Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/OgYcSttAxEPCqqMQUHhTGELrSpY.roa
File: OgYcSttAxEPCqqMQUHhTGELrSpY.roa (raw, json)
Hash identifier: qXhYxcJIwwBqLTt0GEdsXfJQWlaV1Iw1XF51bU8P6q0=
Subject key identifier: 3A:06:1C:4A:DB:40:C4:43:C2:AA:A3:10:50:78:53:18:42:EB:4A:96
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 037C569A
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/OgYcSttAxEPCqqMQUHhTGELrSpY.roa
Signing time: Mon 02 May 2022 16:24:25 +0000
ROA not before: Mon 02 May 2022 16:24:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211522
IP address blocks: 2a05:4140:202::/48 maxlen: 48
2a05:4145:1::/48 maxlen: 48
2a05:4140:201::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58480282 (0x37c569a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: May 2 16:24:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a061c4adb40c443c2aaa3105078531842eb4a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e2:50:af:90:86:74:b3:4c:69:2e:29:4f:e6:
92:10:e9:ab:43:9d:6b:e8:f9:c0:9e:19:4a:06:d7:
22:a9:a7:50:5b:75:d0:d8:46:14:9a:61:c7:96:4a:
4f:68:14:94:96:f1:ab:ea:33:ef:86:39:df:4e:ec:
9b:1c:23:98:f4:95:59:c2:11:f4:01:9d:5c:dc:6c:
c4:52:c0:8c:56:f4:ca:b4:99:06:01:53:d7:9e:b7:
e5:75:aa:83:0e:9e:65:f1:60:07:c3:3d:21:7f:74:
2b:b8:98:0d:1a:ff:61:e5:d5:4e:04:f3:bb:41:ca:
f0:e6:46:69:25:1f:cb:97:3b:d3:ae:33:b8:b6:14:
68:10:78:15:54:d0:35:c6:f0:ef:4a:26:ab:1e:69:
04:cb:a5:c8:1c:dc:cb:7f:6b:f8:3d:ba:c5:16:ab:
16:d6:9d:83:95:28:1c:e5:55:80:f6:83:e2:97:1f:
69:44:bc:47:78:61:4d:df:89:d7:e5:25:11:2d:9e:
e0:ff:53:cc:22:75:3c:ea:9a:12:99:f9:01:de:14:
04:d7:44:5a:e8:b4:5d:d5:f6:50:80:d2:49:42:66:
99:7b:a1:18:ca:38:27:2e:2f:a1:86:8b:ec:5f:1d:
cf:c7:a9:51:5d:c4:59:32:19:00:91:17:dd:82:8c:
6e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:06:1C:4A:DB:40:C4:43:C2:AA:A3:10:50:78:53:18:42:EB:4A:96
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/OgYcSttAxEPCqqMQUHhTGELrSpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:201::-2a05:4140:202:ffff:ffff:ffff:ffff:ffff
2a05:4145:1::/48
Signature Algorithm: sha256WithRSAEncryption
46:18:79:48:1d:35:f0:2c:8d:ac:21:0b:b5:f6:ab:6b:f3:6f:
a6:04:e1:fc:6b:ac:8c:a5:97:ae:44:e2:f8:09:ac:9f:b0:a9:
ff:50:cc:d5:97:05:e5:8c:33:51:a6:b8:c5:e9:12:de:05:c4:
f6:19:01:0f:ed:3b:27:41:7d:9b:02:c2:8f:cc:e6:b7:46:2d:
ac:80:2e:a4:69:32:94:da:5d:fa:7b:c8:cf:ec:d8:2f:71:6d:
78:59:11:3a:0c:ef:0d:f3:33:11:ad:7c:8b:3f:13:5e:d7:5c:
32:a7:ec:9f:3d:bd:ae:80:b5:a7:75:93:98:d4:83:94:24:21:
d1:d0:dc:10:9a:6d:f2:0f:94:77:aa:cc:5a:f8:86:1b:29:5d:
96:10:38:2c:94:8c:5d:b2:ea:fc:8f:99:1e:f4:b6:54:a6:80:
5d:d5:8c:d4:37:00:d9:46:1a:e4:46:dd:f1:c4:0d:56:35:71:
77:a6:8a:0b:7d:e3:26:ab:31:cf:60:08:f1:f0:72:2f:56:e5:
42:93:2e:d4:e8:ce:f0:0a:07:d7:e1:de:e0:01:0a:1e:ad:27:
d6:24:29:20:23:06:64:25:3b:ed:c2:34:65:f8:53:df:6d:6a:
d3:74:67:0c:15:d3:b0:36:de:ea:26:d4:12:d7:7d:27:47:db:
9a:9e:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:53 2024 by rpki-client on console-fra.rpki-client.org