Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/PQDsU9HefEDAppBQtoSnYQIatg0.roa
File: PQDsU9HefEDAppBQtoSnYQIatg0.roa (raw, json)
Hash identifier: J+9W0f5KZF0tjhuWMLNjOI6RlWmIWSRm23/jXrSu/gA=
Subject key identifier: 3D:00:EC:53:D1:DE:7C:40:C0:A6:90:50:B6:84:A7:61:02:1A:B6:0D
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 43397511
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/PQDsU9HefEDAppBQtoSnYQIatg0.roa
Signing time: Sat 01 Jan 2022 07:59:48 +0000
ROA not before: Sat 01 Jan 2022 07:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5541
IP address blocks: 2a03:f80:40::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1127838993 (0x43397511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 1 07:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d00ec53d1de7c40c0a69050b684a761021ab60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:06:5e:c2:f7:ac:85:71:c3:0a:3c:0f:ff:
1a:67:d8:20:66:3f:3f:c2:2c:fc:5a:81:c4:07:cf:
20:03:b7:e3:7c:86:51:14:ba:5b:5d:77:ee:eb:2b:
42:a5:81:6b:d3:73:91:c5:e0:62:e7:c5:54:6d:43:
de:83:11:2d:ed:6a:cc:ab:db:8b:ad:27:c0:79:0e:
a7:9f:b2:94:fd:08:a4:7d:b7:d1:dd:d4:aa:d7:35:
8c:75:5b:4d:1a:10:2c:54:44:45:1a:6e:ff:60:64:
00:6d:bd:70:74:45:57:2d:70:3f:8c:a5:8d:fd:38:
26:de:0f:92:a4:e6:be:52:f1:ac:8d:3d:2f:27:9a:
e0:48:f9:85:56:fd:13:36:62:0e:2c:8c:ed:6e:81:
f4:96:59:46:d3:80:c9:14:f2:94:c9:53:2f:76:0a:
9f:81:e5:4c:0a:43:51:3c:73:a6:3d:bc:7a:b8:8d:
9f:7d:77:4a:c6:7e:05:8f:78:0a:cc:24:19:72:dd:
3f:02:3c:6a:f6:5d:da:c2:f5:c3:d1:6f:bd:95:7e:
a4:e0:ee:3d:2c:50:26:de:d9:05:4a:d9:32:77:18:
14:85:17:64:0d:52:6b:8a:3c:48:eb:d8:ee:05:87:
e5:6a:3c:8d:5a:bc:15:45:d7:40:9f:9d:bb:91:ca:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:00:EC:53:D1:DE:7C:40:C0:A6:90:50:B6:84:A7:61:02:1A:B6:0D
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/PQDsU9HefEDAppBQtoSnYQIatg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f80:40::/48
Signature Algorithm: sha256WithRSAEncryption
68:f1:7c:d7:93:45:20:fc:d7:40:b6:f3:d3:9a:cd:e6:43:06:
d8:96:42:80:13:1e:bc:2d:86:cc:74:8a:a1:ad:e2:a1:c8:06:
c6:75:4e:80:2d:6f:35:c1:1e:c4:37:37:bf:f7:69:23:33:ac:
b1:b0:b5:be:5a:0c:95:b0:f8:39:f7:0f:46:68:3e:f7:e1:42:
b6:4d:7a:65:ee:5d:80:fd:4d:85:29:d2:eb:85:5b:f2:0a:5b:
37:e1:c6:4a:15:72:60:16:53:1c:38:6a:02:39:87:82:c2:96:
4b:f7:b6:85:f1:81:31:a7:be:77:10:ab:9b:38:91:12:91:e1:
b6:c9:39:89:a8:73:e9:5c:41:59:17:67:89:76:49:70:34:37:
0f:bb:85:0b:90:ad:ec:60:7c:48:35:57:3d:22:4b:a3:7f:03:
d1:41:d9:9f:26:94:97:8c:6b:8a:ba:ab:f6:35:a4:6c:5a:6c:
36:2e:a1:1a:bf:bf:e3:31:0c:b7:02:f3:65:1b:7d:f6:d0:d7:
77:a9:10:ef:3a:1e:75:64:09:be:e0:9d:65:d1:df:4c:1a:f9:
b5:f0:9d:e3:5d:16:61:90:2b:d8:4e:1f:52:ec:92:58:98:67:
af:5d:fd:4a:eb:bc:ca:a7:16:24:5a:56:49:f3:1f:ba:e2:58:
02:41:82:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:51 2024 by rpki-client on console-ams.rpki-client.org