Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/HniulgNf56WMq0FC-duLU4OwFXs.roa
File: HniulgNf56WMq0FC-duLU4OwFXs.roa (raw, json)
Hash identifier: ybzV0qMPe+OJAgvC4zTuHAJLJWlaAjzc1MryzqkFNdQ=
Subject key identifier: 1E:78:AE:96:03:5F:E7:A5:8C:AB:41:42:F9:DB:8B:53:83:B0:15:7B
Certificate issuer: /CN=5b6d178f13851306b5634df159716319f4d82478
Certificate serial: 01829CCBDDDDC96B24B84876B7024ECC86CE
Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/HniulgNf56WMq0FC-duLU4OwFXs.roa
Signing time: Sun 14 Aug 2022 14:39:42 +0000
ROA not before: Sun 14 Aug 2022 14:39:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 2a0e:36c2::/32 maxlen: 32
2a0e:36c6::/32 maxlen: 32
2a0e:36c3::/32 maxlen: 32
2a0e:36c1::/32 maxlen: 32
2a0e:36c5::/32 maxlen: 32
2a0e:36c0::/29 maxlen: 32
2a0e:36c7::/32 maxlen: 32
2a0e:36c4::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9c:cb:dd:dd:c9:6b:24:b8:48:76:b7:02:4e:cc:86:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6d178f13851306b5634df159716319f4d82478
Validity
Not Before: Aug 14 14:39:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e78ae96035fe7a58cab4142f9db8b5383b0157b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:31:a7:55:dc:4f:24:0c:ee:4b:65:7e:60:
ed:6b:09:f3:3f:97:df:03:fa:65:de:d8:a6:c3:c2:
ac:0f:b4:db:ff:a0:41:2f:61:8a:81:2e:1b:88:90:
e2:d8:f2:ad:b2:70:4b:7b:d1:fd:0e:1e:96:56:10:
b1:7b:0d:ef:3c:4e:b4:3f:fb:43:ac:89:19:7a:cd:
29:a1:44:f5:f0:ba:7f:f4:a8:62:f6:56:5c:60:9b:
7a:d3:0d:59:da:8f:a3:21:15:e0:cd:a0:b6:80:53:
06:b6:82:69:b1:5b:ad:9f:7f:1d:9c:fb:d9:65:e4:
ef:20:21:10:db:06:af:b7:4d:cf:a9:a6:d4:82:7a:
86:87:09:c1:7c:df:ad:f2:00:db:83:13:3a:4e:45:
ab:3b:d3:12:01:6d:12:83:eb:36:cd:c7:c2:38:00:
a6:1a:48:e9:84:39:d7:a8:31:60:95:11:ce:63:b3:
ee:46:a0:55:3f:d2:a8:f6:f3:cb:c1:5b:7c:4c:de:
f7:dd:a9:95:2a:6c:54:ec:ac:41:f6:e7:56:5b:f6:
9a:5f:05:cd:c6:4e:fb:4b:9a:03:20:d9:c4:52:c1:
3c:3e:96:74:ef:50:b8:e6:87:03:b6:ec:06:88:ad:
ab:6d:02:ec:a5:3f:5b:16:7d:3c:27:98:1e:8e:ff:
3f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:78:AE:96:03:5F:E7:A5:8C:AB:41:42:F9:DB:8B:53:83:B0:15:7B
X509v3 Authority Key Identifier:
keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/HniulgNf56WMq0FC-duLU4OwFXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:78:66:e6:d0:85:6b:c2:cb:fb:b2:3a:15:7d:5f:2a:7c:61:
98:9e:f1:38:59:dc:b7:21:88:48:95:69:13:0f:bf:93:85:17:
5e:a2:27:de:73:89:81:53:cd:23:52:06:52:e0:7b:06:59:35:
c0:8d:74:9b:6b:ea:be:9f:37:74:81:0a:4f:f2:96:00:f3:2b:
42:50:6d:96:8c:81:b6:12:ea:08:78:f0:4b:e7:a5:e8:9e:de:
a4:d2:8f:b8:56:92:b6:e9:1d:94:b6:43:a7:03:a7:73:76:57:
ae:d1:e3:ed:75:c3:40:c5:34:c6:69:3d:09:1d:cc:be:b6:0c:
b7:97:1d:90:b2:6c:50:ea:e6:5d:17:71:a2:cc:60:cf:f2:a1:
b6:34:b1:2a:ca:b3:b6:3f:9e:9b:b4:66:c2:c0:61:0f:dd:0c:
2f:2f:a3:1e:63:d5:a8:62:01:d7:cc:c3:f6:4a:2c:44:10:a0:
68:60:07:6d:cc:d7:ce:bb:d8:1a:cd:47:fc:f7:f8:5a:3a:43:
82:ee:dc:db:d2:19:77:02:1b:10:68:1a:cf:89:dd:9b:c7:73:
23:6e:06:14:bb:d6:12:8c:b0:d7:bc:1c:8f:d7:29:fa:ac:9e:
65:55:a3:c8:19:69:0b:1a:47:aa:9a:34:f4:62:0b:28:ad:30:
dc:dc:67:78
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYKcy93dyWskuEh2twJOzIbOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNmQxNzhmMTM4NTEzMDZiNTYzNGRmMTU5NzE2MzE5ZjRk
ODI0NzgwHhcNMjIwODE0MTQzOTQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTc4YWU5NjAzNWZlN2E1OGNhYjQxNDJmOWRiOGI1MzgzYjAxNTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5cxp1XcTyQM7ktlfmDtawnzP5ff
A/pl3timw8KsD7Tb/6BBL2GKgS4biJDi2PKtsnBLe9H9Dh6WVhCxew3vPE60P/tD
rIkZes0poUT18Lp/9Khi9lZcYJt60w1Z2o+jIRXgzaC2gFMGtoJpsVutn38dnPvZ
ZeTvICEQ2wavt03PqabUgnqGhwnBfN+t8gDbgxM6TkWrO9MSAW0Sg+s2zcfCOACm
GkjphDnXqDFglRHOY7PuRqBVP9Ko9vPLwVt8TN733amVKmxU7KxB9udWW/aaXwXN
xk77S5oDINnEUsE8PpZ071C45ocDtuwGiK2rbQLspT9bFn08J5gejv8/LwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFB54rpYDX+eljKtBQvnbi1ODsBV7MB8GA1UdIwQY
MBaAFFttF48ThRMGtWNN8VlxYxn02CR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2It
NGJiOTRjYmMyZTczLzEvSG5pdWxnTmY1NldNcTBGQy1kdUxVNE93RlhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2ItNGJiOTRjYmMyZTcz
LzEvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg42wDAN
BgkqhkiG9w0BAQsFAAOCAQEAnHhm5tCFa8LL+7I6FX1fKnxhmJ7xOFnctyGISJVp
Ew+/k4UXXqIn3nOJgVPNI1IGUuB7Blk1wI10m2vqvp83dIEKT/KWAPMrQlBtloyB
thLqCHjwS+el6J7epNKPuFaStukdlLZDpwOnc3ZXrtHj7XXDQMU0xmk9CR3MvrYM
t5cdkLJsUOrmXRdxosxgz/KhtjSxKsqztj+em7RmwsBhD90MLy+jHmPVqGIB18zD
9kosRBCgaGAHbczXzrvYGs1H/Pf4WjpDgu7c29IZdwIbEGgaz4ndm8dzI24GFLvW
Eoyw17wcj9cp+qyeZVWjyBlpCxpHqpo09GILKK0w3NxneA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:47 2024 by rpki-client on console-fra.rpki-client.org