b6:58:96:40:a6:70:89:2e:50:23:f7:4b:11:a7:
44:a8:fd:e8:fa:01:73:05:78:0e:ab:60:e4:92:1d:4e:f5:0a:
a4:eb:7b:07:02:78:e8:a6:d5:af:4e:7e:ff:17:92:28:26:ff:
ea:7e:5c:4f:f3:cc:c2:24:26:e3:a9:cc:43:2b:1e:f8:b2:45:
09:eb:7b:71:c2:ab:c8:f6:6d:92:3f:33:10:cd:32:1f:31:9b:
9a:11:70:3f:9b:31:b4:f6:c2:92:03:71:ca:ad:14:f7:87:b8:
9d:a2:d1:66
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAYIC3UUgfr2tXg4HRd5uSwZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NzZkOWEwYjU1YmQ0OTVhMWJlM2M1YzAzZmEyNTFkM2Rl
OGI4YzUwHhcNMjIwNzE1MTcxNzExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjdmMTAzNmUzYjg2NmM4NjA2YWI0N2Q4NGJhZDY5ZjY5OWZkZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+kJ10GiqvZNfXJmHG5s87ugPOtx
yBKAAWk94i3LurT9C2mjdN5rPP9zFowNUpLtPnZMMjc4meK5myNJcevfd0rUIvYk
1gBlKnwocP2G3isGo3cNFxUakPHT98tTkFX689qc/ZVBZdyGQxoS6jZt4HO70oFj
RsFTE9doEy+4dassfb+/Pox9FROQszn7MhZm7Mfer72WyOhvV9JkyrAKljqO15kY
GSfagXZf5ASYiFq77/BArXkuRTeVT8P9Ih40aV7aT34kRRqChVQDMFyHDm/fcFvJ
dqg6hxk77v/PpYa8VGSh5ZSGPqoVz7qVsjx7gQlVTKPbSL2c1+LBoBUY3QIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFGt/EDbjuGbIYGq0fYS61p9pn94EMB8GA1UdIwQY
MBaAFFd22aC1W9SVob48XAP6JR096LjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNiWm9MVmIxSldodmp4Y0Ffb2xIVDNvdU1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81YjIxZTMtMzk0NC00Y2U2LWFhZjUt
YzBiYTJmM2ZjNzJhLzEvYTM4UU51TzRac2hnYXJSOWhMclduMm1mM2dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81YjIxZTMtMzk0NC00Y2U2LWFhZjUtYzBiYTJmM2ZjNzJh
LzEvVjNiWm9MVmIxSldodmp4Y0Ffb2xIVDNvdU1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAKhCmQqoD
BgAqEKZCrTANBgkqhkiG9w0BAQsFAAOCAQEAuC64dzvMWZO57FA1y8ZwwxxMDzLk
E6cs/ByvBCOa7dk3BHJpOpQFfCGhK2ow4iqAyFslXVa6LejpwPc2RyRwTO4jP/kY
yqMC/Avb6TrtLlmU+Q64L76jmEM7SkfwnSsqc/bT0D4IsLUMHBaSGnkWCbOSxfH/
4cu0fO5aeWm4bAA2TrbVX4s0WDhHAHm/bpVSDRymKLZYlkCmcIkuUCP3SxGnRKj9
6PoBcwV4Dqtg5JIdTvUKpOt7BwJ46KbVr05+/xeSKCb/6n5cT/PMwiQm46nMQyse
+LJFCet7ccKryPZtkj8zEM0yHzGbmhFwP5sxtPbCkgNxyq0U94e4naLRZg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:10 2023 by rpki-client on console-fra.rpki-client.org