Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/bCJNPXxDszg1nDScDA1KCaXVtt8.roa
File: bCJNPXxDszg1nDScDA1KCaXVtt8.roa (raw, json)
Hash identifier: ZQK8TRBk9rp6824j3TX37KG5f+VUx2O+Sdo4OiGxogs=
Subject key identifier: 6C:22:4D:3D:7C:43:B3:38:35:9C:34:9C:0C:0D:4A:09:A5:D5:B6:DF
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 018415F93C57DB9986F7B913D6708FA213AC
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/bCJNPXxDszg1nDScDA1KCaXVtt8.roa
Signing time: Wed 26 Oct 2022 20:26:06 +0000
ROA not before: Wed 26 Oct 2022 20:26:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64474
IP address blocks: 2a0d:7440:22::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:15:f9:3c:57:db:99:86:f7:b9:13:d6:70:8f:a2:13:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Oct 26 20:26:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c224d3d7c43b338359c349c0c0d4a09a5d5b6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:61:72:c3:14:07:c0:b7:a3:05:36:b2:5a:a3:
cb:9f:ce:35:bc:68:40:dc:3a:ec:f8:e5:0c:07:76:
14:4b:be:fb:6d:69:38:52:af:a8:60:b9:c6:1e:60:
7b:3c:58:f1:28:82:db:e0:ef:8f:91:80:7c:ed:8c:
11:03:e3:b3:06:c5:ec:ec:97:98:09:3a:1b:04:56:
30:fe:e5:de:72:c2:7b:0c:81:f0:fc:ae:e1:3a:e0:
cd:3a:e2:cf:25:89:a4:e7:24:f8:f9:e4:36:bc:5d:
a3:1e:a7:7d:bf:b0:24:54:eb:aa:a5:29:a5:83:ac:
7a:3d:50:11:ce:7e:8f:58:44:19:cf:be:83:cb:c9:
4d:4b:2c:c5:51:56:eb:63:f5:1c:83:ed:15:10:b8:
e3:90:e6:1a:bd:78:75:6d:4c:d1:20:f2:91:9b:6f:
b6:84:15:be:88:41:fd:d4:49:00:c5:19:83:ac:48:
1f:28:88:df:5e:73:e8:7e:c1:17:29:fc:23:8b:21:
fb:d1:33:a2:55:d1:f9:d7:c7:a9:c9:98:6b:99:cf:
c0:85:b1:e7:b9:09:ab:4f:fc:8a:28:70:81:56:75:
a7:91:ad:aa:b2:f4:8c:02:81:33:0c:6d:83:dd:47:
a1:99:51:79:1a:07:6a:55:da:38:e6:b2:d7:90:79:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:22:4D:3D:7C:43:B3:38:35:9C:34:9C:0C:0D:4A:09:A5:D5:B6:DF
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/bCJNPXxDszg1nDScDA1KCaXVtt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:7440:22::/48
Signature Algorithm: sha256WithRSAEncryption
ae:9c:d0:de:5e:aa:19:b0:d4:13:5a:24:cb:3e:49:b1:33:e2:
2f:aa:b2:39:b3:bf:86:29:30:b8:3d:a9:41:38:56:d6:ac:41:
c2:e2:70:d7:9a:e7:08:6b:9b:c0:fc:e4:b2:87:db:8c:6c:e9:
ce:f7:ac:ea:17:d6:47:77:3f:ff:7b:a0:87:0a:33:76:3a:17:
89:08:80:03:22:1e:7a:eb:2e:82:b1:4e:4e:d1:07:59:57:71:
de:e7:f0:6c:6e:5b:79:35:ad:56:13:14:44:a6:b8:c9:d6:b5:
f6:fe:6a:5e:60:01:d9:4b:6e:43:2c:fd:b0:72:e6:5b:52:fd:
6b:02:75:ca:85:40:a2:5e:a6:53:71:4c:13:57:99:72:f5:6e:
82:c5:f9:4d:eb:08:f2:d6:45:d3:bc:a1:1e:86:38:5b:37:1b:
51:6b:02:76:ba:47:42:8b:8b:ab:65:e6:58:8e:2d:2e:6c:8d:
9b:a9:de:55:13:38:5f:50:84:af:3a:d3:8a:ec:96:a1:a8:f6:
03:b2:51:37:72:e4:f6:a5:99:0b:08:a4:e2:05:17:50:de:c7:
1d:13:cc:ea:50:4c:ad:a3:df:c3:e4:7c:67:66:8f:89:13:a7:
56:b6:17:be:3d:37:ba:1f:2b:7c:3e:cb:16:0f:17:da:46:78:
6d:d1:15:65
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYQV+TxX25mG97kT1nCPohOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjIxMDI2MjAyNjA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzIyNGQzZDdjNDNiMzM4MzU5YzM0OWMwYzBkNGEwOWE1ZDViNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2FywxQHwLejBTayWqPLn841vGhA
3Drs+OUMB3YUS777bWk4Uq+oYLnGHmB7PFjxKILb4O+PkYB87YwRA+OzBsXs7JeY
CTobBFYw/uXecsJ7DIHw/K7hOuDNOuLPJYmk5yT4+eQ2vF2jHqd9v7AkVOuqpSml
g6x6PVARzn6PWEQZz76Dy8lNSyzFUVbrY/Ucg+0VELjjkOYavXh1bUzRIPKRm2+2
hBW+iEH91EkAxRmDrEgfKIjfXnPofsEXKfwjiyH70TOiVdH518epyZhrmc/AhbHn
uQmrT/yKKHCBVnWnka2qsvSMAoEzDG2D3UehmVF5GgdqVdo45rLXkHnP1wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGwiTT18Q7M4NZw0nAwNSgml1bbfMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvYkNKTlBYeERzemcxbkRTY0RBMUtDYVhWdHQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg10QAAi
MA0GCSqGSIb3DQEBCwUAA4IBAQCunNDeXqoZsNQTWiTLPkmxM+IvqrI5s7+GKTC4
PalBOFbWrEHC4nDXmucIa5vA/OSyh9uMbOnO96zqF9ZHdz//e6CHCjN2OheJCIAD
Ih566y6CsU5O0QdZV3He5/Bsblt5Na1WExREprjJ1rX2/mpeYAHZS25DLP2wcuZb
Uv1rAnXKhUCiXqZTcUwTV5ly9W6CxflN6wjy1kXTvKEehjhbNxtRawJ2ukdCi4ur
ZeZYji0ubI2bqd5VEzhfUISvOtOK7JahqPYDslE3cuT2pZkLCKTiBRdQ3scdE8zq
UEyto9/D5HxnZo+JE6dWthe+PTe6Hyt8PssWDxfaRnht0RVl
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org