Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mYVHd-KQlgJe_KFNLwU1w2EkQDg.roa
File: mYVHd-KQlgJe_KFNLwU1w2EkQDg.roa (raw, json)
Hash identifier: ZwpHqf96LvLeM8+WowajKjgLqBDEX/aUtyWbEmyKdh0=
Subject key identifier: 99:85:47:77:E2:90:96:02:5E:FC:A1:4D:2F:05:35:C3:61:24:40:38
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0923E0CE
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mYVHd-KQlgJe_KFNLwU1w2EkQDg.roa
Signing time: Sat 01 Jan 2022 16:00:46 +0000
ROA not before: Sat 01 Jan 2022 16:00:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207892
IP address blocks: 2a0b:b87:ffdb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153346254 (0x923e0ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99854777e29096025efca14d2f0535c361244038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:a2:67:86:4c:71:7a:9f:1f:e0:08:ac:bf:
47:9f:62:63:4c:0c:d3:e7:33:cd:e2:98:ee:6b:fe:
81:fa:1c:ab:ff:e0:a4:6d:a0:07:1f:b3:2f:10:62:
62:e7:06:94:12:4f:4e:64:cc:b9:88:05:6d:9c:27:
f9:3d:98:23:bc:41:b8:f7:d2:00:80:96:c8:63:92:
f8:8f:02:05:0f:b4:9f:71:61:10:a9:f5:92:d0:b2:
45:25:93:25:af:a8:f6:98:d6:2b:f0:05:74:77:77:
5e:0a:4a:c7:77:2b:f5:a7:b6:e3:49:c6:d2:3f:70:
8c:b0:4d:00:13:8d:a7:a4:fe:77:72:85:51:ee:8f:
c4:5f:32:c7:ea:b7:94:85:49:9d:c3:69:9a:5a:2e:
8e:5e:d4:61:54:01:82:46:46:15:4b:e8:c2:55:c2:
99:2f:a8:ed:bc:52:18:06:35:05:84:c2:73:f3:0f:
df:de:a5:67:bb:d5:fe:c0:b9:0b:c7:6b:cc:db:73:
0a:de:a3:4c:e8:19:82:ff:f4:f6:b6:9f:9f:53:6b:
1f:a1:17:f0:a3:1f:c0:0d:39:2a:72:94:ed:f6:64:
ad:4d:e8:15:80:71:bb:bc:91:ff:fc:f6:cc:8b:5e:
ee:38:1f:f2:35:0c:7b:25:f9:aa:4e:89:ec:eb:d8:
ed:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:85:47:77:E2:90:96:02:5E:FC:A1:4D:2F:05:35:C3:61:24:40:38
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mYVHd-KQlgJe_KFNLwU1w2EkQDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffdb::/48
Signature Algorithm: sha256WithRSAEncryption
9c:be:45:66:04:eb:e4:90:42:a7:8d:e4:12:dc:c9:b9:b1:5c:
f9:c7:97:5c:db:fa:2c:b8:c9:09:d9:6c:bf:50:4e:51:31:84:
ae:e6:18:fb:0a:45:57:de:00:5c:80:5b:40:d3:10:b9:a8:5a:
6a:b0:bd:5e:59:20:26:bd:a7:9a:be:c6:6b:b4:09:2c:b3:a1:
3f:e5:8e:87:ca:6b:4a:5b:14:fd:cb:ed:c8:40:1a:d2:b0:5b:
51:7c:ea:b7:e2:fa:03:72:6e:da:aa:2d:2f:a9:fd:b0:5d:cb:
6c:b2:44:3e:f4:70:6c:13:88:c0:da:ad:fe:df:c0:b2:aa:2c:
70:35:c0:33:31:e8:ed:d8:c1:63:b5:be:02:83:31:51:49:bf:
6e:d0:9d:4b:28:47:4b:06:54:b6:a1:2b:9e:5e:ff:13:9b:7f:
2f:72:64:2c:87:26:5c:78:03:a3:02:0f:5d:16:d6:9f:f0:e0:
e0:50:af:a7:70:ed:10:66:73:10:cc:96:87:2b:a9:84:30:3c:
15:f3:ee:2e:8b:9f:fe:28:01:63:55:f6:b1:3e:14:07:45:a0:
e0:08:35:dd:de:e4:7e:f6:59:e0:9a:c5:5f:99:7f:bc:fd:c0:
d5:ed:13:5c:d6:d1:71:a8:d5:27:87:0e:f5:51:be:b5:6a:e7:
14:48:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:40 2024 by rpki-client on console-ams.rpki-client.org