Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/CNT1Z8O8C-tmIOi74Sc3vL4KfZw.roa
File: CNT1Z8O8C-tmIOi74Sc3vL4KfZw.roa (raw, json)
Hash identifier: YWzKBIg5NCN4JRyX4xrhuSMx9lMfBI3SGhi5poDbmSU=
Subject key identifier: 08:D4:F5:67:C3:BC:0B:EB:66:20:E8:BB:E1:27:37:BC:BE:0A:7D:9C
Certificate issuer: /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Certificate serial: 0A630449
Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/CNT1Z8O8C-tmIOi74Sc3vL4KfZw.roa
Signing time: Sat 01 Jan 2022 13:06:53 +0000
ROA not before: Sat 01 Jan 2022 13:06:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8873
IP address blocks: 2001:678:848::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174261321 (0xa630449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Validity
Not Before: Jan 1 13:06:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08d4f567c3bc0beb6620e8bbe12737bcbe0a7d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:34:ae:05:8d:1c:ca:63:8a:d0:7b:0b:35:0b:
56:d3:5f:5d:dd:52:42:4c:40:cb:b7:3b:63:ff:56:
ec:59:db:fa:e5:e6:19:55:1e:e0:20:a2:bf:99:26:
9b:70:55:87:40:04:dd:b5:be:fe:86:d3:1f:b2:9e:
2d:7a:3c:a7:e0:09:38:11:bb:08:c5:0b:33:ab:21:
2b:2e:f5:19:b8:ed:75:23:ab:b0:88:08:46:3c:1a:
7b:7b:2a:df:5a:67:e8:00:66:c8:7c:61:71:ee:6b:
2a:7a:5e:0b:7d:90:24:fc:82:dc:8a:0d:5a:0c:20:
ab:c3:9a:d5:40:67:c6:52:0f:8a:4f:2a:0e:14:05:
c1:17:83:26:4f:e7:cc:e8:e0:9e:7e:6e:9c:b3:a4:
fd:bf:d8:cf:9c:0d:4b:3a:99:1b:53:5f:67:fe:c3:
5d:53:7e:c9:1d:e1:bd:6d:46:7e:a5:58:4d:68:f1:
1a:b2:3f:ee:93:97:37:05:c5:ae:98:68:bc:3d:9b:
ab:0b:32:45:ff:4e:c5:3d:1c:18:d1:f9:46:cb:32:
6e:bb:d7:fa:f6:9b:7e:fc:4f:b1:41:8f:30:4b:4d:
65:1d:28:09:ac:b9:d0:51:db:4d:1b:c0:51:ef:dc:
5d:90:4e:56:56:a5:f8:c0:be:0f:01:77:4b:0b:f8:
e8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D4:F5:67:C3:BC:0B:EB:66:20:E8:BB:E1:27:37:BC:BE:0A:7D:9C
X509v3 Authority Key Identifier:
keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/CNT1Z8O8C-tmIOi74Sc3vL4KfZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:848::/48
Signature Algorithm: sha256WithRSAEncryption
7d:2c:47:8a:12:ce:42:58:c8:09:b9:7a:19:bd:77:49:1e:be:
b2:3e:ba:ef:ca:a3:e8:31:0c:82:ff:ba:32:86:7d:6d:cb:53:
03:62:fd:c8:11:1c:e2:60:8d:13:0d:0a:6a:16:9b:4d:a9:f1:
44:b4:cd:47:14:dc:ac:4d:c2:9e:64:82:b8:11:b1:96:62:05:
bd:67:d0:6d:cb:63:3b:2c:4e:0b:75:61:8a:8f:bd:ae:92:4f:
b0:6a:88:b6:44:e8:13:58:32:36:05:3c:98:94:75:86:2d:0d:
b4:ae:87:d7:74:b6:80:a8:26:52:b5:63:31:cf:fa:43:91:ba:
81:7a:7b:45:08:c2:d2:4f:93:98:28:16:a4:ff:99:28:64:71:
c0:d1:ea:80:5d:9e:ac:9c:56:c3:f2:14:5f:52:21:13:78:33:
c6:85:66:e9:b1:42:63:2e:ea:ee:31:84:e9:19:5b:39:b9:61:
34:b2:6e:23:3b:5b:d1:23:1b:f0:16:38:ac:81:13:98:bd:6b:
7b:00:f9:45:74:8b:17:f1:e0:ac:9b:e6:cd:53:48:4c:2f:62:
22:e5:f3:1c:1a:21:f6:fc:6a:3a:90:e5:14:3c:ac:04:a3:d6:
85:a4:b3:23:ce:a3:16:d0:02:80:8c:f1:e9:22:8d:7b:e9:fd:
83:ae:c8:a0
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECmMESTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MmJiNjZmYmRlYWFmZmY0M2I5NjUwYjFmNmNiZTRmMjllZGFmNThjMB4XDTIyMDEw
MTEzMDY1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDhkNGY1NjdjM2Jj
MGJlYjY2MjBlOGJiZTEyNzM3YmNiZTBhN2Q5YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPQ0rgWNHMpjitB7CzULVtNfXd1SQkxAy7c7Y/9W7Fnb+uXm
GVUe4CCiv5kmm3BVh0AE3bW+/obTH7KeLXo8p+AJOBG7CMULM6shKy71GbjtdSOr
sIgIRjwae3sq31pn6ABmyHxhce5rKnpeC32QJPyC3IoNWgwgq8Oa1UBnxlIPik8q
DhQFwReDJk/nzOjgnn5unLOk/b/Yz5wNSzqZG1NfZ/7DXVN+yR3hvW1GfqVYTWjx
GrI/7pOXNwXFrphovD2bqwsyRf9OxT0cGNH5RssybrvX+vabfvxPsUGPMEtNZR0o
Cay50FHbTRvAUe/cXZBOVlal+MC+DwF3Swv46KECAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQI1PVnw7wL62Yg6LvhJze8vgp9nDAfBgNVHSMEGDAWgBTSu2b73qr/9DuW
ULH2y+Tyntr1jDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBydG0tOTZxX19RN2xsQ3g5c3ZrOHA3YTlZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDgvZTljYmYzLTNhNWQtNGI3NC04NmQzLWNiMGYyNDU1Y2JkNi8x
L0NOVDFaOE84Qy10bUlPaTc0U2Mzdkw0S2Zady5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgv
ZTljYmYzLTNhNWQtNGI3NC04NmQzLWNiMGYyNDU1Y2JkNi8xLzBydG0tOTZxX19R
N2xsQ3g5c3ZrOHA3YTlZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngISDANBgkqhkiG9w0BAQsF
AAOCAQEAfSxHihLOQljICbl6Gb13SR6+sj6678qj6DEMgv+6MoZ9bctTA2L9yBEc
4mCNEw0KahabTanxRLTNRxTcrE3CnmSCuBGxlmIFvWfQbctjOyxOC3Vhio+9rpJP
sGqItkToE1gyNgU8mJR1hi0NtK6H13S2gKgmUrVjMc/6Q5G6gXp7RQjC0k+TmCgW
pP+ZKGRxwNHqgF2erJxWw/IUX1IhE3gzxoVm6bFCYy7q7jGE6RlbOblhNLJuIztb
0SMb8BY4rIETmL1rewD5RXSLF/HgrJvmzVNITC9iIuXzHBoh9vxqOpDlFDysBKPW
haSzI86jFtACgIzx6SKNe+n9g67IoA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:49 2024 by rpki-client on console-fra.rpki-client.org