Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/zJPcpq2x2bA9pvUhV8aMqGEapqY.roa
File: zJPcpq2x2bA9pvUhV8aMqGEapqY.roa (raw, json)
Hash identifier: IW3S09UIimz/e6m7AhRCGYMu0hU0QZhVCI3Hq1hrYwQ=
Subject key identifier: CC:93:DC:A6:AD:B1:D9:B0:3D:A6:F5:21:57:C6:8C:A8:61:1A:A6:A6
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 07473783
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/zJPcpq2x2bA9pvUhV8aMqGEapqY.roa
Signing time: Sat 01 Jan 2022 15:05:05 +0000
ROA not before: Sat 01 Jan 2022 15:05:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25098
IP address blocks: 2001:678:b04::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122107779 (0x7473783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Jan 1 15:05:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc93dca6adb1d9b03da6f52157c68ca8611aa6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:d1:33:92:b6:c7:79:45:1e:28:cf:f6:4d:
d0:d7:65:5a:55:6f:e5:f1:79:85:de:f6:31:0f:2c:
b0:25:fb:8b:18:7f:fa:70:49:1c:74:11:f9:ae:ee:
d4:41:6c:1a:83:5b:d7:c2:90:92:d7:35:75:7a:31:
7f:28:9e:20:33:fb:3e:7c:a6:a4:92:04:1c:c7:56:
cf:8a:85:2e:1b:4a:6e:61:4b:d3:e1:60:c7:91:90:
1f:85:c6:00:20:7b:f6:4e:33:d1:5e:bc:5f:85:b0:
08:18:aa:e8:02:ee:7f:fb:91:8d:fb:6a:8b:95:c8:
13:31:b5:95:b1:5b:92:ae:df:48:2f:cf:83:26:e8:
39:27:0a:9d:c6:9d:00:76:e4:38:7b:db:2b:34:d4:
76:df:b8:80:80:6f:0d:7a:9b:86:b3:91:25:90:e2:
c5:10:d9:90:2e:62:00:3c:ce:ff:f6:20:59:d8:d6:
a0:85:e4:1f:6e:f1:f3:c8:b5:b1:27:19:12:07:42:
46:91:5d:46:81:9d:9b:d4:53:99:db:14:b1:f8:72:
93:c4:e6:a7:9e:f5:56:3b:c8:e0:74:aa:98:d7:39:
fa:c8:d8:bd:c9:01:82:f2:4f:65:49:9b:5b:68:92:
2e:f1:be:18:36:70:16:22:23:55:81:f9:33:76:10:
1c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:93:DC:A6:AD:B1:D9:B0:3D:A6:F5:21:57:C6:8C:A8:61:1A:A6:A6
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/zJPcpq2x2bA9pvUhV8aMqGEapqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b04::/48
Signature Algorithm: sha256WithRSAEncryption
ad:19:18:f6:ce:2d:ac:be:66:de:3b:3b:91:b5:ba:83:da:60:
bd:b3:a5:92:e2:9c:48:b8:82:48:b8:c0:95:2c:9e:9f:62:4b:
fc:90:ea:9a:65:54:11:4f:f7:de:33:b7:f8:0e:4d:c3:41:70:
be:f6:83:e2:da:c1:0d:56:c8:7b:7b:0d:90:ef:f2:d3:a9:f9:
d6:b8:6d:ff:92:5e:4e:f9:ed:bd:9e:6b:54:12:43:22:96:18:
1f:74:0c:66:19:16:b8:d9:3f:ad:97:ca:b6:9b:c4:16:a8:41:
97:ac:31:67:79:49:10:db:15:34:57:49:8c:64:05:23:12:56:
78:12:3f:a0:fb:64:41:f9:7a:a7:aa:0b:b2:a6:aa:1d:97:60:
f6:76:ac:66:7b:42:18:87:39:7f:d2:0c:2d:43:3d:40:9c:35:
fa:6e:7d:ee:e6:fd:65:1b:c8:0d:7a:db:56:68:51:0b:88:ce:
35:0d:35:33:f3:57:75:c4:4c:8d:54:8b:2c:fb:11:f0:95:c6:
6f:ab:ef:3e:23:85:c2:bc:44:14:ed:a3:de:8e:80:08:13:3d:
be:c2:5a:b3:ac:77:c1:a5:99:af:9c:c0:3c:62:85:ff:a2:45:
e0:b6:03:0c:2d:fa:54:bd:69:6b:21:d2:19:ee:66:d6:5a:17:
56:08:ec:9f
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEB0c3gzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NjFiYjA5MTZjODUzODAxZjIyY2U3MjNiYzJjYzQxODg2OWRiN2QwMB4XDTIyMDEw
MTE1MDUwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2M5M2RjYTZhZGIx
ZDliMDNkYTZmNTIxNTdjNjhjYTg2MTFhYTZhNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALBB0TOStsd5RR4oz/ZN0NdlWlVv5fF5hd72MQ8ssCX7ixh/
+nBJHHQR+a7u1EFsGoNb18KQktc1dXoxfyieIDP7PnympJIEHMdWz4qFLhtKbmFL
0+Fgx5GQH4XGACB79k4z0V68X4WwCBiq6ALuf/uRjftqi5XIEzG1lbFbkq7fSC/P
gyboOScKncadAHbkOHvbKzTUdt+4gIBvDXqbhrORJZDixRDZkC5iADzO//YgWdjW
oIXkH27x88i1sScZEgdCRpFdRoGdm9RTmdsUsfhyk8Tmp571VjvI4HSqmNc5+sjY
vckBgvJPZUmbW2iSLvG+GDZwFiIjVYH5M3YQHNcCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBTMk9ymrbHZsD2m9SFXxoyoYRqmpjAfBgNVHSMEGDAWgBQGG7CRbIU4AfIs
5yO8LMQYhp230DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JodXdrV3lGT0FIeUxPY2p2Q3pFR0lhZHQ5QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvYmJiMWM2LTlmOTEtNDM0Ni1iNjE2LWMyZGM3YTA1OGUzMC8x
L3pKUGNwcTJ4MmJBOXB2VWhWOGFNcUdFYXBxWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
YmJiMWM2LTlmOTEtNDM0Ni1iNjE2LWMyZGM3YTA1OGUzMC8xL0JodXdrV3lGT0FI
eUxPY2p2Q3pFR0lhZHQ5QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngLBDANBgkqhkiG9w0BAQsF
AAOCAQEArRkY9s4trL5m3js7kbW6g9pgvbOlkuKcSLiCSLjAlSyen2JL/JDqmmVU
EU/33jO3+A5Nw0FwvvaD4trBDVbIe3sNkO/y06n51rht/5JeTvntvZ5rVBJDIpYY
H3QMZhkWuNk/rZfKtpvEFqhBl6wxZ3lJENsVNFdJjGQFIxJWeBI/oPtkQfl6p6oL
sqaqHZdg9nasZntCGIc5f9IMLUM9QJw1+m597ub9ZRvIDXrbVmhRC4jONQ01M/NX
dcRMjVSLLPsR8JXGb6vvPiOFwrxEFO2j3o6ACBM9vsJas6x3waWZr5zAPGKF/6JF
4LYDDC36VL1payHSGe5m1loXVgjsnw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:53 2024 by rpki-client on console-fra.rpki-client.org