Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/V7tAw5I-AS8mWR3oKZIyVQiKKn4.roa
File: V7tAw5I-AS8mWR3oKZIyVQiKKn4.roa (raw, json)
Hash identifier: 2M2K8NCqkMlfgusu6ixjSi5+bk80N2fzRUyl4dYT0GQ=
Subject key identifier: 57:BB:40:C3:92:3E:01:2F:26:59:1D:E8:29:92:32:55:08:8A:2A:7E
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 08F54B4F
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/V7tAw5I-AS8mWR3oKZIyVQiKKn4.roa
Signing time: Sat 01 Jan 2022 16:00:08 +0000
ROA not before: Sat 01 Jan 2022 16:00:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 2a0b:b87:ffb0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150293327 (0x8f54b4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57bb40c3923e012f26591de829923255088a2a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:d6:24:33:f5:23:e5:59:62:ae:f7:7d:3a:
a4:2e:b1:66:2d:08:71:46:9c:ad:b4:99:a3:69:36:
6d:81:ae:5b:97:82:30:d1:3c:5d:02:46:90:94:17:
c3:41:e7:1f:d6:a0:db:a7:30:01:9e:fb:b7:21:d6:
ca:cc:b3:37:20:4c:c3:e7:00:a7:73:e1:db:d8:f9:
f3:51:a5:6a:d4:f8:08:56:0c:40:c8:0b:34:aa:23:
1d:b3:6a:d2:d4:ac:44:0d:64:d7:4e:b4:00:49:ee:
ba:11:a2:fd:2d:60:1f:b3:95:0c:0d:16:c7:a0:13:
99:6f:77:5b:27:f0:e1:63:47:41:31:fe:73:b6:fb:
b1:2b:03:6e:e5:c9:d3:aa:e8:9f:3d:56:8e:6d:c7:
fa:73:dd:03:e2:86:32:ee:2d:43:03:47:60:a6:37:
a3:6b:0e:da:df:f7:f3:66:7f:8f:cd:d6:b4:7d:c0:
54:de:1d:2b:66:0d:91:41:b2:75:c8:75:13:48:f5:
fe:19:fd:73:64:dd:65:65:53:35:82:0c:8c:7d:49:
86:c3:00:81:40:8a:62:de:10:3a:0d:4e:21:5a:91:
c2:60:69:27:2a:9e:ed:3c:69:95:2c:2b:38:6a:ef:
1c:d9:97:b6:8e:2d:2f:56:50:e6:e8:ee:49:d8:cb:
e9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BB:40:C3:92:3E:01:2F:26:59:1D:E8:29:92:32:55:08:8A:2A:7E
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/V7tAw5I-AS8mWR3oKZIyVQiKKn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffb0::/48
Signature Algorithm: sha256WithRSAEncryption
b9:81:14:c3:c8:3f:18:77:35:9e:40:3d:c4:13:ee:77:78:7f:
1d:4a:a6:12:5b:21:52:82:c6:81:87:eb:2b:9c:1a:46:47:a9:
2e:06:a2:f9:6a:8e:de:41:a5:bd:6b:d3:34:b2:ba:c7:55:86:
36:6e:db:1e:4d:a5:46:6c:66:ac:05:8b:85:1c:0a:bc:aa:85:
f8:d1:14:55:0d:62:20:af:5d:7a:a5:08:c9:a8:d3:d4:90:80:
c4:0a:a2:de:82:66:f8:6d:ca:68:b5:11:3f:d4:c4:b6:62:e5:
d8:e0:2d:fb:3e:f3:a1:3b:79:87:2d:e5:82:a2:44:2b:69:f2:
0b:4d:a8:88:24:4f:7f:4f:7e:d9:eb:25:9a:38:bf:6c:54:4b:
42:63:94:98:be:7a:97:94:70:ec:e3:31:57:87:23:32:72:a3:
b3:55:9a:d8:ae:87:1e:68:64:88:f6:b7:0f:b1:0c:81:4d:aa:
33:28:51:91:d1:ef:b3:05:6a:25:e6:49:e4:a8:f6:c9:4c:16:
6a:d8:c0:b1:dc:ff:8b:27:fe:14:1d:d0:25:2d:8e:54:ab:89:
cd:40:09:24:88:a3:9d:c5:f7:64:bf:6d:13:59:4f:03:67:8e:
0c:05:e6:f5:57:ea:c9:98:9a:99:5b:e1:64:33:58:fe:a4:78:
34:7d:20:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org