Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bk2SP_8dfuOlndbbYTzbGsBN5_s.roa
File: bk2SP_8dfuOlndbbYTzbGsBN5_s.roa (raw, json)
Hash identifier: 24u+iXtpxF394uz147zh8VI4BybV4/u29af67+gdhbo=
Subject key identifier: 6E:4D:92:3F:FF:1D:7E:E3:A5:9D:D6:DB:61:3C:DB:1A:C0:4D:E7:FB
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0BDD6D8C
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bk2SP_8dfuOlndbbYTzbGsBN5_s.roa
Signing time: Sat 01 Jan 2022 12:54:58 +0000
ROA not before: Sat 01 Jan 2022 12:54:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 2a0c:9a44:cf::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199060876 (0xbdd6d8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 12:54:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e4d923fff1d7ee3a59dd6db613cdb1ac04de7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:a4:06:db:df:7d:02:8e:12:2d:0b:d0:a4:
cc:09:5d:97:f2:c6:9d:a8:ed:ea:10:9c:a8:47:f9:
d6:60:13:5e:ec:5e:dd:30:72:32:1a:c1:69:68:a4:
52:6c:bb:76:70:48:89:d6:49:06:43:71:9d:e4:63:
c4:c9:1c:5b:0e:32:08:d3:af:44:b8:f8:fc:5b:8c:
ad:5d:c0:e7:fc:d7:71:c4:41:e4:4d:74:4a:bb:09:
2a:83:7a:39:0f:38:ee:e0:78:40:fe:75:c4:63:c7:
7c:4f:e9:be:78:ab:53:be:32:85:e6:36:6b:c5:53:
db:f5:f5:22:35:17:be:ed:cb:8f:a7:66:09:89:db:
b2:a3:f1:d8:f2:62:c5:82:92:e8:09:e3:39:90:37:
f5:23:de:ec:bf:40:f5:3a:12:1e:0a:26:c9:9f:20:
00:9a:62:46:29:3d:02:e0:1e:02:e7:2e:a7:97:0c:
61:21:ae:86:a1:63:7a:6d:ab:fa:8c:53:4d:9e:28:
af:2f:54:56:07:82:2c:ee:32:32:35:ba:1d:da:e1:
df:35:e3:05:cd:ea:94:03:2a:ed:d4:e2:b4:cb:39:
79:81:91:bd:61:8c:13:ee:f2:04:1e:bf:bb:da:98:
e3:e3:2b:35:f1:a9:25:6f:70:62:10:b1:ff:e9:28:
e9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4D:92:3F:FF:1D:7E:E3:A5:9D:D6:DB:61:3C:DB:1A:C0:4D:E7:FB
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bk2SP_8dfuOlndbbYTzbGsBN5_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a44:cf::/48
Signature Algorithm: sha256WithRSAEncryption
35:5c:98:c0:49:90:af:dc:70:74:7d:52:11:a1:17:3f:1a:f8:
70:c2:63:90:e2:48:79:fa:29:e2:ba:89:20:74:4e:30:29:1d:
bd:45:27:56:8c:a1:ce:8b:63:d4:da:6a:5c:ff:fc:53:fa:f1:
5c:f6:07:1f:68:6d:ea:ea:1b:91:3a:ad:5b:45:c9:cc:35:21:
23:9b:03:a5:ef:f1:5f:4b:89:c8:f1:92:2e:5c:9e:42:f3:20:
83:ec:41:c4:b7:7f:3b:25:a7:b5:64:1b:c7:e6:5f:e2:45:51:
c2:2a:a7:94:d3:a9:50:f8:27:b6:bf:41:e1:d6:97:25:12:86:
45:6a:26:68:0c:69:4f:3f:86:63:8a:92:2a:04:98:4f:8d:1c:
82:2a:35:94:94:5c:e0:a5:73:9d:01:61:ab:37:28:cb:49:c6:
ff:5b:b9:46:1f:14:80:d5:ad:6b:7f:eb:f1:e2:58:c2:fd:30:
71:fb:e0:2b:99:b8:db:87:5d:be:d0:a9:e2:53:bf:51:81:41:
8d:07:cd:75:b3:12:e7:b1:84:ac:af:3a:e6:03:70:6f:1f:f5:
a8:12:c8:f9:24:bf:db:f1:38:96:c0:5b:59:c0:b2:c8:44:c4:
77:3f:23:8f:dd:e6:19:91:cc:0a:cc:30:3d:c1:d2:65:86:70:
ab:e0:d5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:50 2024 by rpki-client on console-fra.rpki-client.org