Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/CyrlrLt_ihre0JDTsnsRcAfbMmo.roa
File: CyrlrLt_ihre0JDTsnsRcAfbMmo.roa (raw, json)
Hash identifier: WXPQaUHnNrl+v4u3Sj6LH6ZdFuUmwObwiU1qHwsrT1k=
Subject key identifier: 0B:2A:E5:AC:BB:7F:8A:1A:DE:D0:90:D3:B2:7B:11:70:07:DB:32:6A
Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial: 01824006CB7B99D02AF6B0D09EE96501E071
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/CyrlrLt_ihre0JDTsnsRcAfbMmo.roa
Signing time: Wed 27 Jul 2022 14:19:23 +0000
ROA not before: Wed 27 Jul 2022 14:19:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209861
IP address blocks: 2a0b:6647:b000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:40:06:cb:7b:99:d0:2a:f6:b0:d0:9e:e9:65:01:e0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
Validity
Not Before: Jul 27 14:19:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b2ae5acbb7f8a1aded090d3b27b117007db326a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:26:b3:3d:d0:5b:95:2f:3c:0d:98:ec:00:
d8:22:49:85:60:df:f4:f3:1c:f6:48:00:f4:39:b4:
28:75:0f:48:1a:c0:97:32:45:01:e8:66:05:db:8f:
5f:e5:1b:eb:15:e0:eb:9c:95:be:5c:ee:2b:0c:4b:
40:25:1b:be:74:90:9c:9e:ef:60:37:17:f5:7b:c6:
1f:21:77:b3:ce:60:d7:53:24:63:56:96:7c:f5:3e:
dd:06:b6:27:ea:cb:32:78:1c:c9:fb:53:3a:6b:17:
9f:9e:24:1d:0e:7f:6c:a5:0e:a8:35:82:ea:f1:1d:
99:bc:51:a4:7c:b0:77:20:95:ed:a7:48:fe:40:db:
66:f8:37:da:06:1b:fd:59:01:7f:c0:5a:0d:7c:d1:
54:aa:d4:64:e5:64:18:d3:6c:a4:20:64:4d:70:14:
6c:82:52:a2:d1:94:8e:cf:6e:ce:c3:57:3e:61:93:
fa:1e:f4:84:86:38:3d:fa:bd:f6:e9:a2:3e:14:3f:
28:9c:60:1f:63:99:68:54:7b:34:c1:4c:2f:b5:3a:
db:c5:7e:67:04:89:5d:b1:27:cf:26:8f:ad:eb:31:
4e:f3:d5:45:96:af:78:57:89:5f:72:19:94:e1:f9:
45:f5:21:be:62:10:ae:d5:40:6b:ba:90:3a:27:a0:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2A:E5:AC:BB:7F:8A:1A:DE:D0:90:D3:B2:7B:11:70:07:DB:32:6A
X509v3 Authority Key Identifier:
keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/CyrlrLt_ihre0JDTsnsRcAfbMmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6647:b000::/40
Signature Algorithm: sha256WithRSAEncryption
d3:ea:12:8b:b7:95:7d:6a:05:c8:52:d9:52:cf:33:36:2c:9d:
7e:c7:f5:c3:c5:55:eb:ea:51:f6:0b:d5:bc:b3:55:64:31:ab:
68:15:34:ee:dd:30:e1:10:28:15:8c:74:19:d1:48:df:62:3a:
17:64:b6:49:cf:0f:1d:6e:bf:b6:a9:c9:1f:10:3d:74:6e:a1:
c2:e1:61:8d:f8:9e:40:8a:b8:33:6f:f6:3d:58:e8:50:e9:97:
2c:14:74:0a:14:56:36:77:46:95:3b:e3:eb:2c:60:23:e6:43:
98:fd:0e:60:f4:af:cc:16:cc:df:f8:8a:07:2d:14:6a:b5:fa:
43:09:7a:cb:7b:07:e4:84:74:a4:3a:55:bf:24:ce:54:a2:ec:
fd:ea:9d:be:75:22:80:42:81:ae:c4:fc:d5:14:e7:9d:2e:48:
0a:7f:50:e4:58:ba:7e:25:51:4d:11:85:0c:e8:68:34:ee:3a:
6c:4e:0c:4c:d7:9e:45:8a:85:12:ed:e1:7a:e9:7d:df:e7:7d:
79:08:45:e5:2b:59:f3:2e:5e:59:e7:9b:2b:86:59:f3:07:ef:
04:92:d8:56:2b:c1:10:78:10:a5:81:b8:a9:2d:e5:09:1b:03:
d8:ea:d6:76:e2:a9:a9:8f:e4:d3:14:ba:00:50:70:f4:33:d3:
75:df:f2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:48 2024 by rpki-client on console-ams.rpki-client.org