Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/ALioulFBJdGUMIWzLL7EX5yQyAk.roa
File: ALioulFBJdGUMIWzLL7EX5yQyAk.roa (raw, json)
Hash identifier: 17bfDRm63b4aPLH3M09yP5bxHA5iyh/2mPNwlMWKgYM=
Subject key identifier: 00:B8:A8:BA:51:41:25:D1:94:30:85:B3:2C:BE:C4:5F:9C:90:C8:09
Certificate issuer: /CN=aa85c67f22309e0d84c30b542529725328605151
Certificate serial: 012B67
Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/ALioulFBJdGUMIWzLL7EX5yQyAk.roa
Signing time: Tue 31 May 2022 10:36:24 +0000
ROA not before: Tue 31 May 2022 10:36:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204882
IP address blocks: 2001:678:a68::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76647 (0x12b67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85c67f22309e0d84c30b542529725328605151
Validity
Not Before: May 31 10:36:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00b8a8ba514125d1943085b32cbec45f9c90c809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:a3:d2:0d:cc:80:99:bd:e8:82:40:32:85:
28:58:ea:52:eb:12:23:7f:fa:51:96:f1:38:14:54:
95:82:b5:9f:24:04:54:da:7d:68:35:4a:eb:d0:a9:
53:96:2e:f3:ca:09:0c:f8:08:e3:40:3d:55:43:37:
cc:f7:07:ab:9a:a9:58:4f:39:c3:35:c9:83:2a:d0:
dc:1f:84:f2:ab:5b:e9:1f:cb:4e:88:d7:55:c0:58:
25:8a:02:45:1e:64:18:f2:3f:48:b0:40:88:4b:ee:
59:d8:80:96:cd:7b:73:4a:8e:21:ca:a8:ff:37:54:
bb:68:90:5d:52:25:f9:d3:ee:15:76:2a:a7:40:21:
58:0c:b7:dd:18:d4:03:df:6b:d9:9c:6c:4c:17:25:
5f:44:3d:21:b5:70:8a:4a:75:c5:32:af:3b:92:9c:
68:fd:cc:9d:b0:28:0b:04:20:01:25:ed:f4:9e:f3:
8f:7d:64:71:fc:52:54:ab:c2:9c:ca:db:bf:5b:57:
9e:b5:49:0d:e6:2a:bb:02:9d:2d:95:3f:e2:00:8c:
d9:2e:30:68:0e:5b:5e:c3:de:b0:9b:51:3c:33:d6:
3b:9d:a5:e0:76:65:7a:46:7a:62:9b:75:a5:75:99:
a4:75:39:f9:be:56:5d:31:c2:70:6f:a5:6d:2e:fa:
a2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B8:A8:BA:51:41:25:D1:94:30:85:B3:2C:BE:C4:5F:9C:90:C8:09
X509v3 Authority Key Identifier:
keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/ALioulFBJdGUMIWzLL7EX5yQyAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a68::/48
Signature Algorithm: sha256WithRSAEncryption
5d:a3:53:97:0f:d4:f1:d7:24:63:3f:de:7f:30:a6:08:e2:b8:
46:4d:2d:3b:03:48:ac:e0:07:d0:68:b2:6e:07:ff:6a:a0:07:
b7:1c:13:6a:3b:87:3d:33:5e:c6:49:6a:a3:92:85:24:69:8f:
42:ac:c0:f9:4a:7a:7c:a3:1e:83:68:7d:49:92:dc:10:cb:99:
23:4b:4b:4e:c4:46:02:12:08:85:34:11:a8:a9:5b:a5:98:c2:
c7:c7:9d:53:a0:f2:93:6c:70:16:b5:10:58:ff:18:11:2b:21:
e6:fe:d7:64:55:5f:cc:6d:27:09:d9:68:6e:e4:4e:6e:c9:cd:
18:43:47:b7:d0:1d:46:1c:2c:7a:61:dd:18:61:d8:fa:51:d9:
9e:56:71:8b:45:bf:a5:0e:1b:8d:cf:3d:5c:cb:d5:e7:a2:7f:
47:d5:e6:72:a3:44:d4:b4:7e:05:ff:31:20:6a:8b:55:a6:2e:
c4:4f:9e:ce:60:e7:99:5c:79:4f:26:ee:f3:7c:0f:bc:ed:14:
a9:2c:96:e8:6a:7e:76:14:90:aa:2f:68:d1:09:29:d3:de:68:
4f:2a:0c:18:3d:05:b3:89:5a:1d:8f:87:bc:3b:84:ab:0f:c9:
c3:93:0c:44:5a:32:f8:7d:6a:29:17:87:28:c4:a0:8e:4a:ea:
2f:08:45:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:14 2024 by rpki-client on console-ams.rpki-client.org