Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9aJAk81GK9TxQsqhZymOoI752cY.roa
File: 9aJAk81GK9TxQsqhZymOoI752cY.roa (raw, json)
Hash identifier: ZCIYC0uXOXrQ8CPQjE2vxun8cvAZj8/5nfL74OXXByI=
Subject key identifier: F5:A2:40:93:CD:46:2B:D4:F1:42:CA:A1:67:29:8E:A0:8E:F9:D9:C6
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 446749C9
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9aJAk81GK9TxQsqhZymOoI752cY.roa
Signing time: Sat 01 Jan 2022 03:58:14 +0000
ROA not before: Sat 01 Jan 2022 03:58:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2281
IP address blocks: 2a01:c9c0:8020::/48 maxlen: 64
2a01:c9c0:802f::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1147619785 (0x446749c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5a24093cd462bd4f142caa167298ea08ef9d9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:f6:48:b5:7c:72:7f:b4:c0:89:3a:21:bd:
3c:59:81:8b:02:61:a4:a3:7a:7c:96:8a:f8:f9:ec:
e3:40:53:d4:be:51:53:de:f4:1d:e1:51:79:93:83:
2e:bf:34:de:81:83:d6:74:14:74:40:25:00:84:32:
64:e2:b4:af:17:cf:78:0d:99:0a:35:24:95:5b:ff:
c8:0d:1d:e8:71:99:46:56:68:98:ce:8a:97:09:b5:
ba:ed:cc:d9:a7:ac:2d:0c:26:a5:c0:40:97:e3:81:
90:43:88:b3:63:18:6e:62:47:7f:30:da:17:7c:cc:
eb:9e:f5:36:18:51:61:70:f2:0c:49:bb:3f:e2:fe:
85:72:1b:a9:e3:9c:75:cf:21:a0:34:96:a4:0f:2c:
af:44:2f:13:ec:bc:36:38:5b:60:54:2b:22:aa:54:
21:43:de:2e:b8:9c:70:b4:8f:75:00:c6:cf:7a:35:
35:5b:11:35:ef:92:e3:92:50:8c:2f:8e:23:9a:f1:
f3:70:9f:89:db:9a:52:cc:e9:69:42:66:db:98:fc:
34:47:b6:71:d5:9f:6f:af:c4:2b:8b:2a:f8:29:86:
70:66:28:6f:5a:7f:d9:d4:33:5d:d8:39:fc:da:bf:
a4:5a:77:31:5d:61:84:d8:b1:81:aa:be:73:74:f0:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A2:40:93:CD:46:2B:D4:F1:42:CA:A1:67:29:8E:A0:8E:F9:D9:C6
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9aJAk81GK9TxQsqhZymOoI752cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:c9c0:8020::/48
2a01:c9c0:802f::/48
Signature Algorithm: sha256WithRSAEncryption
a5:08:06:83:21:c3:5e:f5:23:eb:c9:2d:3c:cd:a4:3a:1c:99:
53:57:d6:15:fd:79:b6:09:60:0a:33:a6:82:77:14:3c:f0:a7:
f3:e6:8a:83:e2:e2:f8:bc:2e:a7:24:86:cd:0c:e0:29:d4:f6:
15:2f:db:3c:0a:f9:ff:b2:4e:b7:d8:e7:86:90:82:9c:1f:38:
66:d8:e5:bb:8c:0e:a1:f2:bc:13:5c:b3:3e:77:e1:3d:30:af:
94:3a:9a:b8:3d:81:b6:f7:6c:12:db:71:00:f3:1c:c9:77:b3:
52:7b:06:5e:bd:de:80:cb:03:7a:10:f8:cd:10:80:2f:4d:31:
67:3b:a3:21:16:dd:77:ca:54:2f:34:5d:ff:fa:d1:ae:d6:14:
90:e1:b2:21:d5:04:14:6e:cd:7d:22:76:db:05:d4:d9:19:8f:
08:97:c9:ec:12:3f:a3:87:63:a7:52:5c:50:9b:d4:13:ce:c6:
91:9b:02:68:4e:ff:94:ec:0b:c4:d2:af:b9:76:9f:aa:3b:de:
ca:50:f5:e2:f7:3d:4d:aa:3b:0b:ec:42:c2:4f:11:42:14:2d:
e1:3c:d3:da:a6:0c:7f:34:4d:dd:64:61:22:5f:11:51:bb:fa:
b0:ab:2a:6f:3c:42:39:f6:bf:81:3e:0f:2f:f1:ed:25:de:ac:
bb:0a:f9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org