Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/vyxOEk9pKn7dpm0Whc9kfauWjUM.roa
File: vyxOEk9pKn7dpm0Whc9kfauWjUM.roa (raw, json)
Hash identifier: SHOnjNQX5x3SlkO3OkSiIUvLYIzI1L4RswwjVO86MyQ=
Subject key identifier: BF:2C:4E:12:4F:69:2A:7E:DD:A6:6D:16:85:CF:64:7D:AB:96:8D:43
Certificate issuer: /CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
Certificate serial: 0182B4AF2DE419A1C0630A600127FFD01D68
Authority key identifier: E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/vyxOEk9pKn7dpm0Whc9kfauWjUM.roa
Signing time: Fri 19 Aug 2022 05:59:15 +0000
ROA not before: Fri 19 Aug 2022 05:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35131
IP address blocks: 2a00:e280::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b4:af:2d:e4:19:a1:c0:63:0a:60:01:27:ff:d0:1d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
Validity
Not Before: Aug 19 05:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf2c4e124f692a7edda66d1685cf647dab968d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:03:50:9f:e6:f5:cd:b9:3d:ac:5a:e5:e7:
28:0a:e9:10:7a:c8:a7:83:e9:8e:6a:f5:34:07:f7:
aa:2f:44:85:82:5c:42:41:e3:68:bf:fe:68:55:4b:
e1:97:c0:68:9a:c3:32:8f:60:e2:4b:e5:c5:7e:a8:
a6:5e:ed:65:64:90:e3:ed:94:7c:61:84:42:1d:37:
40:ae:b5:6a:eb:43:cb:c2:65:a3:c5:19:e7:2d:0f:
05:36:a7:18:e4:61:5a:7a:ae:64:d7:60:4f:c9:e5:
ac:59:2e:fd:b7:5c:fb:ac:3b:bc:be:c3:cf:70:27:
cf:26:47:32:86:59:47:d6:da:6a:bb:ec:e2:71:8e:
e3:f5:b9:f3:6b:f7:86:2b:7c:c9:f5:c3:01:da:f9:
e1:2d:b0:d3:de:50:1f:bd:05:53:a9:4a:3a:bd:03:
d5:37:9e:c1:b1:e7:e4:36:3d:e5:c7:26:b4:41:06:
ac:62:a4:03:88:94:ae:24:0f:e4:d4:cf:04:3d:00:
cd:75:dc:3f:c3:67:b0:2a:33:e0:a8:18:24:3f:71:
0c:ce:77:67:0b:3c:a9:b4:86:93:35:62:95:79:88:
a8:10:3b:f2:1e:29:8f:f0:30:19:92:d9:c5:20:a5:
12:6b:28:58:93:22:8a:ac:b9:97:5e:f1:41:13:ed:
33:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2C:4E:12:4F:69:2A:7E:DD:A6:6D:16:85:CF:64:7D:AB:96:8D:43
X509v3 Authority Key Identifier:
keyid:E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/vyxOEk9pKn7dpm0Whc9kfauWjUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:e280::/32
Signature Algorithm: sha256WithRSAEncryption
7d:c4:55:fc:73:53:b8:f3:eb:9a:6e:0e:86:ca:cc:b9:c3:68:
e9:11:54:f9:6f:cc:68:80:fb:72:67:d8:9e:e9:7d:4c:ac:e5:
e4:5c:78:e5:c5:a8:69:43:d5:e8:7c:88:1e:9d:48:97:9c:06:
81:ed:85:d9:2d:25:58:cd:89:2b:cd:cb:75:5b:6d:af:5d:8b:
ca:31:0d:f8:c1:07:c6:a4:53:43:90:67:a5:71:27:68:b8:46:
07:dc:b3:c5:0c:ff:83:88:43:93:2e:83:cc:c1:00:68:d2:cf:
34:78:3f:b8:0b:ce:76:31:32:e9:44:b2:cd:f8:55:d9:67:75:
a1:0c:1e:d8:08:64:93:fa:ea:46:de:1c:86:23:2d:b1:97:23:
06:17:38:d5:94:45:94:da:5a:03:4a:7f:f5:f2:db:4c:fa:6d:
10:e1:32:aa:f0:52:5c:af:a1:87:f6:81:f2:03:4a:f9:66:4d:
5b:d6:5b:63:e2:d4:f6:a1:6c:56:55:9e:b7:32:46:aa:30:c2:
6e:0d:1c:a9:ff:e6:be:61:7b:61:a9:4d:c1:59:bd:b3:8a:c6:
cb:26:72:e4:69:0e:87:1e:ee:9f:f7:bf:a4:f8:a7:da:00:3e:
6e:8c:b6:25:14:1c:3c:09:f5:6e:28:fc:06:05:77:94:11:d2:
9d:fb:07:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:11 2024 by rpki-client on console-ams.rpki-client.org