Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MXigwkyD1Qb97Irpm6tCtYe4azM.roa
File: MXigwkyD1Qb97Irpm6tCtYe4azM.roa (raw, json)
Hash identifier: sYwWXCPdwdhBtuuXzS64erML3ztxRM+1VfQyg8nVD6w=
Subject key identifier: 31:78:A0:C2:4C:83:D5:06:FD:EC:8A:E9:9B:AB:42:B5:87:B8:6B:33
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 091A7429
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MXigwkyD1Qb97Irpm6tCtYe4azM.roa
Signing time: Sat 01 Jan 2022 16:00:39 +0000
ROA not before: Sat 01 Jan 2022 16:00:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204826
IP address blocks: 2a0b:b87:ffd4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152728617 (0x91a7429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3178a0c24c83d506fdec8ae99bab42b587b86b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:76:f6:d1:c2:c1:4a:cd:37:64:3d:91:97:
61:8e:0c:ab:ab:7d:18:6d:fe:56:14:a5:71:e5:95:
79:a5:c6:4f:73:c4:0b:71:8c:71:1e:d8:4e:78:68:
f6:2e:8e:e3:87:53:6d:89:0b:05:e6:6d:c2:58:db:
3e:6b:36:0d:29:13:6c:70:a6:0a:f7:0e:28:06:f1:
6a:a2:e5:e4:41:10:7d:9a:4a:08:a0:3e:1d:be:61:
12:81:37:70:ca:e0:04:43:b2:42:a5:b3:57:ec:eb:
b1:40:5c:1d:79:ba:bb:31:44:6d:eb:e4:9d:2a:62:
1b:85:00:82:69:75:d9:40:c2:df:52:40:a4:68:1f:
fa:b7:2e:7b:51:7a:bf:e5:49:23:a2:d9:15:8d:f7:
05:a7:cc:4a:54:8b:1f:bd:8f:26:8c:82:f2:b7:cc:
a2:75:42:6d:09:63:5f:d7:e4:93:96:d0:fe:4d:c7:
62:c1:c5:55:10:7d:61:24:0e:de:3f:e4:17:32:d1:
c3:77:fc:22:c4:5e:f9:1b:34:cc:46:95:24:27:68:
24:39:14:39:a4:50:2b:21:04:fb:65:2d:1b:ae:0e:
98:7b:60:03:21:dc:c8:65:f2:7d:91:28:7b:67:52:
93:5a:3a:ef:cd:d2:ea:98:34:37:55:d7:0a:fc:ef:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:78:A0:C2:4C:83:D5:06:FD:EC:8A:E9:9B:AB:42:B5:87:B8:6B:33
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MXigwkyD1Qb97Irpm6tCtYe4azM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffd4::/48
Signature Algorithm: sha256WithRSAEncryption
db:c6:b0:22:3f:b6:ea:b4:7e:be:aa:13:db:97:b9:a6:90:68:
c8:bf:3e:77:85:9e:dc:28:41:85:8f:ed:6b:9f:e6:45:5b:bd:
94:a7:12:8c:f5:58:70:72:8d:e4:b1:14:04:2c:23:43:cf:2b:
b6:f7:b3:d3:a0:06:73:73:f4:8e:db:f1:3e:0d:d0:53:c2:ae:
6c:f3:5d:49:ad:30:93:31:fe:cf:6d:89:99:ce:ca:5e:b8:25:
43:08:00:3a:85:7c:67:d8:0a:c2:af:aa:ee:c2:61:70:55:06:
ef:7e:35:cd:5a:68:e7:60:a4:1e:6c:c9:25:3f:c8:fa:c6:aa:
c0:3f:10:ac:da:61:13:c9:68:fd:33:51:ae:5e:b6:cc:b0:e9:
e7:8a:c7:d8:9a:a2:94:e7:cb:87:a4:3b:96:e8:66:b5:e7:db:
86:da:a5:1d:15:f9:c9:79:10:1a:25:fc:d0:f1:eb:3e:b1:94:
d3:7c:fe:05:80:b2:1c:dc:6f:e5:71:36:6c:35:42:45:eb:d7:
9b:9e:b1:ed:00:d0:56:32:ac:59:17:07:98:71:c6:b6:65:50:
da:52:45:fd:24:f0:6c:f3:10:ba:00:fa:e4:2d:05:64:0e:27:
c2:40:99:55:b9:49:5c:83:4c:eb:5c:b3:9e:a3:89:af:f9:e8:
9b:85:3f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:39 2024 by rpki-client on console-ams.rpki-client.org