Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/LVuTAem7uJNZgdmAay-_xCgYZio.roa
File: LVuTAem7uJNZgdmAay-_xCgYZio.roa (raw, json)
Hash identifier: EpDvZzPjnG7wDy1RprbuoqpI3rjVseIwrzB5jd7cGZM=
Subject key identifier: 2D:5B:93:01:E9:BB:B8:93:59:81:D9:80:6B:2F:BF:C4:28:18:66:2A
Certificate issuer: /CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Certificate serial: 01821A62DDC9CBC7964171CF4A1DAC8D2855
Authority key identifier: 2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/LVuTAem7uJNZgdmAay-_xCgYZio.roa
Signing time: Wed 20 Jul 2022 06:54:23 +0000
ROA not before: Wed 20 Jul 2022 06:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199268
IP address blocks: 2001:67c:1328::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:62:dd:c9:cb:c7:96:41:71:cf:4a:1d:ac:8d:28:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Validity
Not Before: Jul 20 06:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d5b9301e9bbb8935981d9806b2fbfc42818662a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:27:82:71:88:e5:7a:59:a2:13:ee:19:c1:
24:4f:b5:1b:e7:5e:2e:d0:6b:f3:38:a8:89:49:6d:
88:2e:cc:10:f3:b3:35:94:d2:b8:cc:42:4c:aa:46:
78:c2:48:c0:2e:19:5e:c1:86:0e:86:70:cc:17:0d:
05:b8:fa:ca:a5:a7:06:3d:da:dc:07:36:de:9e:41:
0c:1e:0c:82:18:cf:21:5d:0e:c0:db:6c:37:60:23:
8b:ab:0e:43:e5:25:d2:f7:6f:38:bb:a5:c3:25:d1:
44:9b:62:86:22:c7:4d:76:24:65:72:e6:9b:be:8c:
06:e2:83:99:92:b3:ea:99:91:b8:3f:65:1f:9d:7e:
d9:0d:67:7f:56:37:21:ac:dd:eb:4c:c1:f2:a4:da:
2d:23:7f:b2:63:0c:4a:39:f5:ae:76:80:d2:b2:a5:
a9:7b:da:be:e4:c8:f4:80:36:9e:d9:00:db:fd:46:
69:05:e2:80:4c:ac:fc:aa:f2:af:58:e2:e9:0d:96:
dd:a8:b2:8f:1d:60:26:ab:7a:8d:97:d5:ab:8a:21:
37:31:19:d4:01:0e:97:6f:a1:e0:fb:fb:f9:14:65:
ab:7a:a9:91:b5:e0:00:2f:93:4c:98:bc:0d:b2:00:
5a:9c:05:ce:af:47:9f:9a:15:ed:ff:50:e3:21:83:
c5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5B:93:01:E9:BB:B8:93:59:81:D9:80:6B:2F:BF:C4:28:18:66:2A
X509v3 Authority Key Identifier:
keyid:2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/LVuTAem7uJNZgdmAay-_xCgYZio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1328::/48
Signature Algorithm: sha256WithRSAEncryption
1b:9a:53:f0:31:ea:68:c9:71:b4:ff:a4:7f:00:30:f7:6a:51:
80:0d:ba:e9:27:10:32:a0:03:50:36:75:5e:68:df:a3:5e:2e:
46:12:da:47:fc:a7:f4:43:d7:74:2a:5e:7b:af:e9:81:36:ec:
59:3c:c8:e3:73:3e:95:c4:3a:ab:d3:ae:d0:ea:44:df:f6:32:
f7:12:23:f5:b8:c2:9a:ef:b9:d8:43:e7:ac:fe:33:bd:09:db:
1e:b5:de:23:48:8d:28:67:a8:f5:50:e6:9c:74:bf:24:62:9d:
bd:b1:71:18:82:ff:ba:cc:ea:5f:f9:80:58:24:95:98:6f:3e:
86:c5:f3:b8:02:88:25:e0:26:3f:18:d1:ab:f7:1b:b9:61:ca:
23:35:c9:63:55:ae:65:af:83:95:24:1b:4d:ae:49:d4:26:58:
e9:b6:f7:0e:ea:c3:04:49:cf:9e:81:f6:32:0f:38:9f:40:ec:
77:40:85:a6:73:a7:07:39:d4:f4:08:4a:1b:7f:32:b4:be:55:
f0:d5:37:0c:19:33:39:78:15:ba:61:36:ae:4a:bc:d5:7a:be:
f5:c5:71:83:54:5c:f0:ae:cd:2e:e2:25:e8:a8:51:be:49:cb:
ac:99:99:6d:4e:dc:ca:83:d8:96:8a:de:a0:b3:30:71:ec:6c:
50:e8:a4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:37 2024 by rpki-client on console-fra.rpki-client.org