Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/Lxi1kngYokugP0CTXHqMV0yMt3E.roa
File: Lxi1kngYokugP0CTXHqMV0yMt3E.roa (raw, json)
Hash identifier: vPQuK2tG4hmLXZ2eKzLHGu/WL3QX4zjrXAGdkVjEZg8=
Subject key identifier: 2F:18:B5:92:78:18:A2:4B:A0:3F:40:93:5C:7A:8C:57:4C:8C:B7:71
Certificate issuer: /CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Certificate serial: 01851B36340AC047446922C5D3E66D08B4B2
Authority key identifier: 3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/Lxi1kngYokugP0CTXHqMV0yMt3E.roa
Signing time: Fri 16 Dec 2022 13:53:35 +0000
ROA not before: Fri 16 Dec 2022 13:53:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201273
IP address blocks: 2a12:8340::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:36:34:0a:c0:47:44:69:22:c5:d3:e6:6d:08:b4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Validity
Not Before: Dec 16 13:53:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f18b5927818a24ba03f40935c7a8c574c8cb771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:9d:24:c7:56:a2:47:89:9a:4f:f7:27:f9:
dd:28:a2:d9:87:4c:29:7c:bf:cc:c6:2d:a5:3f:04:
f0:6d:78:79:17:c2:81:15:91:37:6c:14:ac:ff:1f:
70:cc:9f:8e:24:89:ce:bb:1c:c4:da:a1:77:1f:7f:
e7:1f:00:59:4f:ba:b0:88:df:bc:2d:d8:43:52:62:
3a:0d:15:96:92:61:c7:fc:6f:b8:ac:bf:bf:d1:b6:
b8:82:bf:8d:09:4d:4e:bc:8a:78:ae:92:9d:25:30:
c2:46:e3:5f:77:95:ee:c0:10:59:6e:e7:6c:cc:25:
f3:f8:ef:aa:91:fc:7b:fe:bb:af:8a:71:e0:4e:98:
6d:fb:01:cc:75:40:1f:aa:68:31:74:fc:9b:5e:4d:
94:39:9c:67:e2:bd:8a:a0:91:65:69:6e:ab:40:27:
3c:0d:0a:58:5f:9f:5b:1f:94:be:98:a3:ca:63:1f:
af:75:5e:66:76:9a:ca:90:58:6f:80:71:b6:ca:f0:
5e:ca:06:19:a1:5a:e6:17:26:e7:39:7b:33:5b:d8:
86:ff:9a:91:02:ba:f6:24:ec:a5:09:43:65:03:63:
95:e0:5d:09:6d:6d:28:14:34:b2:29:b6:e2:3a:46:
91:f6:15:03:b9:96:40:34:ee:0b:ac:4a:5a:fb:6c:
86:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:18:B5:92:78:18:A2:4B:A0:3F:40:93:5C:7A:8C:57:4C:8C:B7:71
X509v3 Authority Key Identifier:
keyid:3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/Lxi1kngYokugP0CTXHqMV0yMt3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8340::/29
Signature Algorithm: sha256WithRSAEncryption
76:f0:01:82:32:02:39:e5:4a:65:bc:f2:1d:7a:b1:25:8b:68:
55:82:0c:b6:ca:69:f7:72:b0:bf:a5:4f:92:91:48:4f:ab:f5:
10:e6:48:63:3f:6f:ec:e3:4f:50:f1:68:de:30:ba:0b:9e:42:
6b:e9:50:b1:b5:72:d9:e6:05:b2:28:85:9b:8a:cf:dc:e6:20:
0e:40:fb:ec:b7:80:19:f2:00:9e:af:a9:44:d5:bc:87:8e:a1:
dd:67:24:6d:93:b9:d1:19:dc:f3:63:c5:80:5f:5d:aa:ee:22:
0c:34:1a:7f:a9:0e:24:ae:ec:f1:4d:ab:fd:2d:a2:30:b3:59:
ea:24:13:09:e7:2a:e3:30:47:94:0b:95:66:2d:c1:0c:10:af:
cd:57:f4:40:c5:f7:6c:6f:0d:b3:bd:59:7d:c6:4b:27:33:e6:
35:31:79:2f:be:ac:07:f4:a0:50:69:15:d0:8e:56:dd:2a:cf:
63:a7:82:3a:b7:a2:3d:a7:ab:82:73:0b:6e:a2:26:aa:0c:26:
be:ee:fc:97:ba:e4:3b:b9:85:60:08:b1:ea:40:2e:1c:29:36:
8f:8e:8c:b8:0a:05:5f:fd:31:99:23:13:93:c4:80:96:eb:84:
5d:30:98:1d:64:6d:6d:ff:d7:1e:3c:94:6d:ec:d4:41:e1:c5:
c1:74:7f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:56 2024 by rpki-client on console-fra.rpki-client.org