Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/5gGKu_D0jYeN4b4O3xvaZ3qL6W4.roa
File: 5gGKu_D0jYeN4b4O3xvaZ3qL6W4.roa (raw, json)
Hash identifier: 8t9yRFvc+VHVZKRLy0i1EnJmlE/1E8D3QnZ2yQlgNoM=
Subject key identifier: E6:01:8A:BB:F0:F4:8D:87:8D:E1:BE:0E:DF:1B:DA:67:7A:8B:E9:6E
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 330A301A
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/5gGKu_D0jYeN4b4O3xvaZ3qL6W4.roa
Signing time: Sat 01 Jan 2022 09:58:40 +0000
ROA not before: Sat 01 Jan 2022 09:58:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43067
IP address blocks: 2a04:a900:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 856305690 (0x330a301a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 09:58:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6018abbf0f48d878de1be0edf1bda677a8be96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:66:98:50:07:b8:10:93:1d:04:2a:1c:78:81:
69:2f:6b:64:69:e3:b6:01:5d:87:b4:6e:8b:6e:65:
cf:55:57:35:5a:e9:a6:32:8f:b4:84:6f:dd:b4:e8:
d5:3f:e0:8e:f9:52:c4:ee:27:e0:8c:2d:11:da:a1:
1e:5d:62:06:da:98:76:df:b0:d8:9e:d0:f6:b8:40:
f4:43:be:af:1b:38:b1:fd:f8:ec:61:b9:bf:67:e9:
27:ad:95:cb:70:5d:e8:cb:98:20:26:07:f5:f8:95:
83:fb:f0:4e:52:d0:4d:a1:b3:e8:ef:44:c5:9b:13:
c0:40:ad:9d:2b:1e:9b:68:33:8d:42:f5:ee:41:fd:
6b:ab:74:63:9e:a1:0a:b9:1f:9c:61:9b:7a:68:5d:
da:53:73:19:0c:cc:1b:44:b0:37:60:39:2d:ef:9f:
cb:17:e2:7b:6c:e9:2b:1e:3e:2f:60:85:17:04:77:
74:38:30:08:ca:cd:9e:6c:f6:68:36:a9:03:fb:f4:
ad:eb:96:be:30:10:ce:1e:13:7e:c1:5f:21:64:98:
fc:f5:4e:a0:a7:a1:da:9b:97:4f:48:b6:0f:0c:33:
34:62:86:db:a9:ad:2e:5c:8c:42:f4:1d:34:45:ee:
1d:dd:95:22:2b:43:e9:96:33:bc:b2:fd:ce:77:4b:
fa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:01:8A:BB:F0:F4:8D:87:8D:E1:BE:0E:DF:1B:DA:67:7A:8B:E9:6E
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/5gGKu_D0jYeN4b4O3xvaZ3qL6W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:a900:2::/48
Signature Algorithm: sha256WithRSAEncryption
5f:57:65:90:4c:3a:7d:f0:f2:52:76:7b:0f:91:d9:a6:de:77:
cb:b1:0a:42:93:69:da:7e:0c:16:c3:68:92:60:22:4f:e9:18:
26:b2:a9:45:73:13:49:57:a7:43:84:37:f1:b2:dd:a0:e9:e4:
71:b3:92:e6:b2:7f:b2:30:dd:a2:f7:d8:be:b1:ba:b6:47:98:
2f:26:9a:04:ac:46:e7:31:81:ec:74:0a:14:c8:c7:f2:bd:48:
40:b4:c1:70:a1:63:05:11:e6:f7:74:23:40:fd:3b:65:89:ca:
3d:31:87:4b:3e:8c:31:49:64:2d:7a:34:16:5a:61:f1:fe:c2:
16:d2:34:ed:4c:63:ca:2e:b4:58:31:7b:9f:88:8c:9c:31:a5:
05:64:5e:80:64:3f:df:f6:58:c7:17:7d:7d:b5:ad:a3:08:48:
ef:99:83:ea:c8:ed:3f:71:9f:30:fd:7f:7b:94:6a:1a:bb:58:
33:1d:e8:81:98:3d:37:19:84:e5:ba:36:60:e8:37:84:02:b9:
e1:09:bc:41:53:f1:76:61:eb:13:fe:44:c3:c3:95:ff:8b:75:
4b:4f:98:ac:4b:27:6a:ce:06:ba:0a:b9:e8:68:b5:d7:53:d2:
db:5a:37:1f:ac:46:31:39:62:76:be:73:87:c8:2d:de:bf:ab:
85:3d:80:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:32 2024 by rpki-client on console-fra.rpki-client.org