Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/EfNHFXplIlosGJO55tuoV3ZKdzw.roa
File: EfNHFXplIlosGJO55tuoV3ZKdzw.roa (raw, json)
Hash identifier: Ys56HIEGg780uHq1MCq1ZQdIhfqNfizx/mtRvMWwVio=
Subject key identifier: 11:F3:47:15:7A:65:22:5A:2C:18:93:B9:E6:DB:A8:57:76:4A:77:3C
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0937760E
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/EfNHFXplIlosGJO55tuoV3ZKdzw.roa
Signing time: Sat 01 Jan 2022 16:01:01 +0000
ROA not before: Sat 01 Jan 2022 16:01:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212647
IP address blocks: 2a0b:b87:ffa0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154629646 (0x937760e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:01:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11f347157a65225a2c1893b9e6dba857764a773c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3e:2f:45:11:26:23:3a:51:14:5e:af:09:a3:
18:45:63:f6:a9:26:57:3b:bb:ed:61:9d:17:68:21:
7a:94:01:fa:33:87:1f:49:d6:51:76:75:39:9c:8e:
9f:58:ba:3f:02:82:82:10:35:63:c3:89:c2:70:5e:
66:cd:47:b1:21:01:32:00:95:8b:28:29:b4:c5:2d:
ca:8b:c2:d7:9c:21:e2:36:69:f5:2f:02:90:aa:db:
d6:c0:c9:8b:c6:8e:c7:d6:f6:2d:b6:a7:de:09:9a:
c6:ad:8f:6f:23:dc:a5:bf:f2:74:88:68:21:0d:35:
e1:d2:4c:03:18:ae:22:ee:1d:36:ef:05:2d:0d:d9:
30:17:da:df:ba:fb:5c:c4:fc:c3:51:57:7d:c5:ed:
5f:f1:f2:16:b5:3a:f7:d6:56:50:02:8e:61:27:a9:
a6:c4:1c:42:f2:b5:e5:79:79:97:ef:e0:85:3b:df:
fe:0a:aa:a9:ab:05:d8:26:15:2f:a3:40:62:5a:f3:
fb:74:80:6e:32:f2:0b:14:22:87:d6:ef:c4:da:64:
7a:9d:40:3d:19:10:0b:39:d6:4b:f8:61:95:03:d6:
14:dd:88:fe:b2:92:9e:28:28:36:29:cc:2d:f2:ff:
ad:05:65:59:c1:84:99:d9:c5:3a:b8:80:1c:19:ef:
e8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F3:47:15:7A:65:22:5A:2C:18:93:B9:E6:DB:A8:57:76:4A:77:3C
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/EfNHFXplIlosGJO55tuoV3ZKdzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffa0::/48
Signature Algorithm: sha256WithRSAEncryption
26:4d:4a:f8:63:4a:7f:fc:e4:79:d8:9b:ac:a8:18:bf:64:c0:
c1:89:68:ed:22:4f:74:34:00:98:b0:90:86:e5:81:47:9b:04:
e7:de:1c:4f:6a:e4:78:2d:98:a1:4e:d4:64:49:92:63:b3:65:
e0:ea:71:25:7c:7c:09:5d:d4:0f:b4:d8:c3:2d:fe:4f:4c:e3:
26:17:e1:1e:bd:26:81:e0:ff:f3:db:89:d8:81:59:de:39:53:
d6:de:a3:48:43:2f:c7:6a:0e:fa:69:07:21:77:fb:db:57:31:
e3:20:b9:cf:96:41:7d:5a:3b:fc:1f:e1:fb:11:e4:85:92:8f:
d7:4f:62:d1:bc:d9:a8:a9:82:72:26:e3:78:ad:98:75:cc:2b:
f4:54:b2:2d:80:7a:60:7c:a2:8b:1f:18:a6:e3:89:e9:45:6e:
d3:37:2b:c2:42:cf:50:fd:7b:a6:c7:ae:39:02:11:d7:9a:16:
d6:c9:eb:c5:05:b6:77:b5:c0:b6:ad:12:21:5e:2f:47:67:0e:
3b:f1:eb:52:b3:15:ab:d4:f6:7b:6d:53:e6:89:8f:0d:f2:83:
59:49:a4:0d:a8:d7:b2:f4:e5:4c:82:1b:2a:76:ad:b4:2c:90:
f7:c7:44:b5:67:8e:5d:9b:47:d6:5e:0e:55:aa:5e:8e:31:62:
06:cb:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org