Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/bF4mvDHGkSGrdRavVV30W7uHvcs.roa
File: bF4mvDHGkSGrdRavVV30W7uHvcs.roa (raw, json)
Hash identifier: R+KS7cKoAhHSwDPvlZ59bYucIN165+XJEID1FkjWXrA=
Subject key identifier: 6C:5E:26:BC:31:C6:91:21:AB:75:16:AF:55:5D:F4:5B:BB:87:BD:CB
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 090A822B
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/bF4mvDHGkSGrdRavVV30W7uHvcs.roa
Signing time: Sat 01 Jan 2022 16:00:31 +0000
ROA not before: Sat 01 Jan 2022 16:00:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50867
IP address blocks: 2a0b:7086:fff0::/44 maxlen: 44
2a0b:b87:ffc0::/44 maxlen: 44
2a0b:b86:fff0::/44 maxlen: 44
2a0b:7087:fff0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151683627 (0x90a822b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c5e26bc31c69121ab7516af555df45bbb87bdcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:29:c2:5d:e6:1f:22:fb:fe:61:0b:ce:65:
0c:78:b0:d7:2e:b9:4b:f9:67:28:61:28:df:a0:6f:
12:ca:66:22:f0:a5:ed:0e:ed:56:62:11:2d:97:e4:
57:34:9c:b5:8e:90:b3:c3:5a:54:aa:c5:93:48:58:
4c:c8:39:59:66:f0:02:6e:27:eb:1b:3e:ff:a6:00:
84:62:11:29:40:b1:e0:c2:e0:ea:c4:3d:cc:93:11:
ee:57:c5:2f:ad:1d:90:d3:4d:94:9c:e1:7c:ef:77:
44:9f:90:fd:2f:ee:a8:97:09:e4:b4:d8:0c:ba:cc:
5e:97:1f:57:dc:c9:06:0e:a5:8d:51:43:00:84:9b:
72:7f:7d:82:b8:7d:82:fe:41:f9:c9:bb:bc:6d:2a:
a4:0b:1e:91:95:65:3c:09:04:27:aa:84:47:f4:60:
1c:62:fa:ef:a5:8f:4d:5b:85:42:08:47:9b:3b:a1:
a5:4c:05:48:7f:db:78:aa:b2:bd:0e:b3:ec:fd:50:
c1:61:9e:e7:09:53:d3:08:54:6e:59:4c:76:38:82:
ff:3b:6e:2f:65:db:0f:1b:11:8e:34:21:b9:19:d2:
41:fd:44:50:e4:85:50:65:c7:84:75:d7:80:8c:96:
4d:0d:5f:1f:03:fc:4f:ee:dc:55:42:4f:86:ed:ca:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5E:26:BC:31:C6:91:21:AB:75:16:AF:55:5D:F4:5B:BB:87:BD:CB
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/bF4mvDHGkSGrdRavVV30W7uHvcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b86:fff0::/44
2a0b:b87:ffc0::/44
2a0b:7086:fff0::/44
2a0b:7087:fff0::/44
Signature Algorithm: sha256WithRSAEncryption
a7:c1:5f:d7:ee:f2:17:aa:6c:c6:71:90:a3:76:1a:d2:72:db:
eb:1b:15:36:74:3e:4a:9f:71:11:7e:83:2e:87:ee:bd:a0:3c:
24:28:95:20:ec:b8:8d:72:2f:91:74:d3:47:c6:65:17:c9:b3:
1b:5a:0a:71:67:40:4c:c7:a3:ca:dd:fa:c2:1e:ca:19:8a:4f:
68:32:33:b1:40:9f:d5:5c:82:ff:fa:62:a2:76:4f:61:56:d1:
8d:71:03:30:8c:d9:ec:eb:2b:30:b9:69:e6:46:c5:39:a3:c0:
25:19:d8:44:ef:e2:a7:62:eb:57:a2:c4:87:20:a5:6e:de:6a:
c1:90:2e:7c:7a:03:84:eb:6d:51:de:c6:a5:0c:ef:bc:a5:20:
be:f8:fd:c5:22:a4:d4:d8:b7:61:4e:0e:b0:08:3f:4c:17:22:
fc:01:82:35:c6:d0:0f:1a:45:b1:50:59:73:7c:68:a6:5d:da:
cb:42:ea:ca:5b:21:9b:16:d6:bf:b5:26:6c:0f:dc:95:e4:26:
28:26:10:85:78:33:19:de:da:c1:65:c6:63:c5:34:64:ab:0e:
01:3e:e2:d8:9c:81:d1:d1:98:b6:61:43:fc:ab:ff:9f:76:ef:
e4:bd:3f:f7:7c:cb:24:f7:d6:a9:55:75:96:03:39:96:57:c9:
91:3e:45:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:27 2023 by rpki-client on console-ams.rpki-client.org