Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/_wjcXJLWqPhVDQb3og4k5zs4yCw.roa
File: _wjcXJLWqPhVDQb3og4k5zs4yCw.roa (raw, json)
Hash identifier: W+80FU3zaWBKg+3o/yUvMypLsAcA0FwWkykjvi0f2FQ=
Subject key identifier: FF:08:DC:5C:92:D6:A8:F8:55:0D:06:F7:A2:0E:24:E7:3B:38:C8:2C
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 434E2CD8
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/_wjcXJLWqPhVDQb3og4k5zs4yCw.roa
Signing time: Sat 01 Jan 2022 07:59:59 +0000
ROA not before: Sat 01 Jan 2022 07:59:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56630
IP address blocks: 2a03:f80:370::/48 maxlen: 48
2a03:f80:70::/48 maxlen: 48
2a03:f80:3991::/48 maxlen: 48
2a03:f80:359::/48 maxlen: 48
2a03:f80:371::/48 maxlen: 48
2a03:f80:7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129196760 (0x434e2cd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 1 07:59:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff08dc5c92d6a8f8550d06f7a20e24e73b38c82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:07:0f:59:41:c9:32:5c:a3:73:6d:28:c8:
e4:70:59:da:a0:0a:aa:e7:3a:d5:a0:b2:87:07:07:
24:51:b8:fb:ed:da:45:79:c2:c0:b0:16:71:02:9c:
48:5d:99:d8:c2:d5:0a:4b:a3:89:c4:10:b7:76:a7:
6f:bc:2e:3d:80:f1:b4:8e:be:94:cf:4d:d7:d6:82:
8d:93:c5:37:05:9c:a2:0a:cb:eb:ef:4f:96:d0:06:
25:b0:1f:a1:f9:be:72:d4:80:dc:da:46:1e:3f:55:
2a:15:be:bb:4f:aa:9e:9b:35:13:eb:a6:df:51:8f:
44:ce:27:d8:98:73:78:33:cd:8f:45:ae:60:58:af:
07:6a:d2:b8:6b:56:51:cd:4d:49:ca:84:d2:6a:4e:
c3:26:b6:1b:71:19:ec:49:ab:cb:62:03:a4:e5:91:
eb:f2:7f:ff:da:7c:42:59:7d:59:7d:87:0e:d6:bb:
f7:81:54:1b:13:01:b0:55:e0:0f:9b:a0:db:b3:ff:
c8:0c:c4:97:6d:6f:e0:a2:bc:f8:26:6d:4c:18:b0:
8a:0e:b1:35:9c:37:fb:c0:c1:4c:9b:68:37:70:81:
78:97:2a:73:89:6b:92:fd:05:10:6e:08:74:39:c8:
1b:1c:a7:02:17:13:e1:9f:be:7b:46:c3:5d:a4:ef:
86:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:08:DC:5C:92:D6:A8:F8:55:0D:06:F7:A2:0E:24:E7:3B:38:C8:2C
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/_wjcXJLWqPhVDQb3og4k5zs4yCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f80:7::/48
2a03:f80:70::/48
2a03:f80:359::/48
2a03:f80:370::/47
2a03:f80:3991::/48
Signature Algorithm: sha256WithRSAEncryption
31:66:00:ed:db:04:a3:60:cf:99:71:cb:73:16:57:39:bf:23:
f4:38:23:b7:9c:ab:ed:f7:50:a0:f4:90:5c:fe:90:76:90:80:
53:b6:3d:63:f6:89:a3:41:3e:9a:e5:87:a3:b3:35:3e:35:9f:
ba:cc:ea:7f:1a:24:f9:ac:d0:b3:f3:c5:8e:0f:73:46:15:7d:
dc:cc:bb:e2:2c:9c:11:c2:9d:60:6c:7b:4b:6e:b0:b8:6e:27:
3f:41:23:6d:8d:f7:f2:ad:5e:e4:0c:9d:42:fe:a2:02:d5:af:
1d:f6:ea:a3:4f:bd:8a:10:1a:a3:9b:17:91:72:20:06:c4:c7:
26:73:f6:26:d8:56:a4:85:27:ee:ac:1a:23:56:4d:3f:37:67:
fe:f2:e2:df:e6:ec:2c:da:44:b8:4c:d3:6f:42:4a:c9:f5:e5:
ca:94:a8:de:4a:dd:2f:37:5b:14:22:07:00:cb:5d:b6:86:39:
41:83:2c:ed:2d:dd:f6:1e:c5:8d:11:31:5b:55:65:89:56:02:
a6:03:fd:1e:34:55:24:36:35:8a:65:cb:44:81:96:81:f9:b5:
ea:a2:d6:a0:6c:f5:ee:cc:dc:12:b4:98:d1:37:a5:f1:b6:33:
bd:81:6e:a7:2b:e4:ee:05:9c:12:70:4b:83:44:a1:c7:e6:e8:
ae:3f:c4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:09 2023 by rpki-client on console-fra.rpki-client.org