Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1KDAyEAXJ_BBB1zSSWA5IwU6MhQ.roa
File: 1KDAyEAXJ_BBB1zSSWA5IwU6MhQ.roa (raw, json)
Hash identifier: QTWH/EqYpaxcIXIQgb4K210A3KAF6FQPKjju579C9W4=
Subject key identifier: D4:A0:C0:C8:40:17:27:F0:41:07:5C:D2:49:60:39:23:05:3A:32:14
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0185627DAF6F6359F81EF6E7F02D48F4CE23
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1KDAyEAXJ_BBB1zSSWA5IwU6MhQ.roa
Signing time: Fri 30 Dec 2022 10:04:41 +0000
ROA not before: Fri 30 Dec 2022 10:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212704
IP address blocks: 2a0c:9a40:8078::/45 maxlen: 48
2a0c:9a40:8070::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:7d:af:6f:63:59:f8:1e:f6:e7:f0:2d:48:f4:ce:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Dec 30 10:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4a0c0c8401727f041075cd249603923053a3214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1a:c9:61:1e:b6:b3:e7:5c:4f:5e:0f:b1:74:
a3:1d:20:5d:f4:32:84:67:00:63:fc:75:15:b0:c6:
db:33:2d:5d:80:df:44:3f:da:fc:70:6d:43:e6:e6:
d8:f9:22:d0:cb:b7:71:9d:96:46:9d:6b:e1:eb:d2:
36:7b:2d:da:43:9f:68:03:7b:b4:c5:36:35:4c:1f:
b4:85:d5:d5:20:64:78:dc:23:6c:72:2f:48:a7:94:
2e:1b:79:13:2a:d8:96:f3:37:54:9c:ca:53:9f:94:
1a:2b:3d:55:1f:ab:7f:9a:8d:4f:ba:45:cf:e1:e8:
4a:e1:9e:2d:84:a1:b4:6c:d9:6b:d1:d9:56:c0:15:
f1:0c:c7:ae:1d:b7:34:b8:9e:47:07:4c:92:00:a3:
f6:99:81:32:55:27:97:51:74:c4:e5:fd:95:a9:16:
ec:3c:5d:b9:31:0c:33:b2:22:0e:8c:5a:e2:3a:d7:
c7:af:35:da:aa:f3:e4:0d:2e:13:8e:28:ce:cc:60:
62:66:1c:64:0a:f0:1b:46:f8:ba:f8:52:c6:92:b7:
1a:a7:cc:09:45:33:a4:45:27:16:eb:4e:f1:f1:d7:
db:29:de:79:4c:d5:95:7e:ef:6d:98:0e:63:ef:27:
7c:7e:78:95:26:03:02:4b:7e:8a:d3:11:31:9b:88:
87:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A0:C0:C8:40:17:27:F0:41:07:5C:D2:49:60:39:23:05:3A:32:14
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1KDAyEAXJ_BBB1zSSWA5IwU6MhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8070::/44
Signature Algorithm: sha256WithRSAEncryption
8d:01:4b:5e:e7:bd:c4:56:3d:06:6c:b8:be:c7:9e:08:40:a9:
19:2a:b5:8a:59:4a:eb:15:8d:92:a2:4d:a6:97:62:cc:dd:1a:
79:ff:54:f0:63:f2:6f:98:3b:e4:5e:0a:64:9e:6b:95:4c:af:
03:e4:b5:f1:02:e2:b8:29:e5:51:bc:2a:ec:2b:5b:31:36:16:
ad:8b:e8:92:cd:02:65:6c:14:a8:ab:e9:44:f7:bf:97:0e:56:
63:55:31:f5:dd:a3:58:46:88:5b:ab:b8:1e:92:a7:33:d9:63:
3d:e6:1f:44:81:4a:9e:1a:82:90:b3:8e:b2:c3:48:5f:6b:97:
76:ca:3c:01:25:f0:2d:d9:45:1e:59:3b:17:09:f3:0b:f9:4c:
34:b9:c5:c8:a1:0b:fd:1a:92:10:4b:d1:d1:f3:5e:f2:56:38:
78:74:87:8a:d9:c6:82:a1:98:bc:f1:48:0f:ca:64:5f:12:1d:
df:df:35:a8:bf:34:8d:9e:d2:5f:2d:26:97:12:ad:fb:cb:bc:
b3:79:00:6b:59:c9:f1:0c:e6:aa:d0:df:e4:5d:87:4e:86:f0:
d3:06:6c:05:b9:00:a9:68:7a:c5:f5:98:73:ab:65:54:b5:6a:
ba:75:ed:fa:c8:75:c6:f3:63:4c:0b:bb:b2:ce:c5:f7:5a:9b:
cc:09:70:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:49 2024 by rpki-client on console-fra.rpki-client.org