Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/_cA0dprPzTcNmTgCYiQri5tQtCI.roa
File: _cA0dprPzTcNmTgCYiQri5tQtCI.roa (raw, json)
Hash identifier: nVFW7ByPpD+4A0wqYeE9ph/iYeU5bxdMTB3ZH7B3ImI=
Subject key identifier: FD:C0:34:76:9A:CF:CD:37:0D:99:38:02:62:24:2B:8B:9B:50:B4:22
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 1138A082
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/_cA0dprPzTcNmTgCYiQri5tQtCI.roa
Signing time: Sat 01 Jan 2022 14:58:36 +0000
ROA not before: Sat 01 Jan 2022 14:58:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211675
IP address blocks: 2a0d:da06::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288923778 (0x1138a082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Jan 1 14:58:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdc034769acfcd370d99380262242b8b9b50b422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e6:95:fe:47:1c:22:13:0c:90:ad:74:a3:24:
e4:54:44:1c:44:b3:a7:1c:fb:37:64:72:ad:56:dd:
10:c0:a5:21:fd:37:d3:2e:31:00:7e:a3:48:b9:99:
e3:a7:dd:d5:bf:32:49:aa:41:ab:1b:87:27:00:a1:
2d:e5:a2:eb:ad:cb:d5:3a:83:48:f4:61:ca:4c:2b:
3d:6e:e3:23:ab:4b:db:db:ed:11:a2:52:dc:48:68:
fb:77:ea:5b:80:3f:c7:10:f0:e6:5b:db:bd:0c:05:
81:a8:03:cf:5f:c6:4a:9c:86:e3:1b:0a:85:34:42:
d0:a8:fa:01:97:67:e7:32:ed:b8:ff:9b:d6:fe:9c:
d3:fe:21:9a:f3:58:aa:33:20:18:97:9c:49:f6:2b:
03:a5:64:4e:9b:c4:7d:f5:20:20:54:bf:52:23:11:
bb:e1:7e:03:28:77:97:26:fe:ef:46:17:57:9a:7c:
90:35:a8:a6:fa:8d:ae:51:d1:1d:d8:ca:f0:b4:b0:
68:2b:45:2b:8e:ae:3f:88:e8:20:22:f7:2f:eb:8e:
52:f6:61:d2:9a:ae:ef:64:b4:c2:7d:79:2b:19:02:
67:e3:5e:55:b6:4c:e1:ad:a8:b4:78:c4:ad:90:2f:
49:53:8c:fc:dc:83:91:8b:cc:03:cf:21:c9:64:ae:
f5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C0:34:76:9A:CF:CD:37:0D:99:38:02:62:24:2B:8B:9B:50:B4:22
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/_cA0dprPzTcNmTgCYiQri5tQtCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:da06::/32
Signature Algorithm: sha256WithRSAEncryption
81:ea:c2:9f:eb:48:93:0f:20:a1:93:2a:17:0c:cd:df:4f:26:
f5:d8:b5:29:ff:05:69:83:7c:7f:9e:c4:c1:66:ea:69:b9:50:
99:43:b9:46:22:73:12:7a:01:84:c2:67:c1:aa:a4:44:3a:44:
5b:df:ca:fb:91:ff:4b:06:bc:58:0a:63:25:46:ba:1d:9a:ee:
c7:c5:9c:80:45:a9:99:5f:44:8e:81:36:9e:f9:73:25:e4:95:
d1:5e:4f:6d:d7:14:28:8a:cd:b8:d3:17:53:50:6c:87:b7:89:
fc:31:11:0f:68:1c:63:15:10:bf:21:1f:3b:6a:0e:2c:1f:c5:
3b:29:20:6f:57:60:5d:11:28:61:d6:ca:c2:75:4b:55:36:df:
90:4d:25:38:3f:95:7b:fc:11:44:64:44:42:2e:a0:79:53:b7:
48:6a:4a:9b:de:66:c1:b3:c6:91:2e:07:07:9a:07:18:56:e6:
1f:ce:31:a1:b5:93:68:e8:06:c0:cc:da:ca:9d:4b:07:8c:01:
e2:70:c8:89:8d:57:2d:59:6b:a0:49:85:9b:73:09:21:6b:a8:
d1:0a:90:81:87:ec:46:9e:e0:29:51:77:92:d5:13:61:7b:1a:
ff:75:35:17:bd:b0:8b:85:6e:6a:4d:58:a3:50:48:66:b1:51:
dc:6b:10:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:17 2024 by rpki-client on console-ams.rpki-client.org