Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xtxxKxjw6YPqwL8y4KXx-2eI3c4.roa
File: xtxxKxjw6YPqwL8y4KXx-2eI3c4.roa (raw, json)
Hash identifier: CW7Fs3bPZ3D9lXm7fC3g11b2813TD0d2dSJmZmtAYYU=
Subject key identifier: C6:DC:71:2B:18:F0:E9:83:EA:C0:BF:32:E0:A5:F1:FB:67:88:DD:CE
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0184D2EABAE692FF6DD4368F71BE57F46C85
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xtxxKxjw6YPqwL8y4KXx-2eI3c4.roa
Signing time: Fri 02 Dec 2022 12:58:29 +0000
ROA not before: Fri 02 Dec 2022 12:58:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211772
IP address blocks: 2a0b:b81::/46 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:ea:ba:e6:92:ff:6d:d4:36:8f:71:be:57:f4:6c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Dec 2 12:58:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6dc712b18f0e983eac0bf32e0a5f1fb6788ddce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:ad:64:5b:8c:78:d2:fd:bd:66:20:e4:9e:
d1:f5:13:71:7f:bc:c5:9f:fa:7c:11:61:58:67:54:
26:31:35:ba:23:0a:35:df:6b:9a:1e:a3:10:31:de:
0c:28:35:6d:0d:9d:ea:b9:94:6e:0b:59:80:3f:51:
af:2d:e9:89:9d:09:21:06:89:97:68:37:e6:4d:ec:
45:22:5e:4d:12:a8:db:d4:41:43:58:1d:da:8f:f3:
c1:d9:63:93:9b:c8:ca:0d:24:1c:4a:cd:86:b5:8d:
6b:17:c2:26:4a:d0:0b:a4:f1:35:c9:e5:14:09:46:
7b:f7:45:c5:e8:6d:2f:8c:5f:9a:44:1b:11:6f:83:
36:ee:64:a0:0a:b6:61:bc:f6:db:8e:36:cc:f8:5a:
63:a1:45:0a:fb:29:05:65:5c:8d:72:21:bd:50:28:
7f:bc:ef:e8:de:54:13:60:6a:a9:09:4d:a6:e2:e7:
9d:ca:25:d0:3a:d6:42:43:11:6d:e5:bc:7e:01:f2:
06:9d:2c:e9:8d:11:45:8d:ec:b3:8f:55:4c:78:50:
59:38:61:86:fc:f6:e8:dd:0d:7c:b3:a8:ca:fe:85:
56:e4:b5:d4:bb:8c:e7:72:4b:f5:57:4d:a0:27:59:
ef:0e:50:30:bc:66:36:73:23:4b:85:ab:32:5a:2d:
9a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DC:71:2B:18:F0:E9:83:EA:C0:BF:32:E0:A5:F1:FB:67:88:DD:CE
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xtxxKxjw6YPqwL8y4KXx-2eI3c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b81::/46
Signature Algorithm: sha256WithRSAEncryption
dc:0e:94:01:d1:a4:ef:82:18:45:46:7c:31:a3:af:76:d0:d3:
61:a6:af:51:31:2e:bf:ec:10:1f:fd:7d:2d:de:a1:da:b0:bc:
14:6a:d1:f8:8d:89:47:31:bb:3e:dd:e2:ef:63:14:1e:4b:94:
70:58:48:65:31:f0:d0:b0:ea:5d:20:f3:8a:b3:be:bd:94:6c:
69:62:4f:74:a8:09:46:52:3a:d5:ef:51:8a:20:48:60:5f:25:
f0:4a:8f:8e:f2:b5:56:7c:ea:fc:22:46:a0:32:ff:ca:15:f2:
7c:50:90:82:f6:92:13:74:e4:00:28:da:4f:33:2a:3a:71:9c:
15:05:79:5b:a8:a5:e7:70:eb:5b:30:bb:cf:01:11:d4:43:87:
f6:97:c8:04:45:f8:0b:7c:97:ab:8f:f5:3f:82:40:74:bb:33:
29:dd:d7:7d:d6:60:92:9c:2b:1d:9e:d9:4c:dc:31:f1:17:c9:
09:03:62:39:56:c8:de:55:0f:d7:3e:03:3f:26:4c:a3:9b:14:
48:50:b0:1a:11:8c:aa:ef:76:33:35:c4:f8:6e:d7:af:36:35:
5e:48:0d:a7:a6:51:f5:f9:83:3c:a0:d2:62:9e:df:47:f3:f1:
79:27:67:2c:d7:b3:69:6a:0b:73:fd:51:98:3f:60:4c:96:0f:
12:8b:59:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org