Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/2fz0YEwdqDPDrm3mqdbZHhDOg3Y.roa
File: 2fz0YEwdqDPDrm3mqdbZHhDOg3Y.roa (raw, json)
Hash identifier: 3eKdIzxpqmebPf0Z9l6FbD6vKI9T16wpEvNbxUMLofM=
Subject key identifier: D9:FC:F4:60:4C:1D:A8:33:C3:AE:6D:E6:A9:D6:D9:1E:10:CE:83:76
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 16706CAD
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/2fz0YEwdqDPDrm3mqdbZHhDOg3Y.roa
Signing time: Sat 01 Jan 2022 10:56:38 +0000
ROA not before: Sat 01 Jan 2022 10:56:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44051
IP address blocks: 2a03:6fe0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376466605 (0x16706cad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Jan 1 10:56:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9fcf4604c1da833c3ae6de6a9d6d91e10ce8376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:cf:5d:52:1b:3c:db:a8:4a:a8:a5:e6:0d:
70:74:12:10:8f:94:df:21:77:3a:5e:da:20:4b:ea:
9f:97:bd:02:e0:dd:fd:93:bd:0f:d6:55:aa:d9:d7:
25:c2:89:47:cd:a8:49:1c:6b:a0:71:4d:58:12:cd:
47:2f:a9:a2:79:5b:8e:da:dc:a2:3f:a5:1f:6d:9a:
e7:ac:ac:54:76:37:52:ec:81:4d:90:94:0b:c0:27:
54:e0:b6:73:e4:65:c0:5d:ac:06:10:58:38:26:ce:
a1:2b:2b:e7:42:fb:5d:88:6f:9b:99:e4:9d:f2:f1:
51:4e:c0:e2:ed:08:05:2a:39:f2:5e:e3:2a:d9:31:
5b:4b:7e:4e:da:e0:d1:42:16:f4:76:aa:45:dd:05:
90:11:9d:f9:da:cb:43:d6:96:82:ad:f4:c9:e6:f9:
ee:f3:bb:f2:ad:01:2f:c7:de:45:45:a3:55:29:1f:
4b:da:71:91:2b:44:cc:90:53:3f:d1:b4:18:0a:29:
7f:ae:87:aa:c8:ab:9d:1e:b5:41:ff:ac:31:cb:08:
53:f8:cb:4b:44:d9:b8:d2:81:c8:db:9e:70:b0:2e:
d4:74:76:76:8b:5e:22:cb:3f:89:9a:8b:55:e0:40:
b7:3b:59:e5:4f:7a:52:a1:12:1e:1d:0e:ac:0c:9c:
44:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FC:F4:60:4C:1D:A8:33:C3:AE:6D:E6:A9:D6:D9:1E:10:CE:83:76
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/2fz0YEwdqDPDrm3mqdbZHhDOg3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:6fe0:1::/48
Signature Algorithm: sha256WithRSAEncryption
78:59:bf:56:f0:da:f2:c1:2e:72:36:36:8f:40:8b:8f:7f:b0:
4d:2a:d7:14:b5:99:e0:60:72:2f:7a:ba:c5:90:a5:9d:c5:3a:
bc:e1:23:57:02:41:5c:d3:ce:39:ff:0e:8b:2e:a8:92:37:2e:
1c:49:1f:e8:c9:34:4c:c5:f2:31:10:73:fa:5f:6c:a6:3c:65:
01:62:eb:45:67:be:68:de:12:a2:e9:d4:06:24:d9:d4:87:75:
e0:d0:20:93:a9:9e:d1:8c:f9:2b:9c:d8:f7:4c:6e:e4:af:42:
36:52:59:cb:bd:1d:6a:6e:a5:23:70:db:fa:07:9b:65:cd:9e:
1f:bc:8b:d1:be:62:d5:f4:c9:e2:68:96:21:e5:52:24:ff:9c:
93:e4:02:e8:61:62:32:45:b0:04:c3:25:e1:d7:69:32:e9:ea:
2a:7b:e0:eb:22:3c:a2:b9:ed:b6:56:13:71:ce:3a:dc:d4:7a:
ac:1e:ec:df:a5:25:43:0b:0c:e0:52:66:17:b7:79:fa:9d:92:
28:dc:6e:53:47:de:43:8b:42:7a:0a:19:09:15:fd:7b:da:11:
b9:da:ab:71:0e:4f:74:a7:55:96:64:ef:c9:30:8e:b5:3b:5b:
56:e4:db:6e:19:d0:22:a6:ad:23:d1:e8:f8:21:28:ad:99:d5:
9a:ef:3c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:41 2024 by rpki-client on console-fra.rpki-client.org