Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xJchNRrTXh72HCfhbB28f4OYfuk.roa
File: xJchNRrTXh72HCfhbB28f4OYfuk.roa (raw, json)
Hash identifier: u/Q8CsVtQpLpi7wg9+sTmh7K39RCn9moN3igMeQ1ceU=
Subject key identifier: C4:97:21:35:1A:D3:5E:1E:F6:1C:27:E1:6C:1D:BC:7F:83:98:7E:E9
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01849ABAAE0BB0EB1E55F16FBCF80C741E29
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xJchNRrTXh72HCfhbB28f4OYfuk.roa
Signing time: Mon 21 Nov 2022 15:07:16 +0000
ROA not before: Mon 21 Nov 2022 15:07:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205749
IP address blocks: 2a0f:8ac1:d452::/48 maxlen: 48
2a0f:8ac1:a0a::/48 maxlen: 48
2a0b:b86:fe00::/40 maxlen: 48
2a0f:8ac1:574b::/48 maxlen: 48
2a0f:8ac1:d9a3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:ba:ae:0b:b0:eb:1e:55:f1:6f:bc:f8:0c:74:1e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Nov 21 15:07:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c49721351ad35e1ef61c27e16c1dbc7f83987ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:02:c1:de:51:80:7a:6b:43:b0:0a:ad:62:
4f:3c:35:3e:d4:4e:a0:f1:28:a6:95:8a:0a:98:24:
e1:fd:1d:ee:75:a7:a9:ce:cb:69:0c:e7:b2:51:36:
d4:81:01:8c:30:12:fa:d6:8a:b8:10:f8:93:1a:55:
b1:56:f5:ca:4b:b7:f8:3e:64:4c:b2:38:91:a0:08:
25:d0:bd:1d:77:be:e2:ec:88:85:c7:26:ae:f4:6b:
77:6b:cd:46:36:47:79:0f:e2:44:b3:14:2a:98:92:
a8:ca:af:af:58:af:75:d4:3f:18:63:bd:ae:d1:44:
0e:3b:d8:77:e3:eb:01:62:6e:7b:c7:6a:ab:47:70:
f2:33:2e:41:67:22:12:27:be:27:94:e7:f5:21:80:
23:93:0c:5f:cb:f5:41:14:24:18:64:fc:bf:be:68:
ee:5c:93:df:bf:f1:fc:a2:7b:a1:ff:e1:07:17:2f:
b0:ec:48:8b:81:68:6a:b4:97:ac:aa:01:d5:0b:9d:
cf:80:85:94:c5:6e:17:4d:d2:65:2d:14:14:db:bc:
ab:40:0d:97:0d:1d:07:e3:83:a3:74:89:ef:3f:4f:
aa:6c:a6:21:76:d5:29:aa:e6:a0:ef:58:e3:d7:70:
56:77:1f:41:44:1c:36:05:54:48:96:38:55:8e:cc:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:97:21:35:1A:D3:5E:1E:F6:1C:27:E1:6C:1D:BC:7F:83:98:7E:E9
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xJchNRrTXh72HCfhbB28f4OYfuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b86:fe00::/40
2a0f:8ac1:a0a::/48
2a0f:8ac1:574b::/48
2a0f:8ac1:d452::/48
2a0f:8ac1:d9a3::/48
Signature Algorithm: sha256WithRSAEncryption
7f:12:d1:d2:2c:95:83:2c:c0:e2:9b:b4:bd:05:30:17:7c:73:
7d:3d:b6:a2:b1:ff:a9:e1:a1:bc:aa:d4:f7:66:bb:07:e5:14:
5e:62:e6:80:b6:01:92:8e:8c:68:76:4b:6b:de:c8:df:ca:67:
6d:02:1f:2e:95:e3:d0:e9:99:d8:41:ba:98:ce:b8:9e:90:b8:
d3:6a:42:0e:6d:65:8b:3a:56:fe:40:32:98:66:92:d3:e5:d9:
8f:e1:ed:c6:8f:aa:c6:91:e7:46:86:85:c3:64:5d:4e:af:4c:
86:ad:59:47:7c:7a:9f:e0:4a:7f:e5:2f:a3:3b:90:52:17:91:
9f:2c:d4:0a:f7:11:c2:00:4d:4a:33:8f:0b:35:d5:9c:48:8a:
ca:dd:52:ea:90:38:23:c5:c0:d2:48:ff:44:3d:a6:b4:2d:32:
cb:56:56:ac:cb:1f:c7:6a:61:20:87:05:fc:82:62:6d:f9:20:
65:61:91:38:e2:4b:ee:12:2f:a6:eb:61:59:74:ae:56:bb:37:
f8:ce:76:6a:df:5f:66:d8:c1:47:43:b3:a2:85:3c:34:ab:a9:
de:4f:9c:e0:cf:34:cc:55:6c:1c:96:74:a8:6e:d2:8c:17:d3:
4d:19:5c:53:99:41:a5:69:07:ce:bc:61:e8:dc:73:45:cd:84:
0c:42:02:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org