Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/CGKsl9xPA1vfmrzRUI0wgMpUKEA.roa
File: CGKsl9xPA1vfmrzRUI0wgMpUKEA.roa (raw, json)
Hash identifier: Yg9YNUUxSmi2W4Y1DX1fJlcxLSn7PEmq8KcXnLp2lrQ=
Subject key identifier: 08:62:AC:97:DC:4F:03:5B:DF:9A:BC:D1:50:8D:30:80:CA:54:28:40
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 06E21269
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/CGKsl9xPA1vfmrzRUI0wgMpUKEA.roa
Signing time: Sat 01 Jan 2022 09:01:21 +0000
ROA not before: Sat 01 Jan 2022 09:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28878
IP address blocks: 2a07:cb84::/32 maxlen: 32
2a07:cb82::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115479145 (0x6e21269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Jan 1 09:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0862ac97dc4f035bdf9abcd1508d3080ca542840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:0f:b2:2c:5b:25:92:9e:f8:ee:73:d1:f7:
f4:bf:93:dd:fc:f5:dc:ec:87:ac:e3:51:2e:17:27:
ff:5a:48:c8:b0:ad:51:de:f6:6b:96:81:32:65:25:
7e:72:ec:60:4c:a3:e4:59:36:d2:51:0a:8c:51:51:
0c:40:20:29:6f:7a:36:11:78:a6:86:35:2f:76:82:
b5:e4:a0:c9:f2:a9:d0:a5:cd:6d:ae:17:97:76:33:
9a:53:42:cc:54:18:84:de:32:f6:69:89:2b:29:1a:
7c:63:63:89:8f:be:dc:a9:12:35:73:75:12:7a:88:
ab:aa:3a:20:08:8f:e1:95:c1:51:e5:7f:8e:39:05:
98:3d:3a:49:43:83:d2:c4:ac:03:2e:0c:98:de:0e:
74:e6:d7:d3:9d:0b:ac:f3:04:6f:f3:4c:8d:27:85:
48:a4:42:36:43:10:10:e5:c0:28:f0:cd:2e:9f:6b:
4b:32:7e:b2:d4:4d:46:21:e6:e7:df:26:05:2d:47:
1b:90:6a:7d:cd:de:ab:af:15:9d:99:92:0d:f6:ea:
8c:85:9d:f7:7e:52:d7:00:7b:04:eb:3c:d3:17:a4:
4a:bb:31:ad:67:e5:f4:16:87:61:78:30:7d:c2:ff:
39:fa:dc:6f:6e:03:40:d0:84:18:35:ae:80:11:d7:
75:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:62:AC:97:DC:4F:03:5B:DF:9A:BC:D1:50:8D:30:80:CA:54:28:40
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/CGKsl9xPA1vfmrzRUI0wgMpUKEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:cb82::/32
2a07:cb84::/32
Signature Algorithm: sha256WithRSAEncryption
60:e1:8b:83:d2:bf:c0:48:64:78:d6:7f:0a:22:80:1f:90:e6:
0b:dd:18:7f:e5:f6:a8:01:84:6c:8c:03:3b:df:df:a4:e2:3c:
5a:27:ce:45:53:71:72:8a:0b:3d:71:41:c2:01:c8:08:f3:79:
87:d4:bd:d4:a3:4f:97:9b:b0:6f:3c:4e:5b:6a:be:c5:16:eb:
ed:e9:f5:a7:72:a4:62:06:3d:9b:98:28:58:d5:ff:7d:00:27:
b0:96:f4:56:18:c5:99:1c:34:e5:bb:12:15:06:88:7d:0f:a6:
16:05:75:d1:a3:98:98:e0:7c:9d:db:93:8b:db:a5:62:e3:6c:
b5:27:e7:b4:d7:cf:b3:48:c8:3b:be:d3:22:39:9b:be:63:67:
1c:5f:3a:da:52:cf:10:7f:3b:77:38:d7:11:ed:ad:7c:04:df:
9f:74:0d:9c:11:95:42:fe:82:d8:3a:60:c2:55:40:24:28:09:
0b:c6:c6:40:7f:63:b6:6a:c9:5a:eb:42:8f:06:ef:1e:6e:a9:
f6:74:b4:d3:61:35:df:27:b9:71:5a:93:8b:75:19:33:3d:ea:
fd:b4:d1:c8:14:3e:c1:15:0b:49:62:ab:14:9d:c9:64:1f:fe:
fd:f5:43:ed:9f:5e:d2:70:e5:dd:65:a2:6b:d3:d4:4d:3f:44:
9e:e8:1c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:23 2024 by rpki-client on console-ams.rpki-client.org