Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/YLuXAqlHUF1sbQjWC0846pUBZrw.roa
File: YLuXAqlHUF1sbQjWC0846pUBZrw.roa (raw, json)
Hash identifier: LjSzBo8QjDu0CuL6tyq2kaCCkcVwTeygCQHneUmA6ds=
Subject key identifier: 60:BB:97:02:A9:47:50:5D:6C:6D:08:D6:0B:4F:38:EA:95:01:66:BC
Certificate issuer: /CN=c7cfccd68957a0f70439a8d60ff3c8b8d911a308
Certificate serial: 57EE
Authority key identifier: C7:CF:CC:D6:89:57:A0:F7:04:39:A8:D6:0F:F3:C8:B8:D9:11:A3:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8_M1olXoPcEOajWD_PIuNkRowg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/YLuXAqlHUF1sbQjWC0846pUBZrw.roa
Signing time: Fri 04 Mar 2022 18:26:02 +0000
ROA not before: Fri 04 Mar 2022 18:26:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20932
IP address blocks: 2001:67c:1368::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22510 (0x57ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7cfccd68957a0f70439a8d60ff3c8b8d911a308
Validity
Not Before: Mar 4 18:26:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60bb9702a947505d6c6d08d60b4f38ea950166bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b1:2a:e2:12:12:09:b3:31:8e:6e:9a:57:3a:
93:c7:60:52:d6:8c:c6:ac:c6:1c:9c:ef:8a:8b:30:
40:e0:0e:7a:13:de:81:51:1e:d2:ad:4b:c5:f5:67:
17:ab:60:b6:45:5c:87:40:f2:9d:50:05:ec:20:58:
d8:8d:5d:7a:2c:9e:62:27:40:93:26:80:f8:01:d0:
74:88:82:eb:a3:e9:77:fc:39:15:a9:8a:4e:4b:e4:
bc:36:38:04:6a:bb:8b:f4:1f:59:b7:12:73:16:92:
40:5b:04:42:dc:1b:9d:86:aa:3b:7e:63:8e:02:1b:
4c:61:c4:fe:a3:23:b6:10:b9:59:5d:65:cb:21:9b:
77:e5:6d:ff:ff:4c:46:bc:02:41:00:04:36:d7:35:
1a:fd:2a:e1:66:d7:25:8a:cd:6a:e8:b1:df:92:be:
29:1a:c8:a4:ae:0b:b6:ac:0a:e4:30:81:c9:78:6e:
50:bb:fb:f4:9a:ea:72:7a:11:76:47:98:fe:ef:b8:
6d:27:bb:b6:e3:9e:39:18:c9:55:49:7b:f4:c8:e7:
59:03:ac:ee:59:26:c8:45:64:05:42:82:49:02:3c:
f9:03:d0:7f:0a:7b:0a:21:34:31:b9:f4:ab:67:a1:
b8:be:25:cf:63:2e:8f:25:7c:6e:9e:99:04:9d:91:
65:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BB:97:02:A9:47:50:5D:6C:6D:08:D6:0B:4F:38:EA:95:01:66:BC
X509v3 Authority Key Identifier:
keyid:C7:CF:CC:D6:89:57:A0:F7:04:39:A8:D6:0F:F3:C8:B8:D9:11:A3:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8_M1olXoPcEOajWD_PIuNkRowg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/YLuXAqlHUF1sbQjWC0846pUBZrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b7387-3aae-497d-aabd-abb7438bc8a5/1/x8_M1olXoPcEOajWD_PIuNkRowg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1368::/48
Signature Algorithm: sha256WithRSAEncryption
58:1a:06:cc:7b:e2:1b:53:cf:64:95:5a:da:76:2b:fd:5a:f6:
3f:76:2e:6b:83:e1:c5:6f:51:57:3f:d4:7b:87:9b:55:99:90:
c5:4a:96:96:b0:2c:e9:87:0a:6b:b6:9e:19:0a:ae:29:74:5d:
d0:33:2b:36:0c:ba:35:3f:3c:55:15:c6:a4:41:70:11:fd:39:
82:14:a4:2a:6e:d6:34:88:9c:8f:44:56:70:fc:a8:d7:56:a5:
08:0e:9b:38:9f:b3:89:50:7e:00:14:27:35:de:32:68:97:70:
22:ef:92:a4:d8:4b:03:43:82:69:6d:98:7c:3d:21:12:0d:2b:
c5:f1:2f:f2:24:47:29:16:cd:43:05:1d:d1:f0:69:a2:ac:ee:
bc:29:54:bc:a5:a5:bc:2d:4e:21:97:68:f5:35:b9:4e:2f:a5:
c2:88:ad:5f:aa:49:5e:0f:0d:2b:7f:44:50:c2:47:92:b5:77:
6e:e9:dd:d0:de:27:4e:91:2e:8c:84:ce:27:ff:44:8f:26:65:
09:aa:14:c4:15:43:c5:fd:18:18:55:4a:e3:b3:4c:df:a0:88:
5f:bf:7e:50:53:87:7f:55:73:8c:1a:85:12:ea:de:ad:86:89:
66:8b:7d:84:69:aa:84:93:1a:27:de:0d:9c:71:f9:0f:c5:a6:
8a:2c:6b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:28 2024 by rpki-client on console-ams.rpki-client.org