Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/gu4osnUhyIQV_T4aypOg4UEx1Sg.roa
File: gu4osnUhyIQV_T4aypOg4UEx1Sg.roa (raw, json)
Hash identifier: 87PyUfy5HqJwRu3I6ZudF06qsO9zyB/wtvPZIqachoQ=
Subject key identifier: 82:EE:28:B2:75:21:C8:84:15:FD:3E:1A:CA:93:A0:E1:41:31:D5:28
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 012ADF6F
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/gu4osnUhyIQV_T4aypOg4UEx1Sg.roa
Signing time: Fri 01 Apr 2022 02:39:54 +0000
ROA not before: Fri 01 Apr 2022 02:39:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51847
IP address blocks: 2a12:e100:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19586927 (0x12adf6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Apr 1 02:39:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82ee28b27521c88415fd3e1aca93a0e14131d528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:24:9c:5b:a0:9d:e6:c1:30:84:78:72:1f:
be:3f:b1:78:d0:7c:14:f8:7e:00:31:b9:42:7b:c0:
8c:02:a7:d7:a7:50:d9:2a:f5:7a:05:f8:15:72:95:
63:f6:f2:d8:84:a7:04:35:94:e4:3c:03:b2:64:aa:
bc:bb:1d:6f:d6:bc:54:42:ca:6f:f3:67:0a:f3:10:
57:87:55:b3:c9:25:c0:54:54:c7:bd:ad:61:ac:cd:
79:24:2c:da:3e:f2:4a:52:e3:e2:18:a9:bf:da:8a:
0a:48:e1:58:b3:b2:fc:81:bb:2b:1a:0c:a7:c6:17:
0f:db:35:2c:10:24:4f:02:fe:06:09:77:a2:ad:d9:
15:78:23:77:89:7a:86:1b:59:23:60:a1:bc:c1:0d:
75:54:ef:17:35:3f:5c:4a:4f:43:61:eb:17:32:b1:
4c:de:10:ae:52:e7:79:69:ad:78:bd:9c:76:62:6f:
df:19:e5:b2:0a:0c:9f:75:3e:b0:a2:9d:f8:b3:db:
da:40:50:a4:96:3d:f5:9a:18:ee:7a:60:7c:87:48:
8d:47:ce:31:aa:9b:ab:dc:b5:9f:36:51:da:8a:9a:
71:8c:69:b9:78:34:ba:3f:4f:7e:83:22:ca:54:30:
e3:94:ac:e9:96:a4:bb:04:c5:37:c6:0a:03:99:3b:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EE:28:B2:75:21:C8:84:15:FD:3E:1A:CA:93:A0:E1:41:31:D5:28
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/gu4osnUhyIQV_T4aypOg4UEx1Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e100:3::/48
Signature Algorithm: sha256WithRSAEncryption
a1:69:ff:59:84:47:5d:44:73:9f:12:c5:f8:85:f4:9c:78:96:
a1:d4:9c:21:04:fb:63:e1:11:e7:1f:dd:22:79:ac:fe:64:16:
3b:c3:36:c4:01:40:1c:54:05:25:14:ab:c3:6f:6d:d8:9d:86:
17:28:11:e7:c5:c2:02:d9:ba:df:87:ce:b7:7e:df:f1:93:74:
3c:e2:67:c4:95:cb:79:ef:d9:1e:3d:db:ec:05:04:a1:6a:67:
5e:fd:4e:af:11:c4:ca:22:39:9a:80:51:7d:52:39:35:58:d2:
2a:1a:a0:03:78:15:9c:5b:66:c3:94:be:c7:68:06:aa:45:a4:
24:42:44:a3:21:04:1e:46:6c:24:ba:39:b5:36:87:75:75:50:
a4:5d:93:db:92:34:b8:e0:6a:d0:e7:70:6b:ec:33:a2:45:5f:
9a:6b:a4:70:a7:84:8a:7d:62:f0:7f:e7:f9:7d:4e:4a:0d:52:
97:92:1d:8c:ff:3a:37:40:1b:f9:86:46:09:fc:c2:69:34:5e:
36:17:23:b9:f3:c5:98:2a:48:4a:8d:5a:c1:e1:bb:00:a6:1a:
bc:9b:54:15:7d:ad:3a:48:18:e2:52:02:40:76:e0:40:50:66:
a3:e7:fe:38:53:f2:53:cb:24:fc:c0:41:a3:ed:cb:ed:1e:aa:
6c:aa:7e:e9
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEASrfbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MGRmN2Y1YjY2MThiZGEyM2M4M2JlZDExYjQ0MjA0MWYxZmI0NTZkMB4XDTIyMDQw
MTAyMzk1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODJlZTI4YjI3NTIx
Yzg4NDE1ZmQzZTFhY2E5M2EwZTE0MTMxZDUyODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKvaJJxboJ3mwTCEeHIfvj+xeNB8FPh+ADG5QnvAjAKn16dQ
2Sr1egX4FXKVY/by2ISnBDWU5DwDsmSqvLsdb9a8VELKb/NnCvMQV4dVs8klwFRU
x72tYazNeSQs2j7ySlLj4hipv9qKCkjhWLOy/IG7KxoMp8YXD9s1LBAkTwL+Bgl3
oq3ZFXgjd4l6hhtZI2ChvMENdVTvFzU/XEpPQ2HrFzKxTN4QrlLneWmteL2cdmJv
3xnlsgoMn3U+sKKd+LPb2kBQpJY99ZoY7npgfIdIjUfOMaqbq9y1nzZR2oqacYxp
uXg0uj9PfoMiylQw45Ss6ZakuwTFN8YKA5k7HhcCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSC7iiydSHIhBX9PhrKk6DhQTHVKDAfBgNVHSMEGDAWgBSg339bZhi9ojyD
vtEbRCBB8ftFbTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29OOV9XMllZdmFJOGc3N1JHMFFnUWZIN1JXMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTIvYTU3MjhiLWEzNmQtNGZiYS05M2FhLTVmNGJjOTAwYzAzZC8x
L2d1NG9zblVoeUlRVl9UNGF5cE9nNFVFeDFTZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIv
YTU3MjhiLWEzNmQtNGZiYS05M2FhLTVmNGJjOTAwYzAzZC8xL29OOV9XMllZdmFJ
OGc3N1JHMFFnUWZIN1JXMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoS4QAAAzANBgkqhkiG9w0BAQsF
AAOCAQEAoWn/WYRHXURznxLF+IX0nHiWodScIQT7Y+ER5x/dInms/mQWO8M2xAFA
HFQFJRSrw29t2J2GFygR58XCAtm634fOt37f8ZN0POJnxJXLee/ZHj3b7AUEoWpn
Xv1OrxHEyiI5moBRfVI5NVjSKhqgA3gVnFtmw5S+x2gGqkWkJEJEoyEEHkZsJLo5
tTaHdXVQpF2T25I0uOBq0Odwa+wzokVfmmukcKeEin1i8H/n+X1OSg1Sl5IdjP86
N0Ab+YZGCfzCaTReNhcjufPFmCpISo1aweG7AKYavJtUFX2tOkgY4lICQHbgQFBm
o+f+OFPyU8sk/MBBo+3L7R6qbKp+6Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:10 2024 by rpki-client on console-ams.rpki-client.org