Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/tfDTxTGmV2bYYGGMxVhUpPU2pok.roa
File: tfDTxTGmV2bYYGGMxVhUpPU2pok.roa (raw, json)
Hash identifier: p+dc1yvzyOunrmKcMsTzgUPh1nsfv87+puokcJua4C0=
Subject key identifier: B5:F0:D3:C5:31:A6:57:66:D8:60:61:8C:C5:58:54:A4:F5:36:A6:89
Certificate issuer: /CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Certificate serial: 245A
Authority key identifier: F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/tfDTxTGmV2bYYGGMxVhUpPU2pok.roa
Signing time: Tue 17 May 2022 14:54:15 +0000
ROA not before: Tue 17 May 2022 14:54:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199552
IP address blocks: 2001:67c:2abc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9306 (0x245a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Validity
Not Before: May 17 14:54:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5f0d3c531a65766d860618cc55854a4f536a689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:06:b2:f8:40:12:6d:06:9c:b0:81:3d:cc:
ed:dc:87:9f:8a:b1:0d:ee:fe:97:95:77:ff:39:60:
fc:87:5e:7f:e3:c9:5a:a3:81:ad:f9:17:ab:56:64:
ae:59:10:b2:b8:9c:89:7b:b7:a8:9a:e0:09:e0:d8:
8a:86:1a:a9:b8:50:ba:b8:ad:20:8d:bb:2d:19:c7:
06:e1:6b:5b:2c:95:07:74:e7:6b:6a:bd:20:0e:75:
e2:bb:30:b9:0c:a7:da:f2:ac:5e:6e:c5:a9:36:65:
62:75:cc:b7:52:72:08:e0:b9:69:3b:90:fa:e9:4b:
15:5d:44:68:a2:9d:ff:ee:51:57:80:61:df:82:7c:
e9:ec:fc:bd:5b:47:b6:c1:dd:2c:9b:c5:bc:2d:bc:
ab:0f:97:e7:17:c4:4c:41:93:dc:bb:50:cc:e7:3e:
16:41:26:ed:a7:79:41:de:8b:c8:8a:6b:e3:2d:83:
f3:fb:56:8c:3e:cd:93:4e:ac:41:7a:16:d2:ee:69:
1d:6c:a5:c6:32:2f:77:e4:2a:2f:c3:45:3b:48:23:
18:6c:fa:24:b1:1f:23:86:95:c1:50:74:be:1c:11:
db:eb:d3:6f:7a:52:06:0f:b4:00:c7:74:53:2c:85:
e2:38:d8:d4:87:12:51:39:dd:9e:de:9f:92:f6:9b:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F0:D3:C5:31:A6:57:66:D8:60:61:8C:C5:58:54:A4:F5:36:A6:89
X509v3 Authority Key Identifier:
keyid:F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/tfDTxTGmV2bYYGGMxVhUpPU2pok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2abc::/48
Signature Algorithm: sha256WithRSAEncryption
0b:fe:d4:15:63:6e:0d:0e:0a:01:47:ec:5c:5b:06:84:e9:2b:
e7:46:4e:c0:49:50:61:30:92:df:a9:3f:91:fb:26:00:58:db:
34:bc:17:2f:76:e7:0d:a6:31:e9:56:d2:b2:6c:22:c1:c2:da:
6b:e2:ca:21:d9:a7:a6:b7:dd:89:ff:58:8a:e9:fe:8f:74:71:
ae:52:8b:0d:0c:16:51:78:7e:cc:b5:a0:aa:f5:2a:55:4f:e7:
