Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9d7141-60a4-42b6-92e7-c8b02f4b36ce/1/7YlYFdUC6RE0y6HoBcKFLbwgBFk.roa
File: 7YlYFdUC6RE0y6HoBcKFLbwgBFk.roa (raw, json)
Hash identifier: M/Emn5Apv41JmTjjk9cGWR8tr/kKrhHd1OBx8U+SSMw=
Subject key identifier: ED:89:58:15:D5:02:E9:11:34:CB:A1:E8:05:C2:85:2D:BC:20:04:59
Certificate issuer: /CN=c2fa527fa586cab2f56700cdce8d8f512c0f18a9
Certificate serial: 018336355C5F184DD24FFAF0AF0CEC115CD1
Authority key identifier: C2:FA:52:7F:A5:86:CA:B2:F5:67:00:CD:CE:8D:8F:51:2C:0F:18:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvpSf6WGyrL1ZwDNzo2PUSwPGKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9d7141-60a4-42b6-92e7-c8b02f4b36ce/1/7YlYFdUC6RE0y6HoBcKFLbwgBFk.roa
Signing time: Tue 13 Sep 2022 09:36:50 +0000
ROA not before: Tue 13 Sep 2022 09:36:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48635
IP address blocks: 2001:678:3a4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:36:35:5c:5f:18:4d:d2:4f:fa:f0:af:0c:ec:11:5c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fa527fa586cab2f56700cdce8d8f512c0f18a9
Validity
Not Before: Sep 13 09:36:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed895815d502e91134cba1e805c2852dbc200459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:44:fc:16:2d:c0:6d:bf:35:fd:69:0a:81:e3:
89:a5:ac:9d:60:b7:f0:a3:55:b9:e1:6c:04:24:be:
85:27:3b:17:04:d1:6d:7e:a0:24:d1:a8:71:bf:be:
70:be:06:b7:f8:84:20:9a:be:6a:f5:d9:b1:c2:15:
d6:e8:22:fc:29:6d:3b:6e:12:5a:11:e9:53:49:d2:
97:78:7f:61:4f:84:37:5c:4b:c5:f9:4e:9e:8e:01:
ff:53:30:64:54:bd:72:41:0b:f1:76:8e:a1:5e:21:
13:cb:19:4d:3e:24:fb:2f:10:55:4e:2c:c3:db:77:
11:a6:cc:3b:2d:f7:48:89:e5:4e:92:16:b0:94:3f:
fa:34:18:d4:91:fe:5f:82:b6:07:64:7b:59:c7:a6:
55:55:31:35:1c:c6:bb:2b:de:cc:26:80:e9:3f:20:
35:68:c8:15:3b:71:e1:62:24:80:db:e8:5d:31:cb:
d2:ed:bd:28:53:12:ca:6c:b3:da:de:6a:81:7d:d3:
fd:84:8d:78:32:5a:61:ce:0d:a5:a1:5c:88:2d:d7:
fe:87:61:20:0a:a1:13:96:6a:c4:58:bf:3a:50:0b:
1e:20:20:8f:06:71:67:34:6a:c4:57:4c:29:f4:e2:
4a:f8:3a:bb:85:f5:bd:75:d3:97:71:7f:91:c4:05:
f1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:89:58:15:D5:02:E9:11:34:CB:A1:E8:05:C2:85:2D:BC:20:04:59
X509v3 Authority Key Identifier:
keyid:C2:FA:52:7F:A5:86:CA:B2:F5:67:00:CD:CE:8D:8F:51:2C:0F:18:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvpSf6WGyrL1ZwDNzo2PUSwPGKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9d7141-60a4-42b6-92e7-c8b02f4b36ce/1/7YlYFdUC6RE0y6HoBcKFLbwgBFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9d7141-60a4-42b6-92e7-c8b02f4b36ce/1/wvpSf6WGyrL1ZwDNzo2PUSwPGKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:3a4::/48
Signature Algorithm: sha256WithRSAEncryption
31:75:99:ca:e7:61:73:3c:53:07:9d:18:b4:21:05:8c:2d:6d:
28:3f:06:2a:fa:4d:83:9f:58:e9:69:f5:e0:2d:ce:58:ec:b0:
e4:b0:cb:76:82:a2:6c:5d:38:9c:42:24:2c:e2:e4:20:26:59:
10:45:e5:2b:1f:a2:f5:42:e7:ba:00:8c:80:91:ba:60:b9:60:
53:51:c4:9a:f1:16:b8:c2:96:55:c7:89:d1:8b:ab:d7:cf:92:
40:0b:ef:6e:ab:75:4c:c5:d4:fb:24:f4:c1:43:ed:47:b9:35:
1c:04:7f:c3:72:d7:62:bc:6b:cc:c2:53:12:4c:0e:2c:27:79:
8d:02:ab:39:2b:72:c4:69:92:d3:d4:77:08:7f:38:72:5f:eb:
b2:7e:05:b1:70:8c:ac:df:3b:ab:9b:8f:40:0c:69:5c:8d:27:
b0:c6:37:59:a3:9e:62:2e:c9:d5:e4:d8:39:1e:80:44:f9:c0:
85:74:81:a1:6b:20:17:8d:44:13:49:aa:cd:77:3d:ab:70:21:
1c:ed:b2:19:2a:5e:05:6b:da:2b:37:30:73:d3:e0:90:69:2e:
bf:7d:8e:5b:02:d2:ef:f1:69:20:63:a5:50:c5:92:4e:6a:68:
1c:bc:ac:6b:a8:f7:64:53:c0:8e:45:2c:a7:66:a6:50:c8:76:
4f:81:b5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:43 2024 by rpki-client on console-fra.rpki-client.org