Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/DPPfgU2y8EfF85tpBKT8zI6Czq8.roa
File: DPPfgU2y8EfF85tpBKT8zI6Czq8.roa (raw, json)
Hash identifier: E0T9oaexZgklf6/kSFjg65q+WkBZ8mHWysAiJ44EEQE=
Subject key identifier: 0C:F3:DF:81:4D:B2:F0:47:C5:F3:9B:69:04:A4:FC:CC:8E:82:CE:AF
Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial: 094B7903
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/DPPfgU2y8EfF85tpBKT8zI6Czq8.roa
Signing time: Sat 01 Jan 2022 13:56:31 +0000
ROA not before: Sat 01 Jan 2022 13:56:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133142
IP address blocks: 2a0b:1306:9::/48 maxlen: 48
2a0b:1302::/34 maxlen: 34
2a0b:1306:b::/48 maxlen: 48
2a0b:1302:4000::/48 maxlen: 48
2a0b:1306:400::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155941123 (0x94b7903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
Validity
Not Before: Jan 1 13:56:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cf3df814db2f047c5f39b6904a4fccc8e82ceaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:84:23:04:e1:73:41:d4:89:af:91:fa:df:bb:
aa:1c:d5:81:d7:01:3e:90:f4:a1:d3:a9:f9:69:2b:
0d:a4:76:99:3c:0e:ef:69:40:8f:91:9a:54:72:6a:
6a:55:65:ae:cf:f9:cd:c6:42:e6:36:65:48:83:98:
63:2e:b4:83:e6:ea:5f:44:c9:b3:6d:9e:d4:04:26:
bd:1a:4e:01:9d:6e:8a:9c:a7:9a:ae:cb:a9:a0:ef:
5e:59:91:29:06:65:35:93:94:81:75:ca:70:46:58:
42:54:5c:85:a7:03:f4:50:ad:20:6f:0d:0e:a2:b7:
b1:95:6b:90:c9:ab:8d:59:59:dd:e4:e6:a2:7c:3e:
4d:5d:ad:6a:60:eb:d9:7f:5b:06:07:50:b7:8a:32:
51:37:90:83:f2:bd:68:83:40:4b:6b:d1:ed:62:ed:
f2:ff:49:79:f4:45:98:97:0e:42:c0:cd:5f:05:7f:
c2:f5:02:a1:02:4d:e1:d5:80:d8:97:33:01:72:f8:
a4:33:fc:fd:c4:61:be:ea:04:95:a2:f0:ca:97:6c:
da:a9:62:c5:f8:8a:ca:88:d0:d1:8d:70:cc:e7:8c:
cf:9e:84:f6:79:77:2e:c2:a0:e7:96:1f:aa:1d:c9:
93:bf:93:da:e7:1b:5b:90:b6:db:8f:14:9c:94:70:
8e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F3:DF:81:4D:B2:F0:47:C5:F3:9B:69:04:A4:FC:CC:8E:82:CE:AF
X509v3 Authority Key Identifier:
keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/DPPfgU2y8EfF85tpBKT8zI6Czq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1302::-2a0b:1302:4000:ffff:ffff:ffff:ffff:ffff
2a0b:1306:9::/48
2a0b:1306:b::/48
2a0b:1306:400::/48
Signature Algorithm: sha256WithRSAEncryption
33:9f:3f:5b:a6:56:d4:39:6d:48:7a:a0:01:e2:34:9a:48:9f:
93:e2:75:1a:06:2d:f9:9b:62:a6:7c:4e:47:40:05:c1:14:a5:
e4:b3:72:62:45:b5:ce:8e:43:a6:f2:52:fd:c7:92:79:88:58:
19:19:6f:8e:4a:9c:0d:54:76:9c:48:c8:7f:4b:78:a1:02:7e:
99:c6:b7:57:ff:e8:2c:f9:6c:e1:8e:04:cc:21:5b:75:d6:f4:
d8:ad:4f:9e:b2:99:5d:21:d0:a0:96:97:62:7a:f5:36:30:d1:
0e:16:aa:91:2e:a1:73:d3:e5:22:99:61:3b:be:a7:30:e4:be:
93:39:5c:4e:0b:a7:3f:e9:5d:df:f1:f5:00:4a:20:3b:5a:54:
77:e9:3a:19:ba:fd:6e:1d:11:70:0d:d1:02:63:59:d8:7c:6d:
61:ca:aa:f9:cc:83:f3:81:c6:f3:71:57:6f:13:e9:ae:05:e4:
b9:d7:2b:98:d2:7c:49:07:58:59:93:8b:8f:57:5a:41:c6:a4:
f2:98:4d:07:09:f3:a4:c4:2d:81:b1:47:e7:ae:be:1c:41:6c:
2a:9b:58:96:99:da:44:63:f3:e0:10:e2:7e:12:11:55:fc:24:
73:b3:ab:ce:59:7a:fd:08:31:06:3a:6c:ec:d9:c1:53:f6:08:
a1:b8:5b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:26 2023 by rpki-client on console-fra.rpki-client.org