Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/ZGl4v4vT3VZQYUz6PePddnVyypQ.roa
File: ZGl4v4vT3VZQYUz6PePddnVyypQ.roa (raw, json)
Hash identifier: 4M0LoPMu41O9bebuoIJ6VMgx684qugrOvMq6W3rRMXU=
Subject key identifier: 64:69:78:BF:8B:D3:DD:56:50:61:4C:FA:3D:E3:DD:76:75:72:CA:94
Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial: 097D9D1E
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/ZGl4v4vT3VZQYUz6PePddnVyypQ.roa
Signing time: Sat 01 Jan 2022 07:03:52 +0000
ROA not before: Sat 01 Jan 2022 07:03:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41887
IP address blocks: 2a04:ab80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159227166 (0x97d9d1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Validity
Not Before: Jan 1 07:03:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=646978bf8bd3dd5650614cfa3de3dd767572ca94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:2c:de:e2:e7:73:86:05:2d:41:aa:86:34:
25:6e:23:c3:e5:7e:54:0d:6b:24:78:54:0a:32:a8:
98:16:aa:f2:5a:8f:07:37:ad:9a:ee:39:b5:b2:4b:
3d:96:8e:33:7c:8b:7e:7f:86:33:91:3f:1b:7f:e5:
e7:35:fc:25:ee:a0:bb:7c:f2:5d:bc:a4:08:45:8e:
74:95:f8:6d:d1:fb:dc:a8:ad:1e:57:47:c3:39:9a:
a1:ca:12:65:cd:8a:8a:21:d7:7c:b2:17:b3:15:2d:
d3:1b:3b:1c:69:99:95:64:d1:9a:24:97:b1:c7:3f:
32:b6:9e:78:b1:a9:d7:93:a2:d3:9d:ee:9c:d3:20:
ba:ea:d8:e6:4d:bd:ee:84:c5:30:eb:1d:d6:c7:90:
4e:6f:8c:df:6e:c1:cc:01:b1:37:13:16:43:47:ce:
34:3e:ae:95:2b:39:e9:ca:bd:55:81:40:3a:e4:98:
20:fd:f5:d8:1f:55:08:b3:0a:4c:9b:88:98:1a:53:
ec:c8:1c:d3:b0:17:76:e0:25:19:f3:7f:5c:47:c4:
73:55:c0:b2:24:7c:bd:36:cb:43:fe:43:31:1f:1d:
a7:07:f7:b1:4e:5f:5c:37:ea:fa:db:b8:f2:d0:22:
54:07:2f:46:95:35:9c:c8:a4:d5:20:2f:e8:aa:a8:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:69:78:BF:8B:D3:DD:56:50:61:4C:FA:3D:E3:DD:76:75:72:CA:94
X509v3 Authority Key Identifier:
keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/ZGl4v4vT3VZQYUz6PePddnVyypQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ab80::/29
Signature Algorithm: sha256WithRSAEncryption
22:cf:53:c1:f9:d8:cd:12:16:65:8d:bf:0e:89:ec:37:1b:6d:
4c:e0:cd:2a:66:5c:d3:86:ad:34:dd:4f:fd:83:e0:e9:1e:fb:
d9:b3:73:17:4b:78:f2:42:e6:c2:e6:53:d7:c3:78:fb:ce:26:
f8:9d:a5:d9:18:4b:e4:0d:73:4c:5f:1c:3b:57:95:db:76:6b:
d3:4a:61:84:39:ae:bc:fa:83:69:64:2b:cc:7e:71:ee:54:ec:
ef:76:d5:fb:b4:c4:c1:85:d3:bd:a0:e6:2e:fe:3e:5d:77:c5:
b6:f1:8b:70:59:2b:bf:df:11:cc:0f:85:95:8b:71:3a:20:5e:
db:79:8e:3d:71:78:ec:00:8b:0e:12:9f:8a:04:b2:d8:b7:5e:
6c:3d:07:ea:47:fa:dd:df:99:30:2d:1f:68:35:ad:c3:fe:90:
46:77:91:cf:e0:c7:69:e2:14:df:64:ae:28:3e:0a:ea:15:89:
92:bd:ef:7c:13:c6:df:1a:45:77:aa:05:87:3b:2a:fa:56:91:
e2:b1:00:03:30:f2:8a:27:bc:5f:b2:6f:d8:0d:f7:fa:7b:92:
c1:9a:9a:6f:b5:2b:aa:7a:b5:09:a0:d2:c2:fd:9a:da:73:23:
a3:91:62:da:a3:41:20:f5:23:df:1e:25:14:a6:c4:66:98:df:
d0:0f:f7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org