Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bc216d-db94-4bb1-9147-010e4219aeda/1/dWC1OpateydCfO_sX9-zrfyrqd4.roa
File: dWC1OpateydCfO_sX9-zrfyrqd4.roa (raw, json)
Hash identifier: 7K7mv2PUV/62J9TpBbNefcmoTyfPpP77RpToc+GvAfE=
Subject key identifier: 75:60:B5:3A:96:AD:7B:27:42:7C:EF:EC:5F:DF:B3:AD:FC:AB:A9:DE
Certificate issuer: /CN=9cbdb5b73a8330d225f3410c81b638d283c40d1f
Certificate serial: 02E5CBBE
Authority key identifier: 9C:BD:B5:B7:3A:83:30:D2:25:F3:41:0C:81:B6:38:D2:83:C4:0D:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL21tzqDMNIl80EMgbY40oPEDR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bc216d-db94-4bb1-9147-010e4219aeda/1/dWC1OpateydCfO_sX9-zrfyrqd4.roa
Signing time: Sat 01 Jan 2022 06:58:15 +0000
ROA not before: Sat 01 Jan 2022 06:58:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211927
IP address blocks: 2001:67c:2920::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48614334 (0x2e5cbbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbdb5b73a8330d225f3410c81b638d283c40d1f
Validity
Not Before: Jan 1 06:58:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7560b53a96ad7b27427cefec5fdfb3adfcaba9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:2d:2c:85:89:84:57:3e:f3:9a:d7:a7:53:
54:25:e8:d4:0d:ce:ac:5e:15:b6:3c:17:cd:c7:bc:
c6:7e:38:b7:0c:9d:10:bf:a3:bf:01:33:a9:7a:be:
aa:e3:96:a8:0a:e0:c6:e8:51:f3:46:47:8e:46:6d:
37:a8:27:f4:51:f1:94:e7:c0:a9:35:18:83:02:21:
f5:a2:91:13:77:a4:c6:eb:82:15:8a:35:15:72:1b:
3d:5e:8e:86:dc:1e:3a:d7:7b:ec:3d:cd:24:9d:ed:
87:cc:59:16:74:cd:7e:82:75:4d:6e:43:39:07:be:
f3:3c:a1:da:29:28:5d:42:d2:83:64:90:06:21:10:
ad:0d:1d:a7:fe:c9:02:85:b0:02:23:d8:3d:ac:06:
be:ae:0b:e4:52:79:dd:e5:64:18:19:92:23:67:cc:
d6:13:0f:5f:1f:c9:09:2b:d1:2c:55:ba:f7:19:1c:
36:9b:d9:f8:b2:f8:d0:3d:b9:0f:81:d7:82:f7:a5:
fe:da:69:73:8e:ae:c4:0e:ba:7f:bc:a4:4d:9d:e9:
59:c6:78:38:f6:dd:7c:34:37:78:29:9b:cf:29:aa:
88:d3:8c:84:b2:7c:12:0c:38:9a:6b:8f:f9:91:28:
f0:e8:c0:63:cc:76:da:f4:46:43:50:e7:ac:81:ec:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:60:B5:3A:96:AD:7B:27:42:7C:EF:EC:5F:DF:B3:AD:FC:AB:A9:DE
X509v3 Authority Key Identifier:
keyid:9C:BD:B5:B7:3A:83:30:D2:25:F3:41:0C:81:B6:38:D2:83:C4:0D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL21tzqDMNIl80EMgbY40oPEDR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bc216d-db94-4bb1-9147-010e4219aeda/1/dWC1OpateydCfO_sX9-zrfyrqd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bc216d-db94-4bb1-9147-010e4219aeda/1/nL21tzqDMNIl80EMgbY40oPEDR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2920::/48
