Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/LLdzi4iGc1hTsv5CxCD40uCKR7M.roa
File: LLdzi4iGc1hTsv5CxCD40uCKR7M.roa (raw, json)
Hash identifier: uda2noD4EMUCuF7peTMyI0iN+HuFjs/J452QV8sYw8k=
Subject key identifier: 2C:B7:73:8B:88:86:73:58:53:B2:FE:42:C4:20:F8:D2:E0:8A:47:B3
Certificate issuer: /CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Certificate serial: BCF2
Authority key identifier: 88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/LLdzi4iGc1hTsv5CxCD40uCKR7M.roa
Signing time: Tue 17 May 2022 07:58:22 +0000
ROA not before: Tue 17 May 2022 07:58:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51092
IP address blocks: 2a0c:7bc0::/32 maxlen: 32
2a0c:7bc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48370 (0xbcf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Validity
Not Before: May 17 07:58:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2cb7738b8886735853b2fe42c420f8d2e08a47b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:eb:bc:06:93:50:d0:9b:ed:fe:09:85:7c:04:
37:11:9f:c8:4a:0b:d2:e0:f0:cb:95:6b:60:22:62:
3e:f3:2e:69:d4:07:36:e7:1a:ff:67:7c:5b:c6:17:
6c:63:41:a3:f5:47:14:8b:70:89:7d:b3:b4:b7:97:
5f:4f:0c:ed:8a:0c:55:76:33:1b:17:df:2f:53:e7:
7d:5f:7e:31:29:7e:67:de:37:f8:35:50:d0:28:3e:
61:38:bb:a9:c9:91:f8:65:d1:8c:61:2e:de:63:e7:
e5:83:de:22:e8:9e:e5:ad:c5:80:68:5d:82:01:0b:
36:3b:6f:39:f3:70:b8:61:7e:56:5b:cc:9a:52:84:
46:d9:5b:10:d5:58:8f:9d:07:6b:96:9f:9e:2d:50:
2e:98:42:a8:bf:70:4e:47:78:cd:d8:fb:d6:0c:6c:
4e:ec:8a:30:8d:0f:bf:ce:bd:c7:f8:30:5e:e6:8e:
9f:50:a2:88:de:8e:2d:03:5c:cd:52:25:d1:57:5b:
eb:16:07:12:4f:07:96:d1:41:11:b0:99:39:c6:c1:
ac:8f:b6:55:28:44:c6:a3:1c:35:79:7e:4c:0e:c5:
bc:9d:0d:66:a5:29:7c:55:fa:3b:8b:c7:00:b6:23:
46:95:19:14:54:0f:f0:10:8e:c5:88:25:f5:01:c4:
ab:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B7:73:8B:88:86:73:58:53:B2:FE:42:C4:20:F8:D2:E0:8A:47:B3
X509v3 Authority Key Identifier:
keyid:88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/LLdzi4iGc1hTsv5CxCD40uCKR7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7bc0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:11:8a:e6:87:d0:ba:2e:a0:6d:b4:28:29:b1:a1:44:30:fc:
69:e9:80:27:16:bb:58:66:43:56:df:c9:d4:dc:65:b6:be:97:
c2:2c:27:0b:77:f6:b6:5e:ef:f0:67:88:5a:ae:29:05:cb:f3:
de:29:fd:25:04:8b:29:6d:4b:dc:6f:46:fe:40:0d:60:90:e8:
43:ef:ad:e2:ff:7c:95:95:ba:e5:25:78:5a:40:e2:90:ae:e3:
ee:e4:4f:ca:3b:2b:52:39:53:f8:e4:67:4d:a4:7b:2f:9e:1a:
19:f2:20:41:74:a0:be:d6:45:aa:b2:c3:f3:a4:f8:e9:d0:17:
dd:a0:56:94:20:97:97:72:0f:13:4d:89:e0:e6:ce:a9:5b:3e:
bc:99:1b:94:98:4d:9c:78:c5:a9:68:da:f3:5e:7e:9a:9f:1c:
30:12:11:19:32:a6:16:4c:78:ff:e9:c6:a8:65:2f:31:fc:af:
90:ba:dc:df:25:a6:9e:de:cc:a6:a8:69:29:46:cf:df:bc:73:
4d:e1:8c:ad:a1:f4:77:e1:99:50:b3:03:fb:76:e8:74:81:98:
63:39:f8:61:9b:7b:99:1f:1e:c3:35:22:50:20:1d:d8:ea:a2:
ef:b5:e2:db:92:97:33:cb:6c:04:8a:c3:2d:9a:8f:6f:d9:6e:
0a:27:c6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:29 2024 by rpki-client on console-fra.rpki-client.org