Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/gEIf39GNHZ2qcLj7WW7Um93a-mY.roa
File: gEIf39GNHZ2qcLj7WW7Um93a-mY.roa (raw, json)
Hash identifier: WN8mWZ5bfH2oA9AvdhIOIKWXvrFpE0hZkfJ1VmS++vs=
Subject key identifier: 80:42:1F:DF:D1:8D:1D:9D:AA:70:B8:FB:59:6E:D4:9B:DD:DA:FA:66
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 0184A13FB01CD556B94BC4BF8DF2E873FC9E
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/gEIf39GNHZ2qcLj7WW7Um93a-mY.roa
Signing time: Tue 22 Nov 2022 21:30:16 +0000
ROA not before: Tue 22 Nov 2022 21:30:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202726
IP address blocks: 2a05:4140:1f80::/43 maxlen: 43
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a1:3f:b0:1c:d5:56:b9:4b:c4:bf:8d:f2:e8:73:fc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Nov 22 21:30:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80421fdfd18d1d9daa70b8fb596ed49bdddafa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4d:cf:c9:c3:02:7d:7a:90:5e:82:b9:99:38:
07:57:3d:72:5a:f1:a9:75:fd:81:9e:6e:9c:aa:48:
db:32:14:91:27:96:c1:f0:98:22:27:25:4e:a5:ac:
c8:77:a5:71:aa:bf:d4:b6:c5:15:10:7c:00:c2:97:
a0:10:d3:a4:52:68:ae:48:49:16:65:e1:80:e4:82:
d1:c6:7f:5b:79:c4:00:ce:1f:e2:ee:1a:51:6f:b9:
e7:ea:0d:1e:a1:69:17:d8:5c:87:82:06:e5:2c:86:
89:58:9a:d7:4b:21:58:e3:8b:2c:84:ff:bc:89:e4:
7a:96:32:1d:ac:0f:47:05:a9:d7:83:03:33:88:62:
6d:de:3b:a8:98:e0:42:95:03:65:77:7e:6f:5d:ea:
d1:68:f9:6c:a5:4b:08:b8:9b:04:95:98:87:c4:7e:
fc:ea:c7:25:ed:45:2b:41:4a:2e:4b:49:97:c7:4d:
15:3f:b4:a8:17:ef:97:67:85:23:44:c0:9a:ab:45:
d6:22:f1:85:33:5b:06:3b:f7:f9:37:f7:8d:9f:4d:
86:28:31:a7:94:12:fe:33:6b:5d:56:f6:f9:26:35:
d6:d6:e0:83:09:28:da:0b:3e:00:31:82:e9:15:4e:
e8:c1:20:e5:75:f6:71:ed:f7:72:b3:2a:b7:3a:13:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:42:1F:DF:D1:8D:1D:9D:AA:70:B8:FB:59:6E:D4:9B:DD:DA:FA:66
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/gEIf39GNHZ2qcLj7WW7Um93a-mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:1f80::/43
Signature Algorithm: sha256WithRSAEncryption
3f:3e:53:04:50:aa:75:43:d0:01:cf:a6:db:90:1f:66:38:69:
5f:73:ed:38:a1:b3:9e:4a:2c:7b:a5:d8:04:fe:22:de:b9:33:
4c:87:2e:ec:d3:be:bc:71:e4:dc:cf:da:d3:67:85:09:23:12:
27:4a:73:e2:01:f9:91:43:a9:63:9a:0a:3a:91:61:71:bc:f3:
82:2d:b8:7f:2f:75:27:57:de:d6:6e:c7:7a:0f:38:8e:77:f4:
5f:39:38:c1:8e:8f:3a:de:29:bc:14:3b:a1:af:94:ef:c5:60:
a9:d1:f5:12:26:dd:1d:90:f2:0b:cc:72:b5:27:ff:d2:da:63:
a2:8b:60:b5:98:25:62:92:55:79:32:1f:67:55:55:9d:dd:7a:
46:fb:e8:0c:2b:e0:e7:8f:cf:3c:5d:82:5e:fc:4b:9a:b8:75:
11:0a:94:3a:27:f7:02:30:72:07:a2:18:3a:b2:30:de:a4:e0:
ea:04:ce:06:c5:46:c1:22:ca:61:fe:fd:7a:c5:5e:53:a0:1c:
b0:b8:61:fa:c6:25:b9:48:02:cf:f2:ed:50:6d:cf:72:c6:5f:
80:ee:b9:56:70:14:df:20:6d:38:2e:6d:e1:3c:96:35:0d:a4:
7d:08:4f:39:ab:30:b6:d9:24:fe:f1:d3:8c:74:51:e5:f6:2a:
62:74:ea:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:53 2024 by rpki-client on console-fra.rpki-client.org