Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MQsiZC7qJ3fQKhMfV9v1vcK8c6Q.roa
File: MQsiZC7qJ3fQKhMfV9v1vcK8c6Q.roa (raw, json)
Hash identifier: pdXW7c69TksXhsaDYJ4Jx4ZwArAltWxpM8zTrWUgk9s=
Subject key identifier: 31:0B:22:64:2E:EA:27:77:D0:2A:13:1F:57:DB:F5:BD:C2:BC:73:A4
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0922C532
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MQsiZC7qJ3fQKhMfV9v1vcK8c6Q.roa
Signing time: Sat 01 Jan 2022 16:00:45 +0000
ROA not before: Sat 01 Jan 2022 16:00:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207649
IP address blocks: 2a0b:b87:ffb6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153273650 (0x922c532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=310b22642eea2777d02a131f57dbf5bdc2bc73a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:78:fd:70:26:00:5d:03:4b:68:81:36:2a:
6b:d7:ca:e0:ce:25:df:36:3b:89:0b:78:e1:a0:46:
bc:a6:97:8c:e4:03:33:12:74:19:81:00:72:c3:52:
34:4a:86:fb:88:59:d8:a7:16:0d:93:af:ee:5f:e7:
6a:74:9e:d5:53:fc:ea:40:1c:9f:93:2f:cc:2b:14:
58:4f:85:44:67:82:b4:48:74:8a:39:72:29:4c:30:
48:f3:0c:c9:50:39:99:5f:e3:18:8d:83:c7:cb:56:
97:c6:cc:95:71:3e:d3:e9:d8:3b:d4:ca:83:95:b0:
27:0f:98:24:37:19:a0:63:76:28:8b:77:d9:dc:df:
9b:21:bc:9c:5b:7f:0c:f7:e7:8d:90:79:bd:e9:90:
49:7b:f8:cb:20:11:6e:31:d7:5b:0d:f2:57:29:05:
ee:02:35:db:35:b7:5f:ef:b4:fb:2d:a7:40:65:0d:
a1:e6:b2:34:50:d7:45:19:94:1f:73:8e:b1:83:79:
e4:39:8c:10:fd:ce:91:8e:a7:c4:be:5b:a6:ce:aa:
84:72:5b:ba:0e:7a:16:8a:8a:e1:a2:a4:a6:56:6d:
a5:d2:15:3b:18:de:e1:73:64:8d:c4:c6:4d:95:45:
62:fc:b5:e2:ab:d2:e7:25:a0:90:63:67:58:d1:da:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0B:22:64:2E:EA:27:77:D0:2A:13:1F:57:DB:F5:BD:C2:BC:73:A4
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MQsiZC7qJ3fQKhMfV9v1vcK8c6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffb6::/48
Signature Algorithm: sha256WithRSAEncryption
0d:4f:4c:a5:1c:f4:51:f0:22:02:ed:71:cb:4e:48:16:04:d4:
cc:c2:89:49:e8:50:3c:7a:a6:f6:43:44:8e:85:fe:72:5e:30:
ab:d8:e1:6d:4a:d5:fa:e6:4e:c4:6a:f6:7d:ae:be:3d:cc:51:
5b:b6:10:a7:10:6a:58:ba:64:3f:2f:15:6e:5b:85:18:1d:39:
a4:91:53:1c:29:36:cf:4e:a1:ad:ef:02:31:5b:54:28:7c:2d:
32:33:96:e4:17:89:b6:66:a0:87:46:24:7d:56:ba:c8:a3:82:
13:c2:df:1d:d8:d7:b2:35:3c:37:51:74:9b:52:39:14:f3:c8:
cd:af:7c:ea:25:1f:0d:b1:19:07:5a:ce:cd:63:51:41:0c:8b:
80:15:97:2f:05:da:a1:9b:b5:09:e1:86:ae:0f:7e:89:4d:08:
66:07:a1:1a:e8:87:d7:b6:46:15:71:3f:9e:a4:84:e9:6e:53:
1f:cf:79:43:3d:a4:bf:a8:44:29:9b:f1:73:a7:2e:5c:34:d4:
f5:6c:36:90:a4:04:61:1a:d0:41:78:86:1c:59:ae:ca:1f:ed:
9a:b9:26:b6:f6:4c:2a:c6:af:93:35:be:39:dc:99:d3:59:11:
4b:1d:62:25:f0:a2:43:f5:8c:99:6c:23:6b:f2:2c:d0:68:66:
f1:61:39:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:39 2024 by rpki-client on console-ams.rpki-client.org