Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/pXX-yVo7JTMS16pUJpWeyXtpeCA.roa
File: pXX-yVo7JTMS16pUJpWeyXtpeCA.roa (raw, json)
Hash identifier: gcSKjzxyvTSoeht+rS4jKzeRKpPdezUamqZqeJbdxAA=
Subject key identifier: A5:75:FE:C9:5A:3B:25:33:12:D7:AA:54:26:95:9E:C9:7B:69:78:20
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 0182C974906564FDEEC5092E518403B1349B
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/pXX-yVo7JTMS16pUJpWeyXtpeCA.roa
Signing time: Tue 23 Aug 2022 06:47:15 +0000
ROA not before: Tue 23 Aug 2022 06:47:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209311
IP address blocks: 2a0a:8ac0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:74:90:65:64:fd:ee:c5:09:2e:51:84:03:b1:34:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Aug 23 06:47:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a575fec95a3b253312d7aa5426959ec97b697820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:70:cd:f9:50:20:4c:fd:d6:62:d3:6a:0e:
4b:f0:1c:16:46:45:59:89:2d:cf:68:e3:04:7e:32:
22:c6:2b:0c:1c:ee:ed:19:13:ee:de:33:5a:df:cc:
b8:b3:2e:7d:33:f1:48:38:c3:f1:e9:10:aa:a6:76:
8c:09:09:1a:77:6d:bc:73:49:f3:fc:db:ff:71:ca:
bc:7d:24:f6:a7:84:f6:91:9a:28:40:64:fb:01:34:
49:d1:d5:7e:ab:bd:ac:a6:1a:4f:b6:64:f9:0b:a8:
7b:bf:db:76:56:c6:76:0a:d3:ee:3a:de:8e:8e:93:
ef:88:a4:2a:ff:c2:e4:25:f9:48:f2:e5:75:b8:9f:
52:01:08:d0:5b:9b:92:52:dd:c2:12:37:5e:6a:b2:
dd:8e:d1:cc:a0:35:c1:e0:36:ff:0a:15:a5:b2:da:
5d:2a:8f:44:ee:2b:c5:cf:b7:df:e4:a0:5a:ca:37:
ca:53:27:2d:a4:a1:3e:74:90:43:fe:10:e5:57:18:
05:fe:f9:a0:bb:8c:27:65:92:c2:36:a7:b5:08:16:
be:9e:ee:24:a4:53:60:7f:ff:4e:fe:0b:c5:a1:60:
2d:68:28:43:78:25:e4:fc:ab:f3:7a:b2:42:2d:01:
e3:7e:ce:ec:d4:78:79:76:19:41:bc:8b:83:b7:e1:
b3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:75:FE:C9:5A:3B:25:33:12:D7:AA:54:26:95:9E:C9:7B:69:78:20
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/pXX-yVo7JTMS16pUJpWeyXtpeCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
81:dc:f7:7b:2f:e2:dc:86:4b:6f:f6:d9:78:83:c5:fa:c1:46:
42:9b:76:3a:f8:56:2e:a7:45:c6:87:a6:47:2d:27:ed:b7:28:
50:fd:8f:42:3b:26:04:84:6f:95:fc:b4:4f:3b:d1:f8:da:15:
cd:70:7c:76:6e:63:b8:45:12:0b:0a:5d:3c:00:00:d5:14:32:
ae:64:b3:be:c7:e9:2a:f1:31:fc:bd:f8:64:37:d4:1f:07:99:
8f:2c:b1:f2:a8:1f:49:58:a1:aa:ed:80:87:1b:75:53:93:92:
6d:7b:2b:3f:bb:2f:98:d3:cc:cf:83:92:20:d9:e9:74:9d:89:
fe:8b:9a:66:e7:5b:27:8c:c7:d2:31:6c:7d:7c:28:37:ab:bb:
49:18:a5:88:e3:22:6b:43:b4:55:8e:60:c8:8e:56:5a:b4:3a:
7c:0c:eb:28:fd:1d:8c:7b:0b:e1:11:e5:08:a0:ef:dc:9a:15:
f3:5d:f6:a0:8c:bd:60:89:d7:d4:75:45:98:64:9b:fb:99:94:
11:95:41:65:fe:ae:25:8f:da:09:67:1b:55:32:4b:ec:4b:40:
72:b2:01:6c:e9:07:8f:dd:26:a9:bd:f1:d1:c3:ef:d9:df:79:
7f:6b:f1:bf:45:0a:ff:c4:53:1b:85:4a:b9:83:98:46:f8:d1:
9f:21:a2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:21 2024 by rpki-client on console-fra.rpki-client.org