Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fZbuAG2FLjBaRyiAM_0oidqvgOs.roa
File: fZbuAG2FLjBaRyiAM_0oidqvgOs.roa (raw, json)
Hash identifier: lTy/9G443Im8gXrjXrvO2I9n1fzrGv4Gej4qK0ax3qU=
Subject key identifier: 7D:96:EE:00:6D:85:2E:30:5A:47:28:80:33:FD:28:89:DA:AF:80:EB
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 38B965E7
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fZbuAG2FLjBaRyiAM_0oidqvgOs.roa
Signing time: Tue 17 May 2022 05:30:27 +0000
ROA not before: Tue 17 May 2022 05:30:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198941
IP address blocks: 2a01:288:4008::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951674343 (0x38b965e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 17 05:30:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d96ee006d852e305a47288033fd2889daaf80eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d8:19:09:26:8b:b9:f9:ee:f4:67:ae:c7:7b:
0c:c4:07:34:cc:be:fc:94:bd:9b:22:d8:5a:ad:57:
55:3e:a7:13:fe:ed:8a:ac:4c:5e:72:06:65:55:d1:
1e:c4:91:1e:da:32:3c:cf:b2:d8:68:e2:cc:ac:a4:
4c:61:91:d7:af:9b:53:e5:c8:80:18:2e:1b:89:5b:
b0:19:63:ac:f8:5c:4f:26:67:d5:fb:fc:71:a6:d6:
75:23:db:f8:21:40:aa:6c:0a:6f:86:9f:60:b6:d4:
58:97:68:7e:f8:c7:f9:26:44:0e:78:61:c1:24:9a:
9c:c8:9f:f4:9b:14:55:a9:96:02:53:44:bd:f1:d0:
7e:05:9a:27:13:46:1c:57:85:63:4e:b8:8d:df:50:
84:cf:01:12:4c:4e:fe:4b:cc:76:fc:d0:e9:c4:96:
a9:94:98:38:89:d0:2f:87:98:60:2f:fa:ad:52:02:
d2:c5:90:4a:7c:73:b0:b3:b8:16:01:9e:b4:5e:82:
01:09:4f:6e:b4:a9:a9:19:02:29:ef:a3:6d:9b:07:
40:cb:d7:83:d4:b0:f1:b3:dd:8b:f7:ea:8f:6e:79:
3c:f1:09:52:ea:95:e2:27:d1:3f:b3:2a:3e:5c:bb:
9e:69:bb:e8:31:e8:cd:b3:a2:ff:93:7c:b9:6b:c7:
97:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:96:EE:00:6D:85:2E:30:5A:47:28:80:33:FD:28:89:DA:AF:80:EB
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/fZbuAG2FLjBaRyiAM_0oidqvgOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:288:4008::/48
Signature Algorithm: sha256WithRSAEncryption
2c:03:98:52:5d:b8:80:c1:1c:42:32:96:75:b1:aa:57:ce:db:
55:2a:40:94:55:f9:50:85:66:d9:f4:fb:b9:22:c8:41:b7:fd:
8f:ec:a7:88:00:3e:2e:4b:12:6a:77:7b:83:2b:87:59:f3:8f:
5b:16:32:c7:b2:e4:b2:bd:6e:9a:87:ab:9f:f5:f7:18:c6:d8:
15:f6:b0:53:e3:7f:4e:2f:7c:ee:cf:71:86:a0:6d:8c:67:c5:
ea:0c:15:5b:4e:0e:d4:72:e9:e5:12:36:d0:ee:1e:ca:32:c7:
ee:6b:5b:b2:bb:e3:ad:c9:4a:fb:14:f8:5e:34:28:64:2f:6e:
0e:23:50:1a:80:7e:c3:86:59:a5:54:49:c8:d2:6a:31:3d:9a:
73:6d:5f:2d:2a:98:a8:98:b0:aa:65:bc:c3:1f:81:b5:02:b2:
1d:3b:a3:59:0e:01:ba:f7:18:11:c4:95:c1:c7:0d:26:5b:f7:
5f:6c:dd:e2:52:ae:1d:0d:5a:74:76:76:94:71:24:87:7f:aa:
41:2a:34:82:f1:3d:7d:be:11:6c:95:77:66:53:9e:ca:3c:c8:
2d:f5:cb:fa:60:c1:ad:b2:e2:12:8d:62:a0:e1:28:0d:ac:4f:
86:fb:1b:6f:c7:bc:4d:c7:18:9c:00:3e:b9:f0:a1:a6:d3:4a:
69:ee:76:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:07 2024 by rpki-client on console-fra.rpki-client.org