9b:ea:10:7c:17:e4:e4:21:dd:0d:64:1f:07:4e:d5:37:32:26:
3f:3d:40:0b:4d:6f:0a:ca:4c:d3:49:fa:3a:55:97:c9:cb:4b:
95:41:92:f9:c0:40:3f:5c:4d:c8:02:e0:4e:91:cc:8b:47:2b:
bc:9a:ca:cf:f4:26:10:74:34:0d:76:be:a7:79:4d:f0:c9:1c:
1f:df:b2:60:18:b2:29:e3:2b:83:dd:74:04:81:c8:7b:2c:32:
b6:06:cb:ef:cd:2e:40:f6:2a:90:be:07:e3:97:a1:d1:70:3f:
72:97:48:a9:f8:27:cc:2d:a0:bd:38:1e:7a:79:bb:37:02:0d:
53:81:c0:3d:75:12:02:f9:10:40:c1:db:b6:99:37:36:fe:67:
2c:55:82:e7:f5:ab:50:3f:11:1a:27:4c:65:d2:10:09:85:b4:
d1:c8:60:b0
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgICJFowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZjlh
MTZkMWY0YzdhNjUzZTNlMjBmODRkOWJhNTlmZGIyN2MyYTYxZjAeFw0yMjA1MTcx
NDU0MTVaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGI1ZjBkM2M1MzFhNjU3
NjZkODYwNjE4Y2M1NTg1NGE0ZjUzNmE2ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB5gay+EASbQacsIE9zO3ch5+KsQ3u/peVd/85YPyHXn/jyVqj
ga35F6tWZK5ZELK4nIl7t6ia4Ang2IqGGqm4ULq4rSCNuy0Zxwbha1sslQd052tq
vSAOdeK7MLkMp9ryrF5uxak2ZWJ1zLdScgjguWk7kPrpSxVdRGiinf/uUVeAYd+C
fOns/L1bR7bB3SybxbwtvKsPl+cXxExBk9y7UMznPhZBJu2neUHei8iKa+Mtg/P7
Vow+zZNOrEF6FtLuaR1spcYyL3fkKi/DRTtIIxhs+iSxHyOGlcFQdL4cEdvr0296
UgYPtADHdFMsheI42NSHElE53Z7en5L2m8IZAgMBAAGjggIOMIICCjAdBgNVHQ4E
FgQUtfDTxTGmV2bYYGGMxVhUpPU2pokwHwYDVR0jBBgwFoAU+aFtH0x6ZT4+IPhN
m6Wf2yfCph8wDgYDVR0PAQH/BAQDAgeAMGUGCCsGAQUFBwEBBFkwVzBVBggrBgEF
BQcwAoZJcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8x
LWFGdEgweDZaVDQtSVBoTm02V2YyeWZDcGg4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mZi85OGMxYjUtMzM5Ni00ZDljLWJjYWMtOTkyNjI3ZWVhOWVhLzEv
dGZEVHhUR21WMmJZWUdHTXhWaFVwUFUycG9rLnJvYTCBggYDVR0fBHsweTB3oHWg
c4ZxcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85
OGMxYjUtMzM5Ni00ZDljLWJjYWMtOTkyNjI3ZWVhOWVhLzEvMS1hRnRIMHg2WlQ0
LUlQaE5tNldmMnlmQ3BoOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwqvDANBgkqhkiG9w0BAQsF
AAOCAQEAC/7UFWNuDQ4KAUfsXFsGhOkr50ZOwElQYTCS36k/kfsmAFjbNLwXL3bn
DaYx6VbSsmwiwcLaa+LKIdmnprfdif9Yiun+j3RxrlKLDQwWUXh+zLWgqvUqVU/n
m+oQfBfk5CHdDWQfB07VNzImPz1AC01vCspM00n6OlWXyctLlUGS+cBAP1xNyALg
TpHMi0crvJrKz/QmEHQ0DXa+p3lN8MkcH9+yYBiyKeMrg910BIHIeywytgbL780u
QPYqkL4H45eh0XA/cpdIqfgnzC2gvTgeenm7NwINU4HAPXUSAvkQQMHbtpk3Nv5n
LFWC5/WrUD8RGidMZdIQCYW00chgsA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:15 2024 by rpki-client on console-fra.rpki-client.org