Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/XrjssoLufrBBR07gNk5VSrUsZfk.roa
File: XrjssoLufrBBR07gNk5VSrUsZfk.roa (raw, json)
Hash identifier: /lMN7PYIXE045LhjVCoBgazxZRh3y8+PB+j8eBm2U7o=
Subject key identifier: 5E:B8:EC:B2:82:EE:7E:B0:41:47:4E:E0:36:4E:55:4A:B5:2C:65:F9
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 03D67D04
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/XrjssoLufrBBR07gNk5VSrUsZfk.roa
Signing time: Wed 08 Jun 2022 18:17:02 +0000
ROA not before: Wed 08 Jun 2022 18:17:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49245
IP address blocks: 2a05:4140:14::/48 maxlen: 48
2a05:4140:12::/48 maxlen: 48
2a05:4140:15::/48 maxlen: 48
2a05:4140:13::/48 maxlen: 48
2a05:4140:3::/48 maxlen: 48
2a05:4140:11::/48 maxlen: 48
2a05:4140:21::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64388356 (0x3d67d04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jun 8 18:17:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5eb8ecb282ee7eb041474ee0364e554ab52c65f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:e3:f0:8c:4b:47:3f:51:ce:40:88:6a:d8:
90:58:87:52:b6:3a:84:d5:3a:ae:92:bc:90:cd:ca:
b6:99:87:b8:98:a0:d5:88:bc:f3:df:78:42:c8:3c:
20:2b:da:4a:95:f0:a2:65:a5:e7:6f:72:83:95:e4:
a3:e0:24:24:a8:48:33:9c:8f:d6:2e:8b:17:67:38:
a6:b2:c6:d6:a7:54:c7:13:78:48:e2:d5:8a:43:84:
23:9a:a1:e9:7f:17:19:e4:08:9d:df:33:12:4e:db:
f6:bc:4a:27:fe:72:ba:d7:4d:d7:8a:e6:46:7e:aa:
6c:35:3c:0a:6a:1a:c5:f6:6a:01:0e:0e:02:4b:78:
12:6c:99:44:1a:37:06:31:7e:5c:10:b6:cf:99:32:
b4:2e:e3:ee:27:12:ab:2d:7b:91:d3:09:67:e0:1e:
a5:d0:2f:47:b3:b1:ac:94:f2:38:59:9e:44:bb:22:
29:f4:4f:e6:b3:a5:75:cf:26:ad:4a:6e:ad:08:5c:
de:52:bb:d7:de:8e:5e:b7:4e:d1:88:43:49:b7:c8:
bd:c0:8f:d3:03:4a:27:7b:28:b4:4b:63:70:9f:af:
28:0b:4c:99:2d:30:ff:0b:65:9e:fe:3d:f5:4c:b4:
cf:76:4b:0e:7b:37:db:25:ef:94:3c:da:05:ec:69:
38:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B8:EC:B2:82:EE:7E:B0:41:47:4E:E0:36:4E:55:4A:B5:2C:65:F9
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/XrjssoLufrBBR07gNk5VSrUsZfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:3::/48
2a05:4140:11::-2a05:4140:15:ffff:ffff:ffff:ffff:ffff
2a05:4140:21::/48
Signature Algorithm: sha256WithRSAEncryption
21:6d:0a:ac:a3:2d:50:9d:ac:97:2a:29:5d:a1:cd:c8:33:0f:
ba:48:4a:d8:b9:65:5c:19:9a:1b:cf:09:b8:8a:f2:4b:f9:6b:
5c:29:45:73:31:8e:d5:2b:51:9b:10:7c:54:4c:53:1a:0d:a6:
58:7b:21:f6:85:ce:20:60:59:38:23:9d:fa:dd:8b:c8:f6:3b:
13:5e:5a:91:00:6c:03:14:27:94:2d:3e:62:7b:a4:17:a3:ed:
10:48:4a:98:e2:6f:4f:b4:03:91:85:e7:b3:1b:3e:de:99:a8:
32:dd:7a:89:c6:14:67:31:22:1e:9b:4f:2d:46:22:9d:d5:1f:
07:ed:eb:88:64:44:d2:5d:84:d0:9a:6d:d2:d0:61:33:e6:2a:
e0:32:05:41:e2:a0:7f:93:c5:08:15:01:36:52:43:58:a6:ed:
71:94:d3:af:99:f7:c3:35:91:db:7d:6f:06:62:99:3c:5a:d5:
7e:cd:41:0f:32:5b:e4:d5:94:31:cd:14:3c:dd:04:4f:5e:55:
5f:70:6c:67:6e:0f:16:6b:b1:42:d8:ec:68:82:8b:b0:e5:48:
0f:45:48:c6:8d:02:b9:3c:8c:a8:67:b7:95:33:48:15:ee:54:
e2:d8:8c:e5:11:ab:0a:81:7b:45:d0:14:dd:d9:44:03:79:f9:
29:10:4f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:53 2024 by rpki-client on console-fra.rpki-client.org