Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/fmyzRuLpPBagwWaKRdtO3J2oUH4.roa
File: fmyzRuLpPBagwWaKRdtO3J2oUH4.roa (raw, json)
Hash identifier: 0/WRRt+piTpmAMtN+A+cKUNEI9grUepFZZ3kyR0kXd8=
Subject key identifier: 7E:6C:B3:46:E2:E9:3C:16:A0:C1:66:8A:45:DB:4E:DC:9D:A8:50:7E
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 025A7522
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/fmyzRuLpPBagwWaKRdtO3J2oUH4.roa
Signing time: Sat 01 Jan 2022 11:01:41 +0000
ROA not before: Sat 01 Jan 2022 11:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211072
IP address blocks: 2a05:4140:30::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39482658 (0x25a7522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 11:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e6cb346e2e93c16a0c1668a45db4edc9da8507e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:41:33:e6:40:84:d6:5b:a7:77:62:20:33:65:
0e:f7:84:e5:7d:af:95:42:44:aa:c9:be:d8:8f:49:
e6:22:90:93:11:1e:97:af:58:1e:c6:a9:74:5a:13:
a7:1e:21:e8:e4:25:39:a1:f4:7f:69:f1:d2:4a:6a:
a5:6f:68:b8:76:12:7d:58:f4:c9:b3:ec:08:0e:b0:
27:f3:35:5e:91:b4:62:f9:a8:4d:ab:82:e9:b3:9d:
cd:4a:c1:6a:c2:e5:f7:24:9b:89:56:0e:b5:3c:8d:
bf:f9:3d:a0:e7:ec:c2:93:30:de:31:84:a1:02:27:
9c:c7:1b:4c:65:6d:bc:24:f9:62:4f:01:c9:e5:d3:
1f:b7:46:ac:82:59:7f:90:4e:b0:fc:32:b9:c0:ba:
e8:e5:c8:1b:11:a7:11:d8:9d:03:2c:31:74:4c:f1:
e3:c3:39:a5:b4:cc:ae:57:30:0b:da:1c:e7:01:46:
d5:cd:dd:6a:29:1e:6a:75:9e:7e:db:cc:9b:88:3f:
41:c6:9c:67:09:53:0e:53:55:67:41:14:ea:12:1b:
73:b8:6c:69:db:ab:9d:63:df:2f:50:7a:77:2d:a4:
d9:be:f4:5a:e7:21:75:6e:25:15:47:15:6c:45:7d:
94:a6:4d:7b:33:28:ab:9d:44:be:e3:3a:19:86:1d:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6C:B3:46:E2:E9:3C:16:A0:C1:66:8A:45:DB:4E:DC:9D:A8:50:7E
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/fmyzRuLpPBagwWaKRdtO3J2oUH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:30::/44
Signature Algorithm: sha256WithRSAEncryption
2d:e0:bf:6c:4d:47:22:90:d8:f1:20:bc:a7:51:df:54:c1:75:
44:b4:33:17:85:9d:8a:54:ac:2b:bb:da:90:d2:db:8d:cc:ef:
f3:d2:fd:ab:ec:c5:a8:5f:5c:a6:58:3f:55:39:e5:6d:2a:6e:
13:9a:99:bb:c7:45:99:1e:f1:3b:df:a1:0b:c3:61:ee:ab:76:
61:e0:95:78:d4:c2:47:25:63:d7:03:41:7d:42:7a:23:19:d4:
16:f8:68:7d:e4:23:df:6a:1e:fc:34:24:72:70:82:0a:21:fd:
f8:76:25:e7:58:c7:81:88:89:ae:3c:f1:13:71:5d:86:fe:d5:
77:9a:17:b9:82:f6:f1:ff:f2:eb:c0:c8:36:f2:c3:b2:30:d3:
a6:7b:c6:97:84:dd:25:09:38:00:83:23:32:56:59:ff:87:52:
f0:d2:d6:c6:74:e0:92:be:34:78:f5:c5:88:30:06:8d:f2:b8:
c5:f1:cc:a4:fc:1d:12:87:51:f9:90:c5:5b:0e:b4:77:e1:dd:
a6:3f:d2:2b:b5:6d:71:bb:66:d3:ee:b4:ff:ef:b3:33:0a:87:
46:26:41:49:6f:84:b2:72:f4:e2:fc:f8:c4:46:78:b5:eb:1b:
84:c2:97:68:3d:17:6c:b7:60:1f:ed:7f:34:ea:a9:61:a8:a5:
78:3b:c7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:30 2024 by rpki-client on console-ams.rpki-client.org