Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/OMztqKiY-7WfNBiMRufFFJAKpXE.roa
File: OMztqKiY-7WfNBiMRufFFJAKpXE.roa (raw, json)
Hash identifier: HiXdCH8YLRtxkQxHo5rjVr6jpR6YvpikxMEzJ3FOsZs=
Subject key identifier: 38:CC:ED:A8:A8:98:FB:B5:9F:34:18:8C:46:E7:C5:14:90:0A:A5:71
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 090CF4FE
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/OMztqKiY-7WfNBiMRufFFJAKpXE.roa
Signing time: Sat 01 Jan 2022 16:00:31 +0000
ROA not before: Sat 01 Jan 2022 16:00:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51999
IP address blocks: 2a0b:b83:d5::/48 maxlen: 48
2a0b:b83:d6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151844094 (0x90cf4fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38cceda8a898fbb59f34188c46e7c514900aa571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f8:85:a7:65:ec:0d:f7:45:91:79:5d:1a:38:
7a:dd:3b:06:55:77:c6:3f:db:c2:b6:31:3e:c2:51:
bd:9c:01:28:66:33:13:cb:0a:47:ff:1b:dc:58:45:
0e:c3:04:37:2f:f4:63:ac:41:7e:45:f0:e6:fd:32:
e9:68:b1:42:31:61:bd:4a:83:6a:da:25:4f:0c:96:
bc:8e:37:e6:2f:f5:29:49:78:a6:25:c9:c0:1e:6b:
f7:ab:70:85:36:25:7f:23:16:88:34:2e:08:1f:9d:
71:5f:4f:e6:07:57:91:0e:47:a0:1c:8b:09:42:e5:
15:37:df:be:a9:fb:ee:82:7a:05:37:bb:f9:7f:ef:
21:85:37:90:c7:1f:bc:3e:8e:03:12:8d:26:23:07:
6c:6e:8c:15:8d:ce:82:d0:50:f7:81:63:a1:1b:04:
0b:40:1a:b9:57:cb:62:8f:99:ab:3b:96:d4:33:17:
5f:e1:92:d8:5d:ca:44:70:76:d4:03:b2:32:cc:d2:
b8:7b:f2:95:e1:f8:9c:89:60:0c:44:f2:75:c7:57:
51:47:43:d5:d1:d7:eb:96:1c:3d:89:76:fe:5e:a3:
e5:e5:6a:98:bb:a5:be:57:7a:50:14:c2:66:7f:e3:
1f:9d:4b:06:8a:f9:98:d9:7a:ea:5e:e2:5a:d4:f9:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CC:ED:A8:A8:98:FB:B5:9F:34:18:8C:46:E7:C5:14:90:0A:A5:71
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/OMztqKiY-7WfNBiMRufFFJAKpXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b83:d5::-2a0b:b83:d6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
52:35:54:8c:b8:46:99:b0:9b:3e:ea:2b:c7:66:c3:05:31:3b:
07:50:6d:a3:26:97:08:94:9f:fc:8e:50:77:95:46:36:a2:97:
1e:0b:4d:47:5a:c3:b3:94:57:7e:c8:d8:94:c1:bb:27:db:46:
68:e9:a7:c3:97:c0:63:09:34:7d:56:5c:8b:d1:ae:1e:33:9d:
b7:bd:50:ab:c2:60:00:e9:19:5a:6f:43:9a:6f:49:c0:ab:5b:
99:8c:bf:67:5f:f1:ce:4d:1d:a4:b3:66:91:88:b3:36:5a:c6:
2c:f4:3f:67:03:13:51:8c:92:ef:21:cf:a5:80:44:92:5c:1d:
be:04:a9:d5:a3:4c:e9:c7:22:4b:f6:90:1f:cd:87:45:d1:c8:
52:21:a3:ba:e6:04:df:f8:6c:7b:b8:9a:e9:0b:55:c2:a2:fc:
29:17:65:26:3b:87:18:30:cf:0e:98:29:ed:1c:70:4c:3b:7a:
8b:64:d2:d3:85:31:31:45:7a:0c:00:ae:07:69:e0:9a:8c:60:
cc:4f:c2:ce:90:f0:7d:4f:68:cd:a4:37:98:64:1b:c0:da:ad:
e3:43:1c:90:e9:48:cc:02:d8:35:21:2a:02:0d:e9:04:e3:70:
a9:f6:f4:28:17:a6:c8:2f:0d:72:91:16:ee:4e:8e:62:6d:cd:
9f:c6:d4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org