Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/B3eor4OYBFWmpKcNzAjR_YrHjsw.roa
File: B3eor4OYBFWmpKcNzAjR_YrHjsw.roa (raw, json)
Hash identifier: LZ0hVxliGOC0rQvLuIcdiguJV57JkyLwEG1CZw1MyNw=
Subject key identifier: 07:77:A8:AF:83:98:04:55:A6:A4:A7:0D:CC:08:D1:FD:8A:C7:8E:CC
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0BE16A70
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/B3eor4OYBFWmpKcNzAjR_YrHjsw.roa
Signing time: Sat 01 Jan 2022 12:55:00 +0000
ROA not before: Sat 01 Jan 2022 12:55:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139311
IP address blocks: 2a0c:9a40:82e0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199322224 (0xbe16a70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 12:55:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0777a8af83980455a6a4a70dcc08d1fd8ac78ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:6b:dd:82:ad:d7:54:ac:71:7e:41:38:36:
5d:a1:de:5b:b5:b2:a7:7c:a4:79:52:c7:c3:1b:5d:
1b:d3:32:cd:20:d8:04:ca:e0:46:cb:c4:79:fd:ea:
95:a6:36:4a:b8:95:7b:41:31:de:78:3e:58:1b:6c:
02:66:bd:4c:9e:1c:6b:5b:f6:41:d7:15:00:b2:9f:
78:3a:7c:05:65:26:09:f8:7e:ed:8c:88:21:43:c0:
52:5f:75:14:fa:2e:15:d5:e9:5b:34:f4:57:2f:2f:
69:46:e7:d0:de:b6:d7:65:0b:0d:54:30:8c:b8:d6:
58:ed:71:9b:c8:02:57:f9:ba:a0:11:c6:54:55:e5:
0f:fe:36:aa:cf:82:94:d6:31:29:b6:5b:c4:43:9a:
53:b7:8a:27:7d:3b:bd:20:39:32:47:d4:d4:ca:ca:
52:46:14:73:53:eb:3f:33:2f:34:9f:50:28:67:7e:
b8:41:4d:0f:8a:bb:32:f8:b1:4d:7c:e9:76:ae:bb:
fa:2e:2c:c5:16:c2:8c:e0:65:de:16:d0:f4:2e:04:
06:5b:10:55:fe:c1:d0:ce:87:56:5e:44:3e:9b:9d:
0b:45:d0:d8:1d:cc:8b:a4:b6:7c:a3:95:28:09:5b:
fc:49:f1:21:df:66:63:06:1c:48:36:37:01:7e:f4:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:77:A8:AF:83:98:04:55:A6:A4:A7:0D:CC:08:D1:FD:8A:C7:8E:CC
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/B3eor4OYBFWmpKcNzAjR_YrHjsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:82e0::/44
Signature Algorithm: sha256WithRSAEncryption
3b:40:d3:ec:43:5b:de:6b:3d:04:27:7d:1c:93:8f:ea:96:6e:
b1:7e:90:78:41:64:4e:13:fc:6d:8c:e0:1e:23:ad:14:32:ae:
9e:e2:a5:e9:8e:6d:db:c9:19:2f:1d:8c:cc:d8:d4:6b:6e:28:
44:93:e3:2a:c6:2a:82:f9:4e:12:cb:89:8e:92:a0:c7:9f:42:
e7:44:7e:7a:00:b5:da:f5:fe:d6:6d:ed:7b:5a:9d:31:a3:9d:
37:af:70:e5:39:aa:8e:82:03:d2:48:9f:db:ed:85:e1:87:50:
ff:d1:a9:ba:90:9e:d4:85:2b:32:6b:11:b2:f0:f8:22:8b:fc:
86:bf:45:ce:85:b3:f0:84:d5:32:48:a9:aa:9b:9c:57:1b:80:
14:a8:89:44:d3:cf:7e:f2:1b:28:7f:7b:ad:db:45:22:f1:39:
41:2f:1f:70:d5:a7:30:01:3e:fd:6f:d5:ea:90:bf:af:2b:70:
23:9c:a5:55:c6:5a:36:5e:55:52:c4:a0:5f:95:3c:3f:13:4a:
f1:e5:c7:a9:4d:c1:16:70:10:37:58:7a:f8:51:77:7a:9d:2f:
e9:ba:0d:c1:d6:15:59:9f:ce:61:ae:1a:c4:3a:b9:1b:41:53:
25:10:81:6a:ca:21:7a:ee:89:0b:2c:9e:5e:bf:f8:cf:ea:cf:
6a:90:05:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:49 2024 by rpki-client on console-fra.rpki-client.org