Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/x2rXyjr6ywoeXUX-LEgLJ3cxsrA.roa
File: x2rXyjr6ywoeXUX-LEgLJ3cxsrA.roa (raw, json)
Hash identifier: x1MKTCyRRDZQgHPUlJPve719H1G6aSo2alrsT+69Pq4=
Subject key identifier: C7:6A:D7:CA:3A:FA:CB:0A:1E:5D:45:FE:2C:48:0B:27:77:31:B2:B0
Certificate issuer: /CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Certificate serial: 118645E0
Authority key identifier: 73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/x2rXyjr6ywoeXUX-LEgLJ3cxsrA.roa
Signing time: Sat 01 Jan 2022 11:04:04 +0000
ROA not before: Sat 01 Jan 2022 11:04:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39765
IP address blocks: 2a0b:b600:3c02::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294012384 (0x118645e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Validity
Not Before: Jan 1 11:04:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c76ad7ca3afacb0a1e5d45fe2c480b277731b2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:d4:3d:df:ba:65:4f:08:75:f7:a7:9d:a8:
79:3e:cc:74:4c:5c:98:a8:b7:e5:46:d6:a5:1b:68:
31:cb:76:78:ae:96:e0:3d:30:02:94:e7:be:d2:2d:
37:a3:ae:04:b0:ba:50:6c:d5:5d:93:ce:e2:56:94:
c6:b5:92:42:10:ed:90:cb:37:e7:e0:45:18:23:71:
16:a9:d7:34:fe:6d:e6:af:85:43:ad:52:dc:27:d9:
71:36:04:a8:22:ef:81:d8:7b:f9:48:f7:3a:57:00:
6d:7f:7a:e7:5b:9d:46:50:e8:d2:aa:81:d6:6e:df:
4e:ce:91:24:f2:b3:64:20:90:69:b1:be:e0:22:9a:
84:61:a3:dd:06:d5:13:6b:16:27:30:35:f0:86:4d:
f3:b9:aa:00:2e:ad:84:67:02:ec:20:b4:91:c7:10:
d5:b3:ac:03:b5:dc:dd:2d:ba:e1:92:10:3e:cf:30:
7d:a5:9a:a9:1e:36:bf:a6:b1:9f:f7:4c:95:58:a4:
eb:90:64:64:8b:d6:94:be:98:ea:1d:d3:cb:ed:09:
95:b3:cf:1f:52:80:ec:5c:8e:1e:4a:65:75:5b:ce:
dc:50:f3:3b:00:f8:27:dd:72:c8:f9:7e:7c:7f:dd:
d2:97:e3:cf:e3:0c:62:8f:f4:9e:2a:af:73:96:2f:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6A:D7:CA:3A:FA:CB:0A:1E:5D:45:FE:2C:48:0B:27:77:31:B2:B0
X509v3 Authority Key Identifier:
keyid:73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/x2rXyjr6ywoeXUX-LEgLJ3cxsrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b600:3c02::/48
Signature Algorithm: sha256WithRSAEncryption
66:c9:6f:94:90:1a:e3:70:a0:4a:a9:c7:0a:a9:70:85:27:0d:
64:98:30:d5:dd:e8:91:cb:9e:63:fc:1c:20:54:27:19:91:c7:
0a:9e:31:fa:98:0b:d1:30:5f:a9:15:31:60:1f:73:fd:53:0d:
fb:57:6c:95:1c:90:7d:b5:d0:fa:80:3a:2d:f3:03:0f:32:6a:
cc:1a:e3:3a:8e:dc:5f:17:c3:20:0e:1f:83:6d:ee:f7:68:d4:
fd:58:38:0a:e0:22:eb:72:33:89:a1:ac:14:cb:44:49:c1:4d:
6b:de:5c:b4:db:d6:52:db:bb:aa:c4:85:20:bd:70:e6:af:91:
5a:54:f5:13:a7:82:5a:f2:22:55:96:9c:f8:9a:81:58:c0:17:
35:9a:d8:29:19:0d:32:37:d4:d4:de:85:de:45:62:ae:e3:a5:
08:05:d5:59:3d:e0:f8:6d:c7:53:62:24:bb:8a:d2:a9:d9:2d:
e1:59:82:34:51:19:a1:af:d7:52:cf:f6:ac:c3:e6:2e:a8:7d:
0e:12:d2:b5:b6:b1:f4:57:b3:68:50:13:57:60:de:e4:71:61:
0e:c3:20:a4:f7:ad:00:5f:7c:b5:92:06:cf:e7:eb:93:c5:e8:
3e:7f:2b:eb:04:ae:c3:6b:69:da:5d:1d:92:aa:2c:29:4d:c8:
6e:b5:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:25 2024 by rpki-client on console-ams.rpki-client.org