Signature Algorithm: sha256WithRSAEncryption
1c:8e:a7:03:e4:6a:fc:1c:bc:00:e6:fc:4f:b4:d8:b1:76:e3:
de:85:e9:d4:ba:24:ab:eb:ce:6f:02:88:a9:3f:1b:ab:3d:de:
58:f3:b9:96:f7:6b:33:dd:7b:d3:97:2d:a3:48:05:e5:ce:2d:
f4:7f:3e:6d:76:24:14:23:7e:8e:22:fe:a5:11:79:f4:cb:3d:
14:e3:5c:36:fa:26:94:46:52:3d:ad:86:56:1c:33:f2:c7:86:
51:8b:54:d6:bf:dc:d9:ca:fe:0d:8a:91:13:5c:6a:26:65:8f:
cf:99:12:ab:2b:0b:73:e3:86:a6:1d:c1:cf:b7:9d:8e:47:ba:
59:da:56:00:83:5c:98:62:92:e4:e6:b7:7a:f7:f3:b9:22:0f:
c8:18:e8:0a:25:a4:fe:83:f6:78:c4:61:da:05:89:b7:7d:19:
7a:68:c8:fb:65:91:02:a5:63:bf:a5:53:1a:25:78:bb:65:1a:
5e:b7:a8:e4:f5:0a:17:3d:9a:52:97:f2:6a:fb:d1:57:a8:23:
28:da:ca:5f:04:fc:04:ab:e3:6f:53:c1:2e:69:23:75:9b:52:
93:2f:a1:f7:0a:a8:8d:6b:b4:81:68:1c:e2:6d:90:30:0c:20:
89:3c:4d:36:54:f1:99:d1:b8:f7:40:3a:8c:3d:ac:0d:7a:6a:
26:48:e6:eb
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEAuXLvjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
Y2JkYjViNzNhODMzMGQyMjVmMzQxMGM4MWI2MzhkMjgzYzQwZDFmMB4XDTIyMDEw
MTA2NTgxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzU2MGI1M2E5NmFk
N2IyNzQyN2NlZmVjNWZkZmIzYWRmY2FiYTlkZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKzbLSyFiYRXPvOa16dTVCXo1A3OrF4VtjwXzce8xn44twyd
EL+jvwEzqXq+quOWqArgxuhR80ZHjkZtN6gn9FHxlOfAqTUYgwIh9aKRE3ekxuuC
FYo1FXIbPV6OhtweOtd77D3NJJ3th8xZFnTNfoJ1TW5DOQe+8zyh2ikoXULSg2SQ
BiEQrQ0dp/7JAoWwAiPYPawGvq4L5FJ53eVkGBmSI2fM1hMPXx/JCSvRLFW69xkc
NpvZ+LL40D25D4HXgvel/tppc46uxA66f7ykTZ3pWcZ4OPbdfDQ3eCmbzymqiNOM
hLJ8Egw4mmuP+ZEo8OjAY8x22vRGQ1DnrIHsDzECAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBR1YLU6lq17J0J87+xf37Ot/Kup3jAfBgNVHSMEGDAWgBScvbW3OoMw0iXz
QQyBtjjSg8QNHzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25MMjF0enFETU5JbDgwRU1nYlk0MG9QRURSOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvYmMyMTZkLWRiOTQtNGJiMS05MTQ3LTAxMGU0MjE5YWVkYS8x
L2RXQzFPcGF0ZXlkQ2ZPX3NYOS16cmZ5cnFkNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
YmMyMTZkLWRiOTQtNGJiMS05MTQ3LTAxMGU0MjE5YWVkYS8xL25MMjF0enFETU5J
bDgwRU1nYlk0MG9QRURSOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwpIDANBgkqhkiG9w0BAQsF
AAOCAQEAHI6nA+Rq/By8AOb8T7TYsXbj3oXp1Lokq+vObwKIqT8bqz3eWPO5lvdr
M91705cto0gF5c4t9H8+bXYkFCN+jiL+pRF59Ms9FONcNvomlEZSPa2GVhwz8seG
UYtU1r/c2cr+DYqRE1xqJmWPz5kSqysLc+OGph3Bz7edjke6WdpWAINcmGKS5Oa3
evfzuSIPyBjoCiWk/oP2eMRh2gWJt30ZemjI+2WRAqVjv6VTGiV4u2UaXreo5PUK
Fz2aUpfyavvRV6gjKNrKXwT8BKvjb1PBLmkjdZtSky+h9wqojWu0gWgc4m2QMAwg
iTxNNlTxmdG490A6jD2sDXpqJkjm6w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:44 2024 by rpki-client on console-fra.rpki-client.org