Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/XUWIpofsak8AbFxsnpsCFZi6L_Q.roa
File: XUWIpofsak8AbFxsnpsCFZi6L_Q.roa (raw, json)
Hash identifier: kSbiZVUfzk4st81NKmaJRIPYJ6cxtlsPdiFCXBmdZ74=
Subject key identifier: 5D:45:88:A6:87:EC:6A:4F:00:6C:5C:6C:9E:9B:02:15:98:BA:2F:F4
Certificate issuer: /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial: 0EA5015D
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/XUWIpofsak8AbFxsnpsCFZi6L_Q.roa
Signing time: Wed 13 Apr 2022 11:58:34 +0000
ROA not before: Wed 13 Apr 2022 11:58:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211238
IP address blocks: 2a02:6ea0:1000::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245694813 (0xea5015d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Validity
Not Before: Apr 13 11:58:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d4588a687ec6a4f006c5c6c9e9b021598ba2ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:02:70:07:5c:74:df:19:01:2a:b4:0e:b2:
5b:81:ca:a6:46:6a:de:07:8b:d4:3c:cb:ca:cc:f4:
05:9d:0e:b0:37:79:ea:32:5f:66:1f:48:52:4f:9e:
b1:69:b6:c1:ca:da:e6:2a:2a:91:4c:09:b2:96:0a:
85:b8:79:97:d6:71:41:13:c8:3f:15:e9:e5:2f:2c:
77:eb:91:28:a1:36:98:f0:bc:2b:41:2a:85:d1:67:
2e:3c:e3:b3:10:e2:0e:b7:70:ab:6a:f3:59:33:19:
aa:12:cd:87:89:e6:f9:df:b2:4c:ec:49:4c:13:d5:
ec:ec:e6:91:72:d5:ee:ea:50:e3:7c:83:e2:49:b5:
90:7f:1e:eb:7f:a9:cf:af:97:44:42:d5:14:c6:45:
7f:86:1a:42:ef:df:f3:12:41:2c:8d:30:6b:82:4c:
fc:e1:69:05:dd:3f:7a:c7:b8:0a:7f:08:52:32:09:
e3:18:e4:9d:a0:be:3a:72:86:21:4b:8a:9c:11:57:
a7:d7:e1:9e:ba:b9:ea:c1:85:7c:3e:49:ca:c2:17:
7f:5c:da:b1:69:cd:1b:6c:8d:52:26:33:97:63:66:
74:fb:94:ee:45:cf:d2:13:45:03:41:78:eb:46:8d:
d5:aa:72:73:35:be:b0:5c:81:c0:40:27:14:7d:46:
30:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:45:88:A6:87:EC:6A:4F:00:6C:5C:6C:9E:9B:02:15:98:BA:2F:F4
X509v3 Authority Key Identifier:
keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/XUWIpofsak8AbFxsnpsCFZi6L_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6ea0:1000::/40
Signature Algorithm: sha256WithRSAEncryption
28:e1:42:da:bc:87:7d:2e:d4:ab:fe:f8:ca:18:ce:02:46:bc:
81:12:41:d3:70:52:35:ba:f5:4c:37:fe:97:4f:c1:e9:8a:14:
b7:dc:04:04:c6:40:e8:b6:d7:a7:45:3d:ad:6c:81:8b:ee:a0:
d5:a5:b9:01:a7:cc:2a:89:e5:d2:41:fa:48:11:2e:7b:69:a1:
02:56:32:b3:95:4d:56:18:46:ab:a2:67:a1:de:36:bc:b9:09:
e4:d9:b1:b9:e8:43:e4:18:56:58:9f:ce:11:79:f1:12:39:03:
cd:28:05:6c:af:48:4b:4d:90:64:c1:02:1f:85:b1:3a:44:cf:
4b:3f:02:85:86:5e:f3:42:5b:3c:8b:36:9c:d6:00:3b:e5:a5:
1a:89:ad:43:da:03:0b:d8:88:2b:1d:e1:b9:00:0c:5c:17:55:
70:d0:17:3e:18:35:bb:29:39:0a:61:1d:0c:a0:2a:e4:a5:3a:
94:ba:19:9e:73:cc:1e:16:75:62:60:ea:3c:5f:4d:4a:a3:2d:
c2:51:4a:99:5a:60:87:d4:0e:92:9b:24:4a:10:13:1b:e0:72:
29:a5:ed:b6:6c:9e:0b:69:57:23:e4:17:fa:ff:d9:b0:31:e3:
59:1f:57:17:27:60:ae:b5:40:78:73:bd:ac:45:66:a9:16:54:
e8:6d:b0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:05 2024 by rpki-client on console-ams.rpki-client.org