Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/iqVIS5L5vggSLdYt6wTfxsKC5og.roa
File: iqVIS5L5vggSLdYt6wTfxsKC5og.roa (raw, json)
Hash identifier: 1dNPi6mC857RpoGCntMK6gjsHyzQwZU9WKTlyGi/sCw=
Subject key identifier: 8A:A5:48:4B:92:F9:BE:08:12:2D:D6:2D:EB:04:DF:C6:C2:82:E6:88
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 0801F394
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/iqVIS5L5vggSLdYt6wTfxsKC5og.roa
Signing time: Sat 01 Jan 2022 08:54:43 +0000
ROA not before: Sat 01 Jan 2022 08:54:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40027
IP address blocks: 2a00:86c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134345620 (0x801f394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Jan 1 08:54:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8aa5484b92f9be08122dd62deb04dfc6c282e688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:e8:0e:75:45:33:cf:c9:28:3f:ca:26:df:
c3:2f:93:cb:36:63:81:9a:43:ff:5a:e1:4f:ac:db:
5c:6b:9d:37:46:0a:99:f5:be:ed:8a:3c:9f:86:1b:
a4:92:a0:b7:b6:e1:6b:88:db:17:cc:4b:ec:d4:78:
b0:32:a8:4a:c9:0c:a1:3a:f6:df:69:84:09:a3:97:
63:47:24:64:7e:3e:1c:43:60:82:6e:22:be:08:25:
4e:8d:df:79:0b:82:12:3f:80:4b:a6:fb:e4:aa:d3:
a1:6f:d4:0c:22:85:13:35:72:ee:36:ee:02:5b:31:
ec:b2:6b:65:23:07:dd:cc:b7:3a:5a:28:d1:41:0c:
29:88:23:6d:25:83:57:85:ca:27:8b:9f:c7:7d:55:
51:e4:4e:d0:55:11:53:78:c9:df:45:e5:4b:57:90:
c2:22:b8:ea:75:ec:61:e1:ae:78:36:03:7c:49:70:
80:ef:7c:93:ba:bd:ad:f1:75:f2:b4:5c:dc:e3:51:
5f:f1:04:3a:61:06:bc:f1:0b:2b:13:0a:de:05:07:
9e:fa:b5:08:d0:19:9c:8d:13:21:86:c0:8d:04:98:
b3:8b:84:6f:71:b2:b3:9e:c3:f4:71:9f:03:de:52:
4e:99:1f:5a:c4:59:0e:b7:a4:97:6a:11:ca:71:3e:
f1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A5:48:4B:92:F9:BE:08:12:2D:D6:2D:EB:04:DF:C6:C2:82:E6:88
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/iqVIS5L5vggSLdYt6wTfxsKC5og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:86c0::/32
Signature Algorithm: sha256WithRSAEncryption
26:cf:2f:2d:5b:a6:f5:a9:37:2c:93:71:33:cd:23:79:37:2e:
b2:16:e9:e4:ff:3c:c3:41:ac:90:65:af:32:05:46:8a:39:32:
8f:fc:7f:64:ce:f5:7d:e6:cf:ed:9d:a7:dd:32:35:21:81:54:
a4:a0:71:42:19:6c:ed:ff:fb:53:31:6d:67:f2:61:04:30:ef:
27:5c:ff:ec:e8:da:21:6e:9d:6d:fe:33:d8:37:a7:4e:e0:4e:
ae:9f:0d:1e:7c:02:6d:0a:48:a7:03:38:2b:16:e3:08:9e:7e:
c3:b7:8e:1a:b2:e3:f7:db:e3:5b:57:a3:69:6e:c0:89:d7:c9:
b5:8c:3d:4c:f9:df:cc:eb:b9:ee:30:93:c3:df:ad:5b:04:4f:
2e:b3:3b:c3:99:d7:e7:86:f2:11:87:04:e5:ed:0f:89:e0:58:
d2:2c:be:b1:50:05:78:47:cb:79:0e:45:e5:9b:46:32:c1:00:
15:aa:d2:7c:8a:f8:98:4f:be:08:f1:18:73:f7:42:fb:2e:c2:
33:d1:6c:78:09:e0:99:50:e3:5e:d2:f9:f1:e0:fc:d1:e4:80:
77:9e:10:72:34:7b:c5:06:7e:7d:82:3c:af:5e:ef:5c:4e:72:
e7:e1:b2:8d:20:3a:2b:e2:26:c7:da:e5:e2:98:2e:27:f3:d2:
57:9b:c4:75
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIECAHzlDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YjkzNGMzNmI3NzMwMDg4NjViOWM5ZmIwZmQ0ODY2OTM5NWFjNzMwMB4XDTIyMDEw
MTA4NTQ0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGFhNTQ4NGI5MmY5
YmUwODEyMmRkNjJkZWIwNGRmYzZjMjgyZTY4ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKgL6A51RTPPySg/yibfwy+TyzZjgZpD/1rhT6zbXGudN0YK
mfW+7Yo8n4YbpJKgt7bha4jbF8xL7NR4sDKoSskMoTr232mECaOXY0ckZH4+HENg
gm4ivgglTo3feQuCEj+AS6b75KrToW/UDCKFEzVy7jbuAlsx7LJrZSMH3cy3Oloo
0UEMKYgjbSWDV4XKJ4ufx31VUeRO0FURU3jJ30XlS1eQwiK46nXsYeGueDYDfElw
gO98k7q9rfF18rRc3ONRX/EEOmEGvPELKxMK3gUHnvq1CNAZnI0TIYbAjQSYs4uE
b3Gys57D9HGfA95STpkfWsRZDrekl2oRynE+8Q0CAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBSKpUhLkvm+CBIt1i3rBN/GwoLmiDAfBgNVHSMEGDAWgBQLk0w2t3MAiGW5
yfsP1IZpOVrHMDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0M1Tk1OcmR6QUlobHVjbjdEOVNHYVRsYXh6QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTQvZGVjYjdkLTAzODgtNGUzYy04ZGI0LWEzMDJmNTFkMzgyYy8x
L2lxVklTNUw1dmdnU0xkWXQ2d1RmeHNLQzVvZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQv
ZGVjYjdkLTAzODgtNGUzYy04ZGI0LWEzMDJmNTFkMzgyYy8xL0M1Tk1OcmR6QUlo
bHVjbjdEOVNHYVRsYXh6QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoAhsAwDQYJKoZIhvcNAQELBQAD
ggEBACbPLy1bpvWpNyyTcTPNI3k3LrIW6eT/PMNBrJBlrzIFRoo5Mo/8f2TO9X3m
z+2dp90yNSGBVKSgcUIZbO3/+1MxbWfyYQQw7ydc/+zo2iFunW3+M9g3p07gTq6f
DR58Am0KSKcDOCsW4wiefsO3jhqy4/fb41tXo2luwInXybWMPUz538zrue4wk8Pf
rVsETy6zO8OZ1+eG8hGHBOXtD4ngWNIsvrFQBXhHy3kOReWbRjLBABWq0nyK+JhP
vgjxGHP3QvsuwjPRbHgJ4JlQ417S+fHg/NHkgHeeEHI0e8UGfn2CPK9e71xOcufh
so0gOiviJsfa5eKYLifz0lebxHU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:33 2024 by rpki-client on console-ams.rpki-client.org