Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/7EbQyfGy1_N4fcM0SJLapW9JGow.roa
File: 7EbQyfGy1_N4fcM0SJLapW9JGow.roa (raw, json)
Hash identifier: h5htcseBBZTI6AR+Sx8x/CNPPBcHRgNVvClhvMWoIQc=
Subject key identifier: EC:46:D0:C9:F1:B2:D7:F3:78:7D:C3:34:48:92:DA:A5:6F:49:1A:8C
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 08F62CFE
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/7EbQyfGy1_N4fcM0SJLapW9JGow.roa
Signing time: Sat 01 Jan 2022 16:00:11 +0000
ROA not before: Sat 01 Jan 2022 16:00:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 2a0b:b87:ffb0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150351102 (0x8f62cfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec46d0c9f1b2d7f3787dc3344892daa56f491a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:23:20:92:f9:bd:6d:01:83:b0:4f:08:46:
89:f1:82:c7:c5:32:c4:c3:fd:0b:5b:5d:c1:81:8f:
60:49:b7:9b:61:23:a4:1c:ec:17:16:c3:13:ad:1f:
03:b0:23:fc:3b:4f:72:6f:f6:ca:bc:f9:bb:de:93:
6e:36:59:8e:9d:18:d2:46:c8:72:1e:71:43:62:c8:
f4:c5:01:c0:b4:a3:42:bd:ce:ae:a2:61:79:f7:f0:
c0:e4:99:66:51:d0:86:77:1f:a9:61:c9:bb:12:38:
d6:1c:b9:72:7a:ce:16:3a:53:94:0d:96:5a:ec:4a:
02:2d:2d:49:b6:52:e0:52:00:2a:1f:ae:ec:eb:34:
cb:39:2d:4d:a7:26:38:50:b2:20:0e:24:fa:ad:41:
c7:1c:1d:3e:ac:c5:e8:6c:50:f6:50:5d:81:2c:be:
cf:e3:78:00:7e:0e:24:07:5f:17:28:39:47:66:27:
73:ab:c6:b6:b7:12:f7:10:28:8a:96:ba:df:59:fb:
09:0c:c8:3f:28:e3:51:b5:ec:b0:af:02:e9:af:2e:
e5:89:aa:da:78:fb:9c:5d:86:a7:4c:56:d7:b3:71:
3a:b5:6a:cf:f7:8b:5a:fd:24:41:5d:9c:e5:a9:97:
e9:2f:ce:63:81:22:ae:84:f8:41:f8:82:95:9f:7e:
26:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:46:D0:C9:F1:B2:D7:F3:78:7D:C3:34:48:92:DA:A5:6F:49:1A:8C
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/7EbQyfGy1_N4fcM0SJLapW9JGow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffb0::/48
Signature Algorithm: sha256WithRSAEncryption
48:4d:ad:06:1a:cf:57:ed:40:02:63:68:36:d6:90:aa:15:1f:
39:f3:13:84:83:ce:27:eb:af:3d:13:88:44:fa:e4:fd:be:08:
e5:4f:3c:70:f4:88:e3:f2:6b:e6:d2:5f:d7:09:64:8a:77:49:
7a:14:65:c5:a4:8d:d0:d8:66:a1:f0:96:6e:c3:0a:fe:6f:d4:
75:6f:ba:4d:f1:d3:d2:df:b4:7d:30:79:3c:c2:61:a9:8b:83:
74:c5:9a:f2:c9:4f:5c:43:46:f5:40:2c:4f:07:64:1f:66:d2:
a7:44:0d:a1:db:53:16:a8:c1:94:f2:fd:33:23:31:a0:86:25:
b0:e8:51:13:ac:17:12:2f:8c:9c:07:85:af:8d:cb:0c:1d:13:
cd:5e:0d:cf:7f:96:c1:3d:57:b4:3c:0b:7e:d4:96:71:50:aa:
9c:8f:64:1c:05:be:5c:da:30:7a:bc:4f:3a:ad:e0:63:0b:e7:
f5:ad:65:9f:5f:6a:25:1a:43:cb:be:bd:e6:0f:32:ad:61:00:
5e:f1:82:b3:cd:72:aa:e4:03:16:77:c8:e2:8c:f6:ac:c7:6c:
22:16:ff:3f:cd:8c:fb:45:72:77:70:9e:27:e5:7c:be:ad:70:
6b:11:28:12:8a:f0:4c:74:54:3a:e8:2a:96:05:0b:b5:6e:5a:
f5:ae:9f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:48 2024 by rpki-client on console-fra.rpki-client